# Privacy Policy

- Link: https://warsawtravelers.pl/en/privacy-policy/
- Published: 2024-07-02T21:47:53+02:00
- Author: Filip Chochół

Ten wpis jest również dostępny w języku:  [⌊Switch to Polski⌉Polski](https://warsawtravelers.pl/polityka-prywatnosci/)

This Privacy and Cookies Policy (“Policy”) describes the rules for processing the
personal data of users who use the services provided by Warsaw Travelers (“Administrator”).
These services are provided via the website warsawtravelers.pl (“Website”).

Using the Website signifies acceptance of the terms of this Policy.

The Administrator applies appropriate organizational and technical measures to ensure
the highest level of protection for your personal data. They guarantee that the 
data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament
and of the Council of 27 April 2016 (“GDPR”). Additionally, the Administrator complies
with the provisions of the Personal Data Protection Act of 10 May 2018 and other
applicable legal regulations in this regard.

## **Contact with the Administrator**

The Administrator has not appointed a Data Protection Officer (DPO) and independently
handles the responsibilities related to personal data processing. For matters regarding
personal data processing, you can contact the Administrator electronically via the
form in the “Contact” section.

## **Information about Processed Personal Data**

Using the services provided by the Administrator through the Website requires the
processing of your personal data. Below, you will find detailed information about
the purposes and legal bases for processing.

### **_Email Contact_**

To contact the Administrator via email, including through the contact form, it is
necessary to provide an email address. Additionally, you may include other personal
data in the message. Providing this data is voluntary but essential for establishing
contact.

The Administrator processes personal data to enable the establishment and maintenance
of contact, based on your consent resulting from initiating the contact (Article
6(1)(a) GDPR). After the contact ends, the data is processed for the purpose of 
archiving correspondence for internal needs (Article 6(1)(c) GDPR).

### **_Comments_**

To add a comment on the Website, it is necessary to provide an email address and
username. Additionally, you may voluntarily include other personal data in the comment.
The email address is required and is used solely for spam verification or displaying
the user’s avatar; it is not shared with third parties.

The data provided when adding a comment is processed for the purpose of publishing
it on the blog. The legal basis for processing this data is your consent resulting
from adding the comment (Article 6(1)(a) GDPR).

The Administrator will process the data as long as the comments are available on
the blog. If you request the removal of a comment, your data will also be deleted
from the database.

The Administrator is not responsible for the content of comments posted by users.
The Administrator reserves the right not to publish comments that are spam, offensive,
contain vulgar language, illegal content, or include links to other websites.

When visitors leave comments on the site, we collect the data provided in the comment
form, as well as the visitor’s IP address and browser identifier (user agent) to
help detect spam.

An anonymized string created from your email address (a so-called hash) may be sent
to the Gravatar service to check if you are using it. The Gravatar service’s privacy
policy is available at: [https://automattic.com/privacy/](https://automattic.com/privacy/).
After your comment is approved, your profile picture will be publicly visible in
the context of your comment.

## **Recipients of Personal Data**

The Administrator’s subcontractors, such as software providers, payment service 
providers, accounting offices, hosting providers, as well as entities providing 
marketing and statistical services, may process your personal data. Each of these
entities guarantees the implementation of appropriate protective and security measures
for personal data, in compliance with legal regulations.

Authorized state authorities may receive your personal data in connection with ongoing
proceedings. This data is provided upon their request, after meeting the conditions
confirming its necessity.

The Website may contain links to other websites. These will open in a new browser
window or in the same window. The Administrator is not responsible for the content
provided by these websites. The user is obliged to review the privacy policy or 
terms of service of those websites.

## **Rights**

The GDPR grants you the following potential rights regarding the processing of your
personal data:

 * the right to access personal data,
 * the right to rectify personal data,
 * the right to erase personal data,
 * the right to restrict the processing of personal data,
 * the right to object to the processing of personal data,
 * the right to data portability,
 * the right to withdraw consent for the processing of personal data, if such consent
   was given.

You also have the right to file a complaint with the President of the Office for
Personal Data Protection if you believe that the processing of personal data violates
GDPR regulations.

## **Cookies**

The Administrator informs that the Website uses “cookies,” which are installed on
your end device.

The Administrator uses cookies to ensure the proper functioning of the Website, 
as well as for statistical and marketing purposes. The data collected via cookies
does not allow the Administrator to identify you.

The Administrator may place both persistent and temporary cookies on your device.
Temporary cookies are typically deleted when you close your browser, while closing
the browser does not remove persistent cookies.

Cookies can be divided into first-party and third-party cookies. First-party cookies
are primarily essential cookies of the Website, which enable the proper and secure
functioning of the Website (e.g., adjusting the website layout to your device’s 
screen). Therefore, disabling them is not possible, as their operation is a condition
for using the Website.

The Administrator displays content from social media services such as Facebook on
the Website and uses marketing tools available through this platform. As a result,
Facebook cookies are used on the Website.

The Administrator also uses analytical tools such as Google Analytics, which collect
anonymous information about your visits to the site, such as the subpages you viewed,
the time you spent on the site, and the transitions between subpages. For this purpose,
Google Analytics cookies are used.

During your first visit to the Website, you will see information regarding the use
of cookies. By accepting and closing this information, you consent to the use of
cookies in accordance with the provisions of this Policy. You can always withdraw
your consent by deleting cookies and changing your cookie settings in your browser.
However, please note that disabling cookies may cause difficulties in using the 
Website.

This Policy is effective as of July 1, 2024.
