Privacy Policy

1. Data controller

The controller of personal data collected through patentnapodroz.pl is Clever Training Sp. z o.o., registered at ul. Wczasowa 34, Bydgoszcz, Poland, a licensed tour operator registered in the Polish Central Register of Tourism Organizers and Intermediaries (CEOTiPO) under number 42246. Tax ID (NIP): 9532786916, REGON: 520772585, KRS: 0000941682.

Contact for data protection matters: patentnapodroz@gmail.com, phone +48 501 034 351.

2. What data we process

We process personal data voluntarily submitted through the contact form: full name, phone number, email address, and the content of your inquiry. Providing this data is voluntary but necessary to respond to your inquiry or prepare a trip offer.

3. Legal basis and purposes

• Art. 6(1)(a) GDPR — consent given by checking the box on the contact form,
• Art. 6(1)(b) GDPR — to take steps prior to entering into, or to perform, a package travel contract,
• Art. 6(1)(f) GDPR — our legitimate interest in responding to inquiries and direct marketing of our own services.

4. Recipients of data

Contact form data is passed to our form-processing provider, Web3Forms, solely to technically deliver messages to our inbox. The site also loads Google Fonts from Google's servers, which transmits your IP address to Google when the page loads.

We do not sell or share personal data with third parties for marketing purposes.

5. Retention period

Inquiry data is kept for as long as needed to handle the inquiry, and — if a contract is concluded — for the period required by Polish tax and accounting law (typically up to 5 years from the end of the year in which the transaction occurred).

6. Your rights

You have the right to access, rectify, erase, restrict processing of, and port your data, and to object to processing. You also have the right to lodge a complaint with the Polish Data Protection Authority (Prezes UODO) if you believe processing violates GDPR.

7. Cookies

The site uses Google Analytics (GA4) to analyze traffic and how the site is used (e.g. visit counts, pages viewed, device type). Google Analytics only runs after you give consent via the cookie banner shown on your first visit — if consent is not given (or is declined), no analytics cookies are set and the Google Analytics script never loads. You can withdraw consent at any time by clearing this site's data in your browser settings.

Data collected by Google Analytics is processed by Google LLC under Google's privacy policy; IP addresses are anonymized. The only external resource always loaded (regardless of consent) is Google Fonts (see section 4), which does not set cookies.

We also use Google Search Console to monitor the site's visibility in search results — this tool collects no visitor data whatsoever and requires no cookie consent.

8. Data security

We apply appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or destruction, including HTTPS encryption.