Privacy Policy

Personal data protection policy, so-called GDPR
The “Polska na rowerze” (Poland on Bike) Foundation cares for the protection of its clients’ personal data. We strive to keep them private. In connection with the new regulations in force from May 25, 2018, resulting from Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC (General Data Protection Regulation) (in short called the “Regulation”). We ask you to read the following document carefully to fully understand our privacy policy, which we have been using since the beginning of our operation. In the rest of the text, we answer the basic questions related to the GDPR.

Who is the administrator of personal data?
The administrator of personal data is the Foundation “Poland on a bike” with headquarters at Gwardyjska 22 Street in Nowy Sącz 33-300. The Foundation is listed in the National Court Register under the KRS number 0000 713003; Taxpayer no. 734 355 50 72; REGON 369231890. Phone no. +48 607 505 447, email address: poland.on.bike@gmail.com

How can I contact you regarding my data?
To receive information regarding personal data, please contact us by email at poland.on.bike@gmail.com

For what purpose will my data be processed?
The “Poland on a Bike” Foundation processes personal data for the purposes of:

• performance of the contract for the provision of tourist services (legal basis: Article 6 (1) (b) of the Regulation),
• implementation of the legitimate interests of the Foundation, i.e. direct marketing of its own products and services, and personalization of the marketing offer (legal basis: Article 6 (1) (f) of the Regulation),
• financial settlements and accounting reporting (legal basis: Article 6 (1) (c) of the Regulation),
• verification of the Customer’s identity (legal basis: Article 6 (1) (c) of the Regulation),
• determination, investigation, defense of claims, in principle up to 10 years due to the limitation periods for proceedings (legal basis: Art. 118 et seq. of the Civil Code).

What data will be processed?
The data we will process name (names), surname, date of birth, gender, e-mail address, telephone number, home address. If required by the destination of travel also in terms of data from the identity document (ID card or passport depending on the country of departure or offer). In addition to the data listed above, these will include place of birth, citizenship, series, and number of the document, issuing authority, date of issue and validity of the document. Furthermore, data may be processed that allows identification of the device you use for the purposes of websites and mobile applications offered by the Polish Cycling Foundation, such as the IP address and MAC ID.

Who will my personal data be shared with?

Personal data will be made available to the minimum necessary for the implementation of services and legal requirements to other recipients, i.e.: carriers, insurers, hotel service providers, additional service providers, contractors providing services to Poland on a Bicycle Foundation. Personal data may also be made available to other participants of the expedition carried out under the same contract.

Will the data be transferred outside the European Economic Area?
In order to implement the contract concluded with Poland on a Bicycle Foundation, data may be transferred to a third country outside the European Economic Area (EEA), in which data may be protected less than in the EEA. The Foundation informs that the transfer takes place in a secure, controlled and secure manner.

How long will my data be processed?
The data will be stored/processed:

• if the data relating to the contract concluded with the Poland on a Bicycle Foundation, not less than for the period necessary to perform the contract, perform the obligations of accounting reporting and limitation of claims that may result from the contract (i.e., in principle, up to 10 years from the performance of the contract),
• if they are collected for a purpose other than the performance of the contract, then until the consent to their processing for this purpose is withdrawn.

What rights do I have regarding my data?
The rights that every person has are:

• the right to request access to your personal data (Article 15 of the Regulation) and to their rectification (Article 16 of the Regulation),
• the right to transfer data (Article 20 of the Regulation),
• the right to delete data (Article 17 of the Regulation) in the cases specified in the Regulation
• the right to limit their processing (Article 18 of the Regulation).
• the right to object to the processing of your personal data (Article 21 of the Regulation). In the event of an objection lodged before or during the performance of the contract, the submission will result in the inability to perform part of all services under the contract and may be treated as a termination.
• the right to withdraw consent (Article 6 (1) (a) of the Regulation) in cases where processing takes place on the basis of the given consent
• the right to lodge a complaint to the supervisory body (i.e. until 25/05/2018 to the General Inspector for Personal Data Protection, and after that date to the successor’s body) if it is found that the processing of your personal data violates the provisions of the Regulation

Where did you get my data from?
Your data was obtained directly from you during the reservation of the service or registration to the reservation system. If the booking was not made in person, they were obtained from the person making the reservation for you. Data may have been obtained using the contact form or special applications or using the newsletter form.

How do you protect my data?
We provide appropriate technical and organizational measures to ensure the security of personal data made available by users of the website, in particular preventing access to them by third parties or their processing in violation of the law, preventing data loss, damage or destruction.