GDPR INFORMATION CLAUSE REGARDING THE PROCESSING OF PERSONAL DATA
1. Data Controller
The controller of your personal data provided in the booking form is:
Gdańskie Opowieści
hereinafter referred to as the “Controller”.
2. Purpose of processing personal data
Personal data provided in the booking form is processed for the purpose of:
-
accepting and managing tour reservations,
-
contacting Participants regarding the organization of the tour,
-
providing important information related to the booked service,
-
fulfilling legal obligations related to running a business.
3. Scope of processed data
The Controller may process the following personal data:
-
name and surname,
-
e-mail address,
-
phone number,
-
number of Participants,
-
selected tour date,
-
other information voluntarily provided by the Participant.
4. Legal basis for processing
Personal data is processed based on:
Article 6(1)(b) GDPR
– processing necessary for taking steps prior to entering into a contract and for performing the service.
Article 6(1)(c) GDPR
– processing necessary to comply with legal obligations.
Article 6(1)(a) GDPR
– where the Participant voluntarily provides consent, for example for marketing activities or the use of image.
5. Booking form provider – Google Forms
The booking form may be operated using the Google Forms service.
Information provided in the form may be stored and processed using Google services used by the Controller for reservation management.
Service provider:
Google Ireland Limited
Gordon House, Barrow Street, Dublin 4, Ireland.
Google processes data in accordance with its own privacy policy and terms of service.
6. Data recipients
Personal data may be transferred only to entities that provide services necessary for running the business, including:
-
IT service providers,
-
payment service providers,
-
accounting services.
The Controller does not sell personal data or provide it to third parties for purposes unrelated to providing services.
7. Storage period
Personal data will be stored for the period necessary to:
-
process the booking,
-
provide the service,
-
comply with legal obligations,
-
handle possible complaints or claims.
8. Rights of the data subject
You have the right to:
-
access your personal data,
-
correct inaccurate data,
-
request deletion of data where legally permitted,
-
restrict processing,
-
object to processing,
-
withdraw consent where processing is based on consent,
-
lodge a complaint with the relevant supervisory authority.
9. Voluntary provision of data
Providing personal data is voluntary; however, providing required information is necessary to complete the booking and provide the tour service.
