Last updated: April 2026
1. Who We Are
Off Course Kraków is a travel agency service in Poland. In this policy, “we,” “us,” and “our” refer to Off Course Kraków. We are the data controller responsible for the personal data we collect in connection with our services.
For privacy-related enquiries, you can reach us at: [email protected]
2. What Data We Collect
We collect personal data that you provide directly to us when making a booking or contacting us. This may include your name, email address, phone number, nationality, date of birth (where required for insurance purposes), and any health or medical information you voluntarily share with us to ensure your safe participation in an activity.
We also collect basic technical data when you visit our website, such as your IP address, browser type, and pages visited, primarily through cookies and analytics tools.
3. How We Use Your Data
We use your personal data for the following purposes:
- To process and manage your booking
- To communicate with you before, during, and after your experience
- To comply with our legal and insurance obligations
- To improve our services and website
- To send you relevant updates or offers, where you have given your consent
We do not use your data for automated decision-making or profiling.
4. Legal Basis for Processing
We process your personal data on the following legal grounds under the GDPR:
- Contract performance — processing necessary to fulfil your booking
- Legal obligation — where we are required to retain records by Polish law
- Legitimate interests — for example, improving our services and preventing fraud
- Consent — for optional communications such as marketing emails, which you can withdraw at any time
5. How Long We Keep Your Data
We retain your personal data only for as long as necessary. Booking records are typically kept for five years to comply with Polish accounting and tax law. Marketing consent records are kept until you withdraw consent. Website analytics data is retained in anonymised form.
6. Who We Share Your Data With
We do not sell your personal data. We may share it with:
- Our guides and drivers, to the extent necessary to deliver your experience
- Insurance providers, where required
- Payment processors, to handle your transaction securely
- Public authorities, if required by law
All third parties we work with are required to handle your data in accordance with applicable data protection law.
7. International Transfers
Where your data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as the use of services covered by EU adequacy decisions or Standard Contractual Clauses.
8. Cookies
Our website uses cookies to improve your browsing experience and collect anonymised analytics. You can manage or disable cookies through your browser settings at any time. We will ask for your consent before placing any non-essential cookies.
9. Your Rights
Under the GDPR, you have the right to:
- Access the personal data we hold about you
- Correct any inaccurate or incomplete data
- Request deletion of your data, subject to legal retention requirements
- Object to or restrict certain types of processing
- Withdraw consent at any time, where processing is based on consent
- Lodge a complaint with the Polish data protection authority (UODO — Urząd Ochrony Danych Osobowych) at uodo.gov.pl
To exercise any of these rights, please contact us at: [email protected]
10. Data Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Access to personal data is limited to those who need it to carry out their responsibilities.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The current version will always be available on our website, with the date of last update noted at the top. Significant changes will be communicated to you directly where possible.
12. Contact & Complaints
If you have any questions about how we handle your data, or if you wish to make a complaint, please contact us at: [email protected]
If you are not satisfied with our response, you have the right to contact the UODO directly.