Privacy policy

The following data protection declaration applies to the use of our website www.naturetravel.pl (hereinafter “website”).

We attach great importance to data protection. The collection and processing of your personal data takes place in accordance with the applicable data protection regulations, in particular the General Data Protection Regulation (GDPR).

1. Responsible

The person responsible for the collection, processing and use of your personal data within the meaning of Art. 4 No. 7 GDPR is:

Nature Travel M. Czarny, J. Sorko-Czarny Sp. Z o.o. Sp. K. (change of name here)

1. Wyszyńskiego 2/1 lok. 204

15-888 Białystok, Poland

Tel.: 0048 85 7444562

E-mail: info@naturetravel.pl

Website: https://naturetravel.pl

If you do not consent to our collection, processing or use of your data in accordance with all of these data protection provisions or for individual measures, please address your objection to the person responsible.

You can save and print this data protection declaration at any time.

2. General purposes of processing

We use personal data to run the website and to properly perform the travel contract.

3. What data do we use and why
4. Access to data

We collect information about you as you use this website. We automatically collect information about your behavior and interaction with us, and we record data about your computer or mobile device. We collect, save and use data about each access to our website (so-called server log files). Access data includes:

• name and URL of the retrieved file
• date and time of the call
• amount of data transferred
• notification of successful download (HTTP response code)
• browser type and version
• operating system
• referrer URL (i.e. the previously visited page)
• websites accessed by the user’s system through our website
• the user’s internet service provider
• IP address and the requesting provider

We use this log data without assigning your person or other profiling to statistical analyzes for the operation, security and optimization of our website, but also to anonymously record the number of visitors to our website (traffic), as well as the extent and type of use of our website and services, also for billing purposes, to measure the number of clicks received from cooperation partners. Based on this information, we can deliver personalized and location-based content and analyze data traffic, find and correct errors, and improve our services.

This is also our legitimate interest pursuant to Art. 6 sec. 1 sentence 1 f) GDPR.

We reserve the right to retrospectively check the log data if, based on specific indications, there is a reasonable suspicion of illegal use. We store IP addresses in log files for a certain period of time, if this is necessary for security reasons or for the provision of services or the billing of a service, e.g. if you use one of our offers. After canceling the order process or receiving payment, we delete the IP address if it is no longer needed for security reasons. We also save IP addresses if we have a specific suspicion of a crime related to the use of our website. We also save the date of your last visit to your account (eg when registering, logging in, clicking on links, etc.).

1. Cookies

We use so-called session cookies to optimize our website. A session cookie is a small text file that is sent by the relevant server when you visit a website and is temporarily stored on your hard drive. As such, this file contains a so-called session ID with which different requests from the browser can be assigned to a shared session. This enables your computer to be recognized when you return to our website. These cookies are deleted when you close your browser.

To a lesser extent, we also use persistent cookies (including small text files that are stored on your device) that remain on your device and allow us to recognize your browser on your next visit. These cookies are stored on your hard drive and are deleted after a specified period of time. Their service life is from 1 month to 10 years. In this way, we can present our offer to you in a user-friendly, effective and safer manner and, for example, show you on the website information that is specifically tailored to your interests.

Our legitimate interest in the use of cookies pursuant to Art. 6 sec. 1 sentence 1 f) GDPR is about making our website more user-friendly, effective and secure.

The following data and information are stored in cookies:

• Login data
• Language settings
• Search terms entered
• Information on the number of visits to our website and the use of individual functions of our website.

When a cookie is activated, an identification number is assigned to it and your personal data is not assigned to this identification number. Your name, IP address or similar data that would allow a cookie to be assigned to you is not stored in the cookie. Based on the cookie technology, we only receive pseudonymised information.

You can set your browser so that you are informed in advance of the cookie settings and can decide on a case-by-case basis whether you want to disable the acceptance of cookies in certain cases or generally or to prevent the use of cookies altogether. This may limit the functionality of the website.

1. Data to fulfill our contractual obligations

We process personal data that we need to fulfill our contractual obligations, such as name, address, e-mail address, booked excursion, invoice details. The collection of this data is necessary to conclude a contract.

The legal basis for the processing of this data is Art. 6 sec. 1 sentence 1 b) GDPR, because we need this data to fulfill our contractual obligations towards you.

1. E-mail contact

If you contact us (eg via the contact form or e-mail), we will process your data to process the inquiry and in the event of additional questions.

If data processing takes place in order to take pre-contractual measures at your request or, if you are already our customer, for the performance of a contract, Art. 6 sec. 1 sentence 1 b) GDPR.

We process further personal data only if you give your consent (Article 6 (1) sentence 1 a) GDPR) or if we have a legitimate interest in processing your data (Article 6 (1) sentence 1 f) GDPR). A legitimate interest is e.g. a replying e-mail.

4. Google Analytics

We use Google Analytics, a web analysis service from Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files that are stored on your computer and that enable an analysis of your use of the website. The information generated by the cookie about the use of this website by website visitors is usually transferred to a Google server in the USA and stored there.

This is also our legitimate interest pursuant to Art. 6 sec. 1 sentence 1 f) GDPR.>.

Google has joined the EU-US privacy agreement and certified itself. As a result, Google is committed to complying with the standards and provisions of European data protection law. More information can be found in the entry below:

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.

We have activated IP anonymization (anonymizeIp) on this website. As a result, however, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide us with other services related to website activity and internet usage.

The IP address sent by your browser as part of Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by setting your browser software accordingly; however, please note that in this case, you may not be able to use all functions of this website to their full extent.

You can also prevent the data generated by the cookie and related to your use of the website (including your IP address) from being sent to Google and the processing of this data by Google by downloading the browser plug-in available at the following link and installing: http://tools.google. com / dlpage / gaoptout? hl = de

As an alternative to the browser plug-in or browsers on mobile devices, you can click on the link below to set an opt-out cookie which will prevent Google Analytics from collecting data on this website in the future (this opt-out cookie only works in this browser and for this domain only. cookies in your browser, you need to click this link again): [Deactivate Google Analytics]

5. YouTube

We use YouTube on our website. This is a video portal of YouTube LLC., 901 Cherry Ave., 94066 San Bruno, CA, USA, hereinafter referred to as “YouTube”.

YouTube is a subsidiary of Google LLC., 1600 Amphitheater Parkway, Mountain View, CA 94043 USA, hereinafter referred to as “Google”.

Through certification in accordance with the EU-US Data Protection Shield (“EU-US Privacy Shield”)

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Google, and thus also its subsidiary YouTube, guarantees that EU data protection requirements will be complied with when processing data in the USA.

We use YouTube in conjunction with the “Enhanced Data Protection Mode” function to be able to display videos. The legal basis is Art. 6 sec. 1 lit. f) GDPR. Our legitimate interest lies in improving the quality of our website. According to the information from YouTube, the “extended data protection mode” feature means that the data described in more detail below is only transferred to the YouTube server when you actually start the video.

Without this “extended data protection”, a connection to the YouTube server in the USA will be established as soon as you access one of our websites on which a YouTube video is embedded.

This connection is required in order to be able to display the relevant video on our website via a web browser. During this time, YouTube will at least record and process your IP address, date and time, and the website you visited. A connection to the Google “DoubleClick” advertising network is also established.

If you are logged in to YouTube at the same time, YouTube will assign the connection information to your YouTube account. If you want to prevent this, please log out of YouTube before visiting our website or make the appropriate settings in your YouTube user account.

In order to provide functionality and analyze user behavior, YouTube permanently stores cookies on your device via your web browser. If you do not agree to this processing, you have the option of blocking the storage of cookies by setting your web browser. Please see the “Cookies” section above for more information.

6. Period of storage

Unless otherwise stated, we only store personal data for as long as is necessary to achieve the stated purposes.

7. Your rights as a data subject

Under applicable law, you have various rights in relation to your personal data. If you wish to exercise these rights, please send your request by e-mail or post, clearly mentioning the address provided in section 1.

Below is an overview of your rights.

1. Right to Confirmation and Information

You have the right to obtain clear information about the processing of your personal data.

You have the right to obtain confirmation from us at any time as to whether your personal data is being processed. In this case, you have the right to request free information from us about the personal data stored about you.

1. Right to rectification

You have the right to request the correction and, if necessary, supplementing your personal data.

You have the right to request us to immediately correct any inaccurate personal data concerning you. Taking into account the purposes of processing, you have the right to request that incomplete personal data be supplemented – including by means of a supplementary notification.

1. right to erasure (“right to be forgotten”)

In many cases, we are obliged to delete personal data concerning you.

Pursuant to Art. 17 sec. 1 GDPR, you have the right to request that we delete your personal data immediately, and we are obliged to delete your personal data immediately if one of the following reasons applies:

1. Personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
2. You revoke your consent on which the processing is based pursuant to Art. 1 sentence 1 a) GDPR or Art. 9 par. 2 a) GDPR and there is no other legal basis for the processing.

iii. You object to the processing pursuant to Art. 21 paragraph 1 GDPR and there are no overriding legitimate reasons for the processing, or you object to the processing pursuant to Art. 21 paragraph 2 GDPR.

1. The personal data was processed unlawfully.
2. The deletion of personal data is necessary to fulfill a legal obligation arising from EU law or the law of the Member States to which we are subject
3. The personal data was collected in relation to the information society services offered in accordance with Art. 8 sec. 1 GDPR. If we have made your personal data public and in accordance with Art. 17 sec. 1 GDPR, we are obliged to delete them, we will take appropriate measures, including technical ones, taking into account the available technology and implementation costs, to be responsible for data processing.Data processing to inform you that you have requested the deletion of all links to these personal data or a copy or replication of these personal data.
4. Right to restriction of processing

In many cases, you have the right to request the restriction of the processing of your personal data.

You have the right to request us to restrict processing if one of the following conditions is met:

• You contest the accuracy of the personal data for a period enabling us to verify the accuracy of the personal data
• the processing is unlawful and you have refused to erase the personal data and requested the restriction of the use of your personal data instead
• we no longer need the personal data for the purposes of the processing, but you need them for the assertion, exercise or defense of legal claims
• You have objected to the processing pursuant to Art. 21 paragraph 1 GDPR, as long as it has not yet been determined whether the legitimate reasons of our company outweigh yours.

1. The right to data portability

You have the right to receive machine-readable personal data relating to you, to transmit it or to have it transmitted to us.

In detail:

You have the right to receive the personal data that you have provided to us in a structured, common and machine-readable format, and you have the right to transfer this data to another responsible person without obstruction on our part, provided that

1.processing is based on consent pursuant to Art. 6 sec. 1 sentence 1 a) GDPR or art. 9 sec. 2 a) GDPR or on a contract pursuant to Art. 6 sec. 1 sentence 1 b) GDPR and

2. processing is carried out using automated procedures.

By exercising the right to transfer data in accordance with par. 1, you have the right to request that the personal data be sent by us directly to another responsible person, as far as technically feasible.

1. Right to Object

You have the right to object to the lawful processing of your personal data by us, if it is justified by your particular situation and our interests related to the processing do not outweigh.

You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data based on Art. 6 sec. 1 sentence 1 lit. e) or f) GDPR; this also applies to profiling based on these provisions. We no longer process personal data, unless we can prove compelling legitimate reasons for processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If we process personal data for the purpose of direct mail, you have the right to object at any time to the processing of your personal data for the purposes of such advertising; this also applies to profiling, insofar as it is related to such direct advertising.

You have the right, for reasons arising from your particular situation, to object to the processing of your personal data which is carried out for scientific or historical research purposes or for statistical purposes pursuant to Art. 89 paragraph. 1 GDPR, unless pursuant to Art. 89 paragraph. 1 GDPR, processing is necessary for the performance of a public interest task.

1. The right to withdraw consent in accordance with data protection regulations

You have the right to withdraw your consent to the processing of personal data at any time.

1. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of residence, place of work or place of the alleged infringement, if you believe that the processing of personal data is unlawful.

8. Data protection

We make every effort to ensure the security of your data within the framework of applicable data protection regulations and technical possibilities.

Your personal data will be sent to us in encrypted form. This applies to your booking. We use the encryption system SSL (Secure Socket Layer), but would like to point out that data transmission over the Internet (eg when communicating by e-mail) may have security gaps. It is not possible to completely protect your data from access by third parties.

To protect your data, we use technical and organizational security measures in accordance with Art. 32 GDPR, which we constantly adapt to the state of the art.

We also do not guarantee that our offer will be available during certain hours; Errors, interruptions or malfunctions cannot be excluded. The servers we use are carefully archived on a regular basis.

9. Transmission of data to third parties

In principle, we only use your personal data within our company.

If and to the extent that we involve third parties in the performance of contracts (eg hotels), they will only receive personal data insofar as the transmission is necessary for the respective service.

Where we outsource certain parts of data processing (“order processing”), we oblige order processors to use personal data only as required by data protection law and to protect the rights of the data subject.

The transfer of data to authorities or persons outside the EU, except for the case mentioned in this declaration in point 4, is not taking place and is not planned.

10. Data protection questions

If you have any questions or concerns regarding data protection, please contact Nature Travel: info@naturetravel.pl