Privacy Policy

This policy explains what personal data the Podhale.info website (https://podhale.info) processes, why we do it, who we share it with and what rights you have. We apply the GDPR (EU Regulation 2016/679). The Polish version of this policy is the binding one; this is a translation.

1. Who is responsible for your data

The data controller is Aleksander Kotyński, who runs the Podhale.info website, Czerwienne 294A, 34-407 Czerwienne, Poland. For anything related to personal data, write to podhaleinfo@gmail.com.

2. The essentials

  • You can read the website without giving any data.
  • Statistics and interest-based ads are switched on only with your consent given in the cookie banner.
  • Data from forms (newsletter, airport transfer, business or event submissions) is used only for the purpose you provide it for.
  • We do not sell data. We share it only with companies that help us run the website or provide the service you ask for.
  • You can withdraw your consent, unsubscribe from the newsletter or ask us to delete your data at any time.

3. What data we process and why

Using the website

Browsing and security. The server and the security plugin record technical data (including IP address, browser type, time of visit and failed login attempts) so that the website works properly and is protected against attacks. Legal basis: our legitimate interest (Article 6(1)(f) GDPR).

Visitor statistics. With your consent we use Google Analytics (via Google Site Kit) to know which guides are read most. Legal basis: consent (Article 6(1)(a) GDPR).

Advertising. We show Google AdSense ads. Ads based on your interests appear only with your consent; without it Google may show non-personalised ads. Legal basis: consent (Article 6(1)(a) GDPR).

Videos and fonts. We embed YouTube videos and load the website fonts from Google Fonts servers. When a page or video is displayed, your browser connects to Google’s servers and sends them, among other things, your IP address. Playing a video may set YouTube cookies. Legal basis: our legitimate interest (Article 6(1)(f) GDPR) – displaying content correctly.

Affiliate links. Some links in our articles may be partner (affiliate) links, and we label them. After a click the partner may store a cookie in your browser to attribute a commission to us. We do not receive your personal data from partners – only aggregated commission information. Legal basis: our legitimate interest (Article 6(1)(f) GDPR).

Forms and services

Newsletter. When you subscribe to the newsletter, we process your email address, the date and IP address of your sign-up and confirmation, and information about opened emails and clicked links. We do this to send you the “Podhale bez wpadek” checklist and further emails with guides. The sign-up has to be confirmed via a link sent by email. You can unsubscribe at any time using the link in the footer of every email. Legal basis: consent (Article 6(1)(a) GDPR).

Airport transfer request. The form collects your name, phone number, email, route, date and flight number, number of passengers, address in Podhale and notes, in order to prepare an offer and arrange the ride. We pass the data to the carrier who performs the transfer. Legal basis: consent and steps taken at your request before entering into a transport contract (Article 6(1)(a) and (b) GDPR).

Email contact. When you write to us, we process your email address and the content of your message in order to reply. Legal basis: our legitimate interest (Article 6(1)(f) GDPR).

Adding a business to the directory. The “Add your business” form collects, among other things, the business name, address, phone, email, website and social media profiles. The data is used to verify and publish the listing; business data (not a private email) may be published in the directory. Legal basis: consent given in the form (Article 6(1)(a) GDPR).

Event submission. The form in the events calendar collects the event details and the organiser’s name, email and phone number in order to verify and publish the submission. The form is protected against spam by Google reCAPTCHA. If you use the “Fill in the form with AI” option, the content of the page you point to or the poster you upload is sent to Anthropic solely to read the event details – without your email or phone number. Legal basis: consent given in the form (Article 6(1)(a) GDPR); reCAPTCHA – our legitimate interest (Article 6(1)(f) GDPR).

Business website builder. When you order a website we process the data needed to provide the service and handle payment. Payments are processed by Stripe – we do not have access to your full card details. Legal basis: contract (Article 6(1)(b) GDPR) and accounting and tax obligations (Article 6(1)(c) GDPR).

Comments. If you post a comment, we store your name, email address (not published) and IP address to moderate comments and protect against spam. An avatar from the Gravatar service may be shown next to comments and authors. Legal basis: our legitimate interest (Article 6(1)(f) GDPR).

4. Who we share data with

Data goes only to companies that help us run the website or provide the service you ask for – and only as far as needed:

  • SeoHost.pl – website and email hosting;
  • Google Ireland Limited – Google Analytics, Google AdSense, Google reCAPTCHA, Google Fonts, YouTube and Gmail, which we use to send form notifications;
  • UAB “MailerLite” (Lithuania) – sending the newsletter and storing the subscriber list;
  • the carrier performing the airport transfer – as far as needed for the ride;
  • Stripe Payments Europe Ltd. – payments in the website builder;
  • Anthropic – only for the “Fill in the form with AI” option in event submissions;
  • Automattic Inc. – Gravatar avatars;
  • public authorities – only when required by law.

5. Transfers outside the European Economic Area

Some providers (Google, Stripe, Anthropic, Automattic, MailerLite) may also process data in the USA. This is based on the European Commission’s decision on the EU-US Data Privacy Framework or on standard contractual clauses approved by the European Commission.

6. How long we keep data

  • statistics – according to Google Analytics settings, no longer than 14 months;
  • newsletter – until you unsubscribe or withdraw consent; after unsubscribing we may keep just your email address on a suppression list so that we don’t send you any more emails;
  • airport transfer requests – up to 12 months after the date of the ride, unless you withdraw consent earlier;
  • email correspondence – until the matter is closed, and then until any claims become time-barred;
  • business and event submissions – for as long as the listing is published or until consent is withdrawn;
  • order and payment data – for the period required by tax law (usually 5 years from the end of the tax year);
  • comments – until they are deleted;
  • technical data and security logs – for a short period needed to protect the website.

7. Your rights

You have the right to access your data, rectify it, erase it, restrict processing and port it, to object to processing based on legitimate interest, and to withdraw consent at any time (without affecting the lawfulness of processing before withdrawal). Write to podhaleinfo@gmail.com. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, Poland).

Providing data in forms is voluntary, but without the fields marked with an asterisk we cannot handle your request. We do not make decisions about you based solely on automated processing.

8. Cookies

The website uses cookies. Necessary cookies are needed for the website to work and to remember your choices. Analytics cookies (Google Analytics) and advertising cookies (Google AdSense) are stored only with your consent given in the cookie banner. You can change your decision at any time by clicking the cookie settings icon in the bottom left corner of the page. You can also delete and block cookies in your browser settings.

9. External links and content

The website contains links to other services (e.g. YouTube, Facebook, Instagram, TikTok, the Tatra National Park and transport companies’ websites, partner shops). Once you go to another website, its owner’s privacy policy applies.

10. Changes to this policy

We update this policy when our services or the law change. The current version is always on this page.

Last updated: 3 October 2026