Privacy Policy

1. General information

This Privacy Policy sets out the rules for collecting, processing and using the personal data of users of dolinachocholowskaparking.pl (the “Website”).

We take care to protect the data entrusted to us and comply with applicable law, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).

2. Data controller

The controller of personal data collected through the Website is:

3. Purposes, legal grounds and retention periods

Users’ personal data is processed for the following purposes:

• a) Handling enquiries and reservations through the parking reservation form. We process the reservation date, vehicle type, number of spaces, first and last name, email address, telephone number, vehicle registration number, browser language and IP address. Legal basis: Article 6(1)(b) GDPR. Retention period: for the time required to handle the enquiry or until claims arising from the agreement become time-barred.
• b) Ongoing communication through the Tawk.to online chat. We process data voluntarily provided in the chat window, such as name, email and message content. Legal basis: Article 6(1)(f) GDPR. Retention period: until the conversation ends or consent is withdrawn.
• c) Analytics and statistics. After obtaining voluntary consent, we use Google Analytics to analyse Website activity and the successive reservation steps. We may store campaign UTM parameters, the landing page, limited referrer information, device category and a random analytics session identifier with the reservation. We do not send Google the customer’s name, telephone number, email address, vehicle registration number or private payment-status token. Legal basis: Article 6(1)(a) GDPR (consent). Retention period: according to Google Analytics configuration, while attribution data linked to a reservation is retained for the applicable reservation-data period. Consent can be withdrawn at any time in cookie settings.
• d) Direct marketing where the user has given optional consent. We process the email address and telephone number. Legal basis: Article 6(1)(a) GDPR. Retention period: until consent is withdrawn.
• e) Processing and settling online payments. We provide PayU with the data required to create and handle a payment, including the amount, order identifier and basic buyer details. We retain transaction statuses and identifiers needed to perform the agreement, process refunds and complaints and comply with accounting duties. We do not receive or store full card or online-banking login details. Legal basis: Articles 6(1)(b) and 6(1)(c) GDPR. Accounting data is retained for the period required by tax and accounting law, normally five years from the end of the year in which the tax payment deadline expired, while data needed to defend claims is retained until those claims become time-barred.

4. Data recipients and transfers outside the EEA

To operate the Website and reservation system correctly, the Controller uses external service providers that may process data:

• Cloudflare Inc. (USA) – website infrastructure and Cloudflare Workers processing form submissions.
• Resend Inc. (USA) – automatic reservation email notifications.
• Tawk.to Inc. (USA) – live chat services.
• Google LLC (USA) – statistics and analytics through Google Analytics.
• PayU S.A., with its registered office at ul. Grunwaldzka 186, 60-166 Poznań, Poland, and entities participating in the selected payment method – creation, authorisation and settlement of payments, refunds, complaints and fraud prevention.

Entities operating in the European Economic Area process data under European Union law. Where data is transferred outside the EEA, we use an appropriate legal basis and safeguards required by the GDPR, including an adequacy decision, the EU-U.S. Data Privacy Framework or standard contractual clauses.

5. Your rights

Every person whose data is processed has the right to:

• access their personal data and receive a copy,
• correct their personal data,
• have their data erased where no other legal obligation prevents this,
• restrict processing,
• transfer data to another controller,
• object to processing based on the Controller’s legitimate interest.
• withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise these rights, contact the Controller at chocholowskarowerem@gmail.com or write to the address in section 2. You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office if you believe that processing infringes the GDPR.

6. Cookies and local technologies

The Website uses cookies, localStorage and sessionStorage to retain user preferences, consent settings and technical information needed to handle reservations and payment status.

Analytics cookies are activated only after the user gives consent. Data is not used for advertising profiling without a separate legal basis.

You can block or delete cookies at any time through your browser settings.

7. Final provisions

The Controller may update this Privacy Policy to reflect legal or technological changes.

The current version is always published and available on this page.