Who are we and how to contact us?
The controller of your personal data is the company: Sukces Strony Krzysztof Trynkiewicz located at 18F/107 Dąbska Street, Kraków, Poland, Tax Identification Number (Polish “NIP”): 6831975121.
Further in this privacy policy, we will be calling ourselves “Controller”.
You can contact us by e-mail: contact@experiencekrakow.com
What personal data do we process and why?
Processing of personal data is done in accordance to the European Union’s Regulation no. 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC. Further in this privacy policy, we will be calling this General Data Protection Regulation in short: “GDPR“. The full text of this regulation is available at:
https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679&from=EN
The information provided in this privacy policy applies to personal data processing in regard to visiting and using this web site. The Controller can process data in other fields and scopes, which are not related to this web site. An example of that is signing a contract on paper. Other scopes of personal data processing are subject to other privacy policy terms, relating to those particular tasks and services, and published accordingly.
The Controller processes personal data of people who visit his web site for the following purposes:
- in order to perform or prepare a contract or to take steps prior to entering into a contract (on the basis of art. 6, par. 1, letter b of GDPR), in particular due to submitting a contact form on the web site,
- in order to be compliant with a legal obligation to which the Controller is subject to (for example: for invoicing; on the basis of art. 6 par. 1 letter c of GDPR),
- for statistical purposes (including monitoring traffic on the web site; on the basis of art. 89 par. 1 of GDPR),
- for the purposes of the legitimate interests pursued by the controller or by a third party, including marketing (on the basis of art. 6 par. 1 letter f of GDPR).
In the case of sending out regular e-mails of informative or marketing-related content (further called a “newsletter”), the basis of such marketing is a consent of the user, which he or she provided during signup (on the basis of art. 6 par 1 letter a of GDPR).
The personal data which we process in particular consist of: a first name, last name, company name, tax identification number, geographical address, e-mail address, phone number, device’s internet IP address and all other data which you freely provide us.
Providing your personal data is voluntary, but necessary to prepare an offer or take required steps prior to preparing an offer. Not providing your personal details will prevent us from preparing an offer and performing a contract.
Not providing an e-mail address during newsletter signup will prevent us from sending you e-mails. Signing up to our newsletter is optional.
If you submit a contact form on our web site or send us an e-mail, your message will be delivered to our e-mail account, which is provided by and which is therefore technically accessible by our hosting provider, specified below. If you call us, your phone number will be saved in our device’s call history log.
The time of storing and processing your personal data relating to correspondence and phone calls depends on the purpose, on the basis of which you contact us. By default and usually, we will store your e-mails, submitted forms and phone call history logs as long as: you don’t ask us to remove them, or we manually or automatically remove them (for example in order to free up space on our e-mail account or in the phone’s memory).
In the case of regular or returning Customers, in order to ease our cooperation, we might save their phone numbers, first names, last names and identification symbols in the memory of our phones.
Therefore, if you want to be sure that the e-mail or form which you sent to us, or a phone call history log, or a phone number saved in our phone’s memory, will no longer be processed, please contact us and ask us to remove that data.
We (as well as our web hosting provider, specified below) also make regular and automated backups of our web site, e-mails and submitted forms. These backups (which include your personal data) are stored on our web hosting provider’s servers.
On some of the pages of our web site you may be able to leave a comment, which requires submitting your first name, last name and e-mail address. Providing your web site’s address is optional.
Withdrawal of consent to personal data processing
If processing of your personal data is based on your consent or in order to perform or prepare a contract or on taking steps prior to preparing a contract, you have the right to withdraw your consent at any time. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.
Withdrawing consent to e-mail marketing (newsletter) is possible by clicking a link, which is included at the end of marketing e-mails you receive.
Withdrawing other consents and inquiries is possible by sending an e-mail to the Controller.
Recipients of your personal data
The Controller is sharing your personal data with some recipients (companies and institutions), who process your data on his behalf, based on contracts performed between him and these recipients. An example of a recipient would be an online payment service provider, who needs your personal data to accept payments for your purchases.
Your personal data can also be shared with the following recipients, who are located in the so-called “third countries” (outside othe European Union):
- our web server hosting provider, who keeps our web site and e-mail accounts online: DreamHost, PMB #257, 417 Associated Road, Brea, CA 92821, USA. DreamHost uses the Model Clauses to meet GDPR compliance under EU regulations. The Model Clauses can be found toward the end of the Data Processing Addendum.
- the Google Inc. company, located in the USA (and Ireland under the name Google LLC), which is part of the EU-USA Privacy Shield Framework and processes data in accordance with the GDPR terms and on the basis of the GDPR standard contractual clauses, in order to provide web site traffic analytics (called Google Analytics, the detailed contract is available at https://privacy.google.com/businesses/processorterms/). Obtaining a copy of your personal data is possible by contacting the Controller, if your personal data is actually processed. The statistical data from Google Analytics is processed collectively and therefore usually it’s not possible to identify a person using this data.
Google may also be the recipient of other personal data (like your device’s internet IP address, location, content of the form fields, your first and last name), in order to verify if the forms which you fill out are not automatically submitted (the so-called “reCAPTCHA” mechanism). - comments which you submit via our web site (including their content, your first and last name, your e-mail address and web site address) may be shared with Automattic Inc. company, based in USA (60 29th Street #343, San Francisco, CA 94110, United States of America; contact: https://automattic.com/contact/), which is part of the EU-USA Privacy Shield Framework and processes data in accordance with the GDPR terms, in order to verify if an acutal human wrote the comment (and not an automated machine).
- our newsletter is sent using MailChimp, which belongs to The Rocket Science Group LLC d/b/a MailChimp, located in the USA, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, Georgia 30308 (contact: legal@mailchimp.com), which is part of the EU-USA Privacy Shield Framework and processes data in accordance with the GDPR terms,
Other content providers and personal data controllers
Some of the content on our web site is loaded from other web sites, for example:
- the Facebook “Like box”,
- Google Maps,
- YouTube videos.
Loading this content is performed exactly as if you visited web sites of these content providers directly (so: Facebook, Google and YouTube). Therefore, this content is subject to the privacy policy terms of those content providers, as they are in fact the personal data controllers of your data which they possess.
In particular, you might be logged in to one of those content provider web sites, and so the content which you will see from them on our web site will be automatically adjusted to your content provider account settings.
Our web site has no control over how these external content providers process your personal data in the mentioned regard.
Automated decision-making and profiling
By “profiling”, we mean making a decision based solely on automated processing, which produces legal effects for you or significantly affects you.
The Controller does not perform profiling of your personal data in regard to this web site.
Profiling is done by Google in order to serve advertisements that match your browsing history, interests and your settings. You can set up Google’s advertising profiling here.
Your rights regarding personal data
You have the right to know if we process your personal data, to access it, to rectify it, to make us remove it, to receive it in a portable format, to restrict processing and in some occasions – to object processing of your personal data, including profiling, automated decision-making and when the processing is being done on the basis of a legitimate interest pursued by the Controller.
In order to exercise your rights, contact the Controller.
You can also lodge a complaint with a supervisory authority (the President of the Personal Data Protection Office in Poland, or an institution which is performing his tasks in accordance with GDPR terms).
How long is your personal data stored?
Your personal data, which is stored and processed based on your consent, are stored and processed until you withdraw your consent or the Controller removes your data (for example if he closes his business).
Otherwise, your personal data is stored only as long, as it is needed to fulfill the purpose of processing it, with exemptions provided within GDPR.
In particular, inquiries regarding cooperation are stored until you ask us to remove them. This lets us contact you and get back to future negotiations easier.
Cookies
If you leave a comment on our site you may opt-in to saving your name, email address and web site in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you have an account and you log in to this site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
This web site uses Google Analytics, a service which analyses web site viewing habits, which is run by Google, Inc. (“Google”). Google Analytics uses “cookies”, which are text files stored on the user’s device in order to analyse the way the users use the web site. Information gathered with the help of cookies (including your IP address) is send to Google and stored on its servers in the United States of America.
Google will use this information in order to rate and give feedback about the users’ behaviors and usage methods of the web site, which includes creating reports for web site operators and providing other services relating to web site traffic and using the internet.
Google may also pass this information to third