Privacy Policy

1. Definitions

Controller – A sole proprietorship operating under the name [Insert company name or "Krakow Guide – First and Last Name"], address: [Insert address], Tax ID (NIP): [Insert NIP], email: [Insert email address].
Website – the website available at the following address: [Insert URL].
User – any natural person visiting the Website or making a reservation for the service.

2. General Information

We care about protecting our Users’ privacy. This privacy policy explains how we process personal data and use cookies on the Krakow guide’s website.

3. Data Processing for Service Reservation Purposes

In the reservation form, we collect only the data necessary to provide the guiding service:

First and last name,
Email address,
Phone number.

Legal basis: Article 6(1)(b) of the GDPR (necessary for the performance of a contract).

Purpose of processing: to enable contact regarding the reservation, confirm the date, provide organizational information, and perform the service itself.

Retention period: The data provided in the reservation form is not stored in any database or CRM system. After the service has been provided (upon completion of the guiding service), the data is immediately deleted. It is not archived, profiled, or transferred to any systems for marketing data storage.

4. Cookies and Consent (Google Consent Mode)

Our Website uses cookies solely for the purpose of:

Analyzing website traffic (anonymous statistics),
Optimizing advertising campaigns.

For this purpose, we use Google Analytics and Google Ads tools, which have been configured in accordance with Google Consent Mode.

4.1 What is Google Consent Mode?

Google Consent Mode is a mechanism that allows Google scripts (analytical and advertising) to adapt their functionality based on the actual consents granted by the User. This means:

If the User does not consent to analytical or marketing cookies, Google will not use those cookies, and data will not be processed for those purposes.
In the absence of consent, Google tools operate in a “cookieless pinging” mode, which does not allow for User identification.

4.2 Types of Cookies

Our Website uses only the following categories of cookies, depending on the consents granted:

Category	Purpose	Consent Required
Necessary	Ensure the proper functioning of the Website (e.g., remembering consent choices). They do not require consent – they always work.	None (legal basis: Article 6(1)(f) of the GDPR – legitimate interest)
Analytical	Collect anonymous statistics on how the Website is used (number of visits, traffic sources, time spent on the site). Data is aggregated and does not allow for User identification.	User consent (Article 6(1)(a) of the GDPR)
Marketing	Optimize advertising campaigns, including displaying non-personalized ads and measuring their effectiveness. They are not used to create behavioral profiles without consent.	User consent (Article 6(1)(a) of the GDPR)

4.3 Managing Consents

Consents for cookies are collected using a tool compliant with Google Consent Mode upon the first visit to the Website (cookie banner). The User may change or withdraw their consent at any time by clicking the consent management icon (available on the Website) or through their browser settings.

5. Data Sharing

Personal data is not sold or shared with third parties for the Controller’s own marketing purposes or those of third parties.

Exceptions:

Data is transferred to Google Ireland Limited (Google Analytics, Google Ads) as a data processor solely to the extent necessary to achieve analytical and advertising purposes, only if the User has given the relevant consents.
Data necessary for the provision of the service (e.g., telephone contact) is not processed outside the European Economic Area (EEA).

6. User Rights

In connection with the processing of personal data, the User has the following rights:

The right to access their data,
The right to rectification of their data,
The right to erasure of their data (the “right to be forgotten”),
The right to restriction of processing,
The right to data portability,
The right to object to processing,
The right to withdraw consent at any time (withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal).

To exercise your rights, please contact us by email at: coolkrakow@gmail.com.

The User also has the right to lodge a complaint with the President of the Personal Data Protection Office (PUODO) if they consider that the processing of personal data violates GDPR provisions.

7. Data Security

We implement appropriate technical and organizational measures to ensure the protection of processed data against loss, destruction, or unauthorized access. In particular, the reservation form uses SSL/TLS protocol (connection encryption).

8. Final Provisions

The Controller reserves the right to amend this privacy policy. Users will be informed of any changes via a notice on the Website.

Last updated: [Insert current date]