1. General Information

This Privacy Policy defines the rules for processing and protecting personal data by DISCOVER POLAND TOURS Sp. z o.o., with its registered office at ul. Zgodna 1, 32-600 Broszkowice, NIP: 5492440798, entered in the National Court Register under number KRS 0001009425, hereinafter referred to as the “Administrator” or the “Company”.

The Administrator processes personal data in accordance with applicable law, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (“GDPR”).

2. Data Controller

Personal Data Controller:
DISCOVER POLAND TOURS Sp. z o.o.
Ul. Zgodna 1, 32-600 Broszkowice
NIP: 5492440798
E-mail: manager@oldtreevilla.pl
Phone: 780 151 777

3. Scope of Processed Data

• first and last name,
• e-mail address, phone number,
• residential address (if required for invoicing or transport arrangements),
• passport or ID card details (for international trip organization),
• payment data (e.g. account number, invoice details),
• data related to participation in tours, preferences, special needs (e.g. diet, disability),
• data contained in correspondence or contact forms.

4. Purposes and Legal Basis of Processing

5. Data Recipients

• IT, accounting, and marketing service providers,
• travel agencies, hotels, transport companies – where necessary for service execution,
• public authorities – if required by law (e.g. Tax Office),
• insurance companies (for participant insurance purposes).

Data will not be transferred outside the European Economic Area (EEA) unless necessary for the performance of a travel service (e.g. trips outside the EEA).

6. Data Retention Period

• for the duration of the contract and for the period necessary for pursuing or defending claims (up to 6 years),
• data processed on the basis of consent – until it is withdrawn,
• accounting data – for 5 years after the end of the tax year, in accordance with applicable law.

7. Rights of Data Subjects

• access to data,
• rectification,
• erasure (“right to be forgotten”),
• restriction of processing,
• data portability,
• objection to processing,
• withdrawal of consent (if processing was based on consent),
• lodging a complaint with the President of the Personal Data Protection Office (UODO).

8. Cookies and Website

Our website may use cookies in order to:

• ensure the proper functioning of the website,
• analyze site traffic (e.g. Google Analytics),
• personalize content or offers (marketing purposes).

Details are provided in the Cookie Policy available on our website.

9. Data Security

We have implemented appropriate technical and organizational measures to ensure the protection of personal data against unauthorized access, loss, destruction, or disclosure. Data is stored in secure IT systems with restricted access.

10. Changes to the Privacy Policy

We reserve the right to modify this Privacy Policy. The current version is always available on the Company’s website. We will notify users of any significant changes by e-mail or at the time of their next interaction with us.