Information on Personal Data Processing

We hereby inform you that we process your personal data provided to us in connection with the use of our services.

The administrator of your provided personal data provided is GDANSK FOOD TOUR, Bartlomiej Dymny.

Scope of Data Processing

We process your personal data provided to us in connection with the use of our services. Among these data, the following information may be included:

- first and last name,

- email address,

- phone number,

- home address,

- company,

- address of the permanent place of business,

- tax identification number

Purposes and Legal Basis for Processing

The data are processed for the following purposes and based on the following legal grounds:

- conclusion and performance of the contract (Art. 6(1)(b) GDPR),

- issuing an invoice, including the invoice in accounting documentation, and fulfilling other accounting and bookkeeping obligations imposed by law (Art. 6(1)(c) GDPR),

- establishing, pursuing, or defending claims related to the contract, which is our legitimate interest (Art. 6(1)(f) GDPR),

- identifying returning customers, recreating the history of cooperation, exchanged correspondence, prepared documents, etc., which is our legitimate interest (Art. 6(1)(f) GDPR).

Data Recipients

The following entities may be involved in the processing of personal data:

- hosting provider - in the scope of storing personal data on the server, including the email server,

- Google - in the scope of using services within the G-Suite package, which involves the processing of personal data,

- invoicing system provider - in the scope of using invoicing software, which processes personal data for issuing invoices,

- CRM system provider - in the scope of using CRM software, which processes personal data for streamlining work and identifying returning customers,

- accounting office - in the scope of bookkeeping, which involves processing personal data contained in accounting documents,

- IT support - in the scope of providing IT support, which may involve access to personal data processed within IT resources,

- subcontractors - in the scope of providing services that involve access to personal data.

All the above entities participate in the data processing process based on data processing agreements. All these entities ensure an appropriate level of personal data protection.

Your personal data may be transferred to tax offices as part of fulfilling obligations related to public-law settlements. Your personal data may also be transferred to other authorities authorised by law if necessary to fulfil legal obligations or to pursue our rights.

In situations where it is necessary to use professional legal assistance, your personal data may be transferred to law firms providing legal assistance to us to the extent necessary to pursue our rights or defend against claims.

Data Transfer to Third Countries

In connection with the use of Google services, data are transferred to third countries due to their storage on servers located outside the European Economic Area. Google ensures an adequate level of personal data protection through compliance mechanisms such as certification programs or standard contractual clauses.

Data Retention Period

Your personal data will be stored for the duration of our business activities unless you object to the processing of personal data earlier, which will result in the deletion of these data. The objection will be effective after the expiration of the limitation period for claims under the concluded contract. Until then, your personal data will be necessary for us to establish, pursue, or defend claims. Please also remember that data contained in accounting documents must be stored for the period required by law.

Rights Related to Data Processing

In connection with the processing of personal data, you have the following rights:

- the right to access your data and receive a copy of it,

- the right to rectify (correct) your data,

- the right to delete data (if you believe there are no grounds for us to process your data, you can request that we delete it),

- the right to restrict data processing (you can request that we limit the processing of your data only to their storage or performing actions agreed with you, if you believe we have incorrect data or we process them unjustifiably),

- the right to object to data processing (you have the right to object to the processing of data based on a legitimate interest; you should indicate your specific situation, which you believe justifies us stopping the processing covered by the objection; we will stop processing your data for these purposes unless we demonstrate that the grounds for processing by us are overriding your rights or that your data is necessary for establishing, pursuing, or defending claims),

- the right to data portability (you have the right to receive from us in a structured, commonly used, and machine-readable format the personal data you provided to us under the contract or your consent; you can instruct us to send this data directly to another entity),

- the right to lodge a complaint with a supervisory authority (if you believe that we are processing your data unlawfully, you can file a complaint in this matter with the President of the Office for Personal Data Protection or another competent supervisory authority).

To exercise your rights, please send your request to the email address bartlomiejdymny@gmail.com. Please remember that before exercising your rights, we will need to properly identify you.

Information on the Requirement/Voluntariness of Data Provision

Providing your data is a condition for using our services.