What information about you (personal data) do we process?
- We process data that is voluntarily provided by you or left while using the Services. It is mostly data that is necessary to enable use of full Services of audioguidegdansk.pl and audiouidegdansk.com.pl Services, including data necessary to purchase services, receive Newsletter and answers to asked questions, that is data provided in forms and windows available in our Services, e.g. emails, as well as data left while navigating in our Services, that is data left in cookie files, e.g. IP Address, information on how many times have you visited audioguidegdansk.pl and audiouidegdansk.com.pl Services, when and what contents presented in audioguidegdansk.pl and audiouidegdansk.com.pl Services you reviewed (e.g. price list of services, types of offered recordings). Under any circumstances it is used to define your personal preferences, but after aggregating (connecting it with data of other Service Users) it serves to define preferences of collective groups of Users (Service Users).
- Information included in access logs may contain various data, e.g. always an IP Address. That data is used only for technical and statistical purposes.
- There is always a possibility to ask our Data Protection Supervisor about what kind of personal data we process.
Who is the Controller of you data?
The Controller of your data is the Service Provider that is MEXPO Przemysław Diering, ul. Pułaskiego 8, 81-368 Gdynia, VAT EU 5841076375, REGON 192015248.
In order to provide professional processing, protection and efficiency of audioguidegdansk.pl and audiouidegdansk.com.pl Services, we cooperate with trusted suppliers. All of your data is protected and stored on servers of our Reliable Partner, that is cyber_Folks S.A..
Data Protection Supervisor
To guarantee security of processing your personal data in transparent and legal way, we have appointed Data Protection Supervisor. You may contact with Data Protection Supervisor to obtain information in any matters regarding processing personal data and using entitlements associated with processing. In order to contact Data Protection Supervisor when needed, please use correspondence data listed below:
Data Protection Supervisor:
E-mail address: firstname.lastname@example.org
Correspondence address: MEXPO, ul. Pułaskiego 8, 81-368 Gdynia
What are the purposes and legal basis for processing your personal data and how long it will be processed?
- Purposes and legal basis for processing personal data
Processing your personal data by us always requires an explicit legal basis. GDPR provides a few types of such legal basis on processing data, and in case of using audioguidegdansk.pl and audiouidegdansk.com.pl Services, including our Services, and three of them are applicable as a rule.
Firstly, we process your personal data in order to finalize perform concluded contracts concluded with you, including enabling you the use of our Services and providing our Services to you. The legal basis for mentioned processing of personal data is article 6(1)(b) of GDPR, pursuant to which processing is necessary to finalize perform a contract in which a party is a Service User, that is you. Processing on this legal basis refers to finalizing performing a contracts on for providing Services, that is concluded by complete use of audioguidegdansk.pl and audiouidegdansk.com.pl Services as well as consuming content that is uploaded when using contents published at audioguidegdansk.pl and audiouidegdansk.com.pl Services without providing some of personal data, that is one that meaning data that does not lead to concluding a contract (use of the service constitutes concluding a contract which is detailed in Terms and Conditions) including also recognising processing a complaint, adjusting Services to your needs, analysing and improving Services, and as well as providing security of Services.
Secondly, we process your personal data in order to collect and process aggregated data for statistical purposes, improve quality and contents of our Services (including analysing and profiling data for research and marketing purposes). The legal basis for mentioned processing of personal data is article 6(1)(f) of GDPR, that is necessity of processing for purposes resulting from legitimate interest implemented by the Controller (Service Provider), that is us. Legitimate interest that we have consists in necessity of adjusting the contents of Services to Service Users’ preferences and optimisation of use of our web pages, as well as necessity to compile statistics, which constitute the basis for analysis on the ways in which you and other Service Users use the Service and on that basis, among others to prepare specific contents in a specific form, that draws the greatest interest and is are in the highest demand.
Thirdly, we process your personal data by properly aggregating it in order to carry out educational mission through marketing forms regarding products and our or our Reliable Partner’s Services (including analysing and profiling data of user groups for educational and marketing purposes). The legal basis for mentioned processing of personal data is article 6(1)(a) of GDPR, that is voluntary, explicit consent for such processing.
- Period for which data will be processed
Your personal data shall be stored within the term of contract for providing Services and after termination of the contractual term in order to complete settlement of parties’ services and liabilities, resulting from a contract, until the expiry period, indicated in applicable regulations on claims expiry resulting from such a contract, available to Service Provider (the data Controller), as well as Service User, and in the scope of tax settlements for the period of tax settlements expiry, resulting from currently applicable provisions (currently, period of tax settlements expiry is 5 years from the end of a fiscal year, in which the necessity of tax payment due to Services provided to you occurred.)We will process data due to our legitimate interest until the time of possible filing an effective observation by you.However, data processed on the basis of your consent shall be processed only until the time of possible withdrawal of your consent or termination of a contract.Also exercising the right to be forgotten by you will result in removal of your data upon your explicit request.
- A list: purpose of processing – legal basis – period of processing
In order to systematize the above purposes for processing your personal data, assigned to a particular purpose of legal basis and determining period for which we will process your data are presented below in the form of a table.
|Purpose for data||Legal basis||Period of processing|
|1) performing contracts for rendering Services concluded by fully using audioguidegdansk.pl and audiouidegdansk.com.pl Services as well as using contents by you that are uploaded at audioguidegdansk.pl and audiouidegdansk.com.pl Services without providing some of personal data, that is one that do not lead to concluding a contract (use of the service constitutes concluding a contract which is detailed in Terms and Conditions), including processing a complaint, adjusting Services to your needs, analysing and improving Services, and providing security of Services.||article 6(1)(b) of GDPR, pursuant to which processing is necessary to finalize a contract in which a party is a Service User, that is you.||until expiry of the contract, with reservation that data may also be processed after the expiry of this contract, but only if it is allowed or required by applicable provisions of law, e.g. for statistical or settlement purposes or in order to pursue claims.|
|2) statistical measurements, in order to collect and process aggregated data for statistical purposes, to improve quality and contents of our Services (including analysing and profiling data for research and marketing purposes).||article 6(1)(f) of GDPR, that is necessity of processing for purposes resulting from legitimate interest implemented by the Controller (Service Provider), that is us.||Until the time of your effective objection.|
|3) marketing regarding our products and services or of our Reliable Partners (including analysing and profiling data of groups of users, that have provided personal data in the Service, for marketing purposes.||article (6)(1)(a) of GDPR, that is your voluntary, explicit consent for such processing.||Until the time of revoking the consent by you.|
Who has access to your data? Information on data receivers.
Furthermore, your data may be transferred to entities authorised to obtaining it on the basis of applicable law, to offices and bodies entitled to process data on the basis of specific provisions, e.g. law enforcement agencies in the case of body’s making a demand on an appropriate legal basis.
Feel free to contact our Data Protection Supervisor if you want to learn more.
- cyber_Folks S.A., ul. Franklina Roosevelta 22, 60-829 Poznań, KRS 0000612359, REGON 364261632, NIP 7822622168
- Mserwis sp. z o.o., ul. Kazimierza Wielkiego 27, 50-077 Wrocław, KRS 0000708029, NIP 8971849179
- GDAŃSKA ORGANIZACJA TURYSTYCZNA (KRS: 0000139108, NIP: 5832887298, REGON: 192882979)
- PAYU S A (KRS: 0000274399, NIP [tax id. no.]: 7792308495, REGON [national business registry no.]: 300523444)
- DOTPAY S A (KRS: 0000296790, NIP: 6342661860, REGON: 240770255)
- PayPal (Europe) S.à r.l. & Cie, S.C.A located at L-1150 Luxembourg
- GOOGLE POLAND SP Z O O (KRS: 0000240611, NIP: 5252344078, REGON: 140182840)
What are your rights?
- The right to access data
You have the right to demand information from us whether and which of your data is stored by us, and to request a copy of the data. In order to do so, please contact us – you will receive an email with information.
- The right to rectification
You have the right to demand rectification (correction) of your personal data, if it is incorrect, as well as to complete data.
- The right to remove data (the right to be forgotten)
You have the right to remove any data that we process. If you request removal of data that is necessary to implement a contract or provide our services, it is equal with termination of this Contract and we will not be able to provide our Services due to lack of permission for processing your data, including storing it.
- The right to limit data processing
You have the right to request limitation of processing your personal data on the following conditions:
- if you do not agree on processing data on the basis of legitimate interest of Service Provider, we will restrict any processing of such data after verification whether legitimate interest exists or not.
- if you report that your personal data is incorrect, we must limit any processing until the moment of verification of data correctness.
- if processing of data is unlawful, you may disagree for removal of data and instead request for limitation of using personal data.
- if we do not need your personal data any longer, but it is required to submit or dismiss a claim.
- The right to data portability
In the case of automated processing of your personal data, on the basis of your consent or concluded contract, you have the right to receive a copy of your data in a structured, commonly used, machine-readable and interoperable format. That copy may be sent to you or another entity. This is only applicable to personal data that has been transferred to us.
- The right to object
You have the right to object to processing of your personal data on the basis of legitimate interest of Service Provider. In such a case, we will stop processing your personal data processed on the basis of legitimate interest, unless we will be able to find legal justification for this process which will be superior to your interest or right; or due to legal claims.
- The right to revoke the consent
You have the right to revoke the consent to process your personal data with regard to the data that is processed on the basis of your consent. Revoking the consent has no influence on lawfulness of the right to process, that has been done on the basis of consent before revoking it.
- The right to file a complaint
If you believe that we process your personal data in an inappropriate manner, you may contact us. You have the right to file a complaint to supervisory body (The President of the Office of Data Protection).
In order to use the above rights, contact us (Service Provider or Data Protection Supervisor.)
Is there a requirement to provide data?
Providing the data is voluntary, but necessary to finalize concluded Contract. Not giving data marked as necessary to provide Services shall prevent rendering those Services. Providing data in minimal scope is made automatically (e.g. IP Address.)
Information on cookies files and operational data
Cookie files are used to simplify or discontinue particular operation including to remember data necessary for logging in, better adjustment audioguidegdansk.pl and audioguide.com.pl Services to Service Users’ needs, compile statistics of views. ‘Cookies’ operation depends on whether they are enabled in Internet browser and not deleted.
Details on use of cookie files and ways of managing them are described in a separate document available at: https://audioguidegdansk.pl/en/cookies-policy/
We also process anonymous operational data associated with use of audioguidegdansk.pl and audioguide.com.pl Services (the so-called logs – IP Address, domain) to compile assistance statistics used in controlling audioguidegdansk.pl and audioguide.com.pl Services. This is data of collective and anonymous nature, that is one that does not contain identity features of a viewer of an online store. Logs are not provided to third parties.
If you do not want to receive cookie files, you can change your browser settings. The Controller reserves that disabling cookie files which are necessary to authentication, security, keeping User’s preferences may disrupt use of audioguidegdansk.pl and audioguide.com.pl Services, and in extreme cases may prevent a User from using pages audioguidegdansk.pl and audioguide.com.pl. Instruction on managing cookie files is available at: https://audioguidegdansk.pl/en/cookies-policy/
Google Analytics and Pixel
We use services of Google Analytics and Pixel Facebook which obtain data from the so-called cookies provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) and Facebook Inc. Those services help us to analyse the manners of using audioguidegdansk.pl and audioguide.com.pl Services.
Google Analytics and Pixel Facebook use cookie files to analyse the ways in which you use audioguidegdansk.pl and audioguide.com.pl Services. Cookie files are small text information in form of text files, sent by a server and recorded on a device of User of audioguidegdansk.pl and audioguide.com.pl Services (e.g. on hard disc of laptop or computer or in smartphone memory – depending on which device you actually use to visit audioguidegdansk.pl and audioguide.com.pl Services).
Information obtained by cookie files is recorded on servers used by Google Inc., including in the territory of the United States. If anonymisation of IP Address is activated while using audioguidegdansk.pl and audioguide.com.pl Services, IP address will be shortened in Member States of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases full IP Address will be transferred to United States and shortened there.
Google Inc. will use that information on our behalf in order to evaluate Users’ ways of use of audioguidegdansk.pl and audioguide.com.pl Services, to generate reports on activity on pages, statistics and to render other Services involving use of audioguidegdansk.pl and audioguide.com.pl Services.
Stored data is processed in order to render above services in anonymised manner (it is the so-called operational data, which prevents from identifying a person). This is data of collective and anonymous nature, that is one that does not contain identity features of a user of audioguidegdansk.pl and audioguide.com.pl Services.
Typically, the majority of Internet browsers available on the market accepts recording of cookie files in User’s device by default. Each User can define conditions of cookie files use on their own in settings of Internet browser or a User’s device. This means that you can e.g. partly restrict (e.g. temporarily) or completely disable saving cookie files option on your own – in the last case it may affect some of functionalities of audioguidegdansk.pl and audioguide.com.pl Services.
Settings of device or the Internet browser in the scope of cookie files are significant with regard to consent for using cookie files by audioguidegdansk.pl and audiouidegdansk.com.pl Services – pursuant to regulations, that consent may also be given by settings of Internet browser or a device. If you do not agree, you need to change settings of a device or the Internet browser in the scope of cookie files.
Pixel Facebook may register mouse clicks, mouse movements, scrolling activity and provided information that is not personal data.
It is also possible to stop providing data from your device to Google Analytics, Pixel Facebook with the use of cookie files (including transfer of IP Address) by downloading browser plugin provided by Google Inc., Pixel Facebook and installing it. It is available at:
Detailed information on principles under which the above services operate, including principles on collecting and processing data are available at:
Use of data
In audioguidegdansk.pl and audioguide.com.pl Services there are buttons, tools or contents directing to services of others companies, including plugins of social networks (Facebook). Using those apps may cause sending information about user to above external entities.
The security of personal data processing
We declare that the Controller that is developed and implemented security policy and instruction of managing IT system used to secure processing of personal data, including appropriate encryption programmes.