Personal data protection Policy

In accordance with Article 13 paragraphs 1 and 2 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as GDPR), we inform you that:
The privacy of our Service visitors is very important to us and we are committed to protecting it. This policy explains what we do with your personal information.
Personal data administrator:
The administrator of personal data is the company:
F. H. U. „LIBA” Piotr Liczbański
ul. Feliksa Konecznego 2/93
31-216 Kraków
NIP: 6651609797
Scope of data processed:
We process your personal data provided to us in connection with the use of our services. This data may include, in particular, the following information:
– name and surname,
– email address,
– phone number,
– home address
Purposes and basis of processing:
The data are processed for the following purposes and based on the following legal bases:
– conclusion and performance of the contract (Article 6, paragraph 1, letter b of the GDPR),
– issuing an invoice or fiscal receipt, including the invoice or fiscal receipt in the accounting documentation and fulfilling other accounting and bookkeeping obligations imposed by law (Article 6, paragraph 1, letter c of the GDPR),
– keeping records for supervisory authorities resulting from the obligations imposed by law (Article 6, paragraph 1, letter c of the GDPR),
– establishing, pursuing or defending claims related to the contract, which is our legitimate interest (Article 6, paragraph 1, letter f of the GDPR),
– handling complaints, reconstructing the course of cooperation, exchanged correspondence, prepared documents, etc., which is our legitimate interest (Article 6, paragraph 1, letter f of the GDPR).
– sending marketing content to your telephone number and/or e-mail address if you consent to this (Article 6, paragraph 1, letter a of the GDPR)
Data recipients:
– The following entities may participate in the processing of personal data:
– subcontractors – in the scope of providing services that involve access to personal data.
– hosting provider – in the scope of storing personal data on a server, including a mailbox server,
– Google – in the scope of using services within which personal data is processed,
– accounting office – in the scope of bookkeeping, which is related to the processing of personal data contained in accounting documents,
– IT support – in the scope of providing IT support, which may involve access to personal data processed within IT resources.

All of these entities ensure an appropriate level of personal data protection.
Your personal data may be transferred to Tax Offices as part of fulfilling obligations related to public law settlements. Your personal data may also be transferred to other bodies authorized under the law, if it is necessary to fulfill the obligations imposed by the law or to pursue our rights. In a situation where it would be necessary for us to use professional legal assistance, your personal data may be transferred to law firms providing legal assistance to us to the extent necessary to pursue our rights or defend against claims.
Transfer of data to third countries:
In connection with the use of Google services, data is transferred to third countries due to their storage on servers located outside the European Economic Area. Google ensures an adequate level of protection of personal data through the use of compliance mechanisms, such as certification programs or standard contractual clauses.
Data storage period:
Your personal data will be stored for the duration of our business activity, unless you object to the processing of your personal data earlier, which will result in the deletion of this data. The objection will be effective after the expiry of the limitation period for claims under the concluded contract. Until then, your personal data will be necessary for us to determine, pursue or defend any claims. Please also remember that when it comes to data contained in accounting documentation, such documentation must be stored for the period resulting from the provisions of law.
Rights related to data processing:
In connection with the processing of your personal data, you have the following rights:
– the right to access your data and receive a copy of it,
– the right to rectify (correct) your data,
– the right to delete your data (if in your opinion there is no basis for us to process your data, you can request that we delete it),
– the right to limit the processing of your data (you can request that we limit the processing of your data only to its storage or performance of actions agreed with you, if in your opinion we have incorrect data or we process it without justification),
– the right to object to the processing of your data (you have the right to object to the processing of your data on the basis of a legitimate interest; we will stop processing your data for these purposes, unless we prove that your data is necessary for us to establish, pursue or defend claims),
– the right to transfer your data (you have the right to receive your personal data from us in a structured, commonly used machine-readable format; you can instruct us to send this data directly to another entity),
– the right to lodge a complaint with a supervisory authority (if you find that we are processing your data unlawfully, you can lodge a complaint in this matter with the President of the Personal Data Protection Office or another competent supervisory authority).
To exercise your rights, please address your request to: info@auschwitzmuseumtours.com . Please note that we will need to identify you appropriately before exercising your rights.
Information on the requirement/voluntary nature of providing data:
Providing data is a condition for using our services. Providing data for marketing purposes is voluntary, and failure to provide it, including failure to express consent, does not affect the manner of implementing other processing purposes.

Cookie files:
We do not automatically collect any information, except for information contained in cookie files.
Cookie files (so-called “cookies”) are computer data, in particular text files, which are stored on the end device of the Service User and are intended for using the websites of the Service. Cookies usually contain the name of the website from which they originate, the time of their storage on the end device and a unique number.
Cookies are used for the following purposes:
– adapting the content of the website to the User’s preferences and optimizing its use, in particular these files allow to recognize your device and properly display the website, tailored to your individual needs
– creating anonymous statistics that help understand how Service Users use the Service”s websites, which allows for improving their structure and content
The Service uses two basic types of cookies: “session cookies”; and “persistent cookies”. “Session cookies” are temporary files that are stored on the User’s end device until the User leaves the website or disables the software (internet browser). ‘Persistent’ cookies are stored on the User’s terminal equipment for the time specified in the parameters of the cookies or until they are deleted by the User.
The Service User may change the settings for cookies at any time. These settings may be changed in particular in such a way as to block the automatic handling of cookies in the web browser settings or to inform about each time they are placed on the Service User’s device. Detailed information about the possibilities and methods of handling cookies is available in the software (web browser) settings. The User may delete Cookie files at any time using the functions available in the web browser they use.
The Website Administrator informs that restrictions on the use of cookies may affect some functionalities available on the Website.