Privacy Policy

1. Data Controller

The controller of your personal data is City Sightseeing Warsaw, ul. Przykładowa 1, 00-001 Warsaw, Poland, e-mail: warsaw@city-sightseeing.pl, tel. +48 793 795 733.

2. Data We Collect

• Contact data: name, e-mail address, phone number – provided voluntarily via the contact form.
• Transaction data: purchased ticket details, travel dates and times.
• Technical data: IP address, browser type, OS, pages visited – collected automatically via cookies and analytics tools.

3. Purposes and Legal Bases

• Service execution: to perform the transport contract (Art. 6(1)(b) GDPR).
• Marketing: with your consent (Art. 6(1)(a) GDPR). You may withdraw consent at any time.
• Legitimate interests: website analytics, fraud prevention (Art. 6(1)(f) GDPR).
• Legal obligations: accounting and tax records (Art. 6(1)(c) GDPR).

4. Cookies

• Essential: required for site functionality. No consent needed.
• Analytics: Google Analytics – helps us understand site usage. Can be disabled in browser settings.
• Maps: Google Maps – used to display interactive route maps.

5. Data Recipients

Your data may be shared with payment processors (e.g. Stripe, PayU), hosting providers, Google LLC (Analytics, Maps – data transferred under Standard Contractual Clauses), and public authorities where required by law.

6. Retention Periods

• Transaction data: 5 years (tax obligations).
• Contact form data: 12 months from last contact.
• Marketing data: until consent is withdrawn.
• Analytics cookies: up to 14 months (Google Analytics policy).

7. Your Rights

You have the right to: access, rectification, erasure ("right to be forgotten"), restriction of processing, data portability, objection, and to lodge a complaint with the supervisory authority (UODO, ul. Stawki 2, Warsaw).

Submit requests to: warsaw@city-sightseeing.pl

8. Changes to This Policy

We may update this policy from time to time. The current version is always available at https://hoponhopoff.pl/privacy/