Privacy Policy
Effective date: 16 April 2026 | Version: 1.0
§ 1. Personal data controller
The controller of your personal data is:
Sławomir Śniegula
ul. Czarnieckiego 5, 88-400 Żnin, Poland
Email: kontakt@sniegula.com
§ 3. Categories of data processed, purposes and legal bases
3.1. Booking form (guided mountain expeditions)
| Element | Description |
|---|---|
| Scope of data | first name, surname, PESEL (Polish national identification number) or, for non-Polish residents, passport / ID document number, residential address, email, telephone |
| Purpose of processing | conclusion and performance of the contract for the guiding service (single tourist service), identity verification, statutory record-keeping obligations of the Service Provider |
| Legal basis | art. 6(1)(b) and (c) GDPR — processing necessary for the performance of a contract and for compliance with a legal obligation to which the Controller is subject |
| Retention period | 5 years from the end of the calendar year in which the contract was completed (Polish tax requirements); thereafter until expiry of the limitation period for civil-law claims |
3.2. Contact form
| Element | Description |
|---|---|
| Scope of data | first name, email address, content of the message |
| Purpose | responding to your enquiry |
| Legal basis | art. 6(1)(f) GDPR — legitimate interest of the Controller |
| Retention period | 1 year from the end of the correspondence |
§ 4. Data recipients
| Recipient | Role |
|---|---|
| IQ PL Group sp. z o.o. (iqgroup.pl) | hosting provider — data processor |
| Przelewy24 (PayPro S.A.) | payment service provider (once implemented) |
| Insurance providers | insurance cover for expedition participants |
| Public authorities | where required under applicable law |
§ 6. Rights of the data subject
| Right | Legal basis |
|---|---|
| Right of access | art. 15 GDPR |
| Right to rectification | art. 16 GDPR |
| Right to erasure | art. 17 GDPR |
| Right to restriction of processing | art. 18 GDPR |
| Right to data portability | art. 20 GDPR |
| Right to object | art. 21 GDPR |
| Right to withdraw consent | art. 7(3) GDPR |
To exercise any of your rights, please send a message to kontakt@sniegula.com. You shall receive a response within one month.
§ 7. Right to lodge a complaint
You may lodge a complaint with the President of the Polish Personal Data Protection Authority (UODO), ul. Stawki 2, 00-193 Warszawa, Poland, www.uodo.gov.pl. As an EU resident, you may also lodge a complaint with the supervisory authority of your habitual residence or place of work.
§ 11. Data security
The Controller applies SSL/TLS encryption, a web application firewall (Wordfence), regular software updates and routine backups. Access to personal data is restricted to authorised persons only.
This document is provided for information purposes only. For individual matters, consultation with a legal adviser specialising in data protection is recommended.