Privacy policy

This is an English translation for convenience. The Polish version of this privacy policy is legally binding.

Date last updated: 9 July 2026.

This Privacy Policy describes how we process the personal data of users of the rowerydolinachocholowska.pl website and how we use cookies and analytics and advertising tools. We respect your privacy and collect only the data necessary to handle bookings, contact, and — with your consent — to measure and improve the effectiveness of the website.

1. Data controller

The controller of personal data is Magdalena Komperda Parking, ul. Sikorskiego 17/1, 34-400 Nowy Targ, NIP 7352426262, REGON 123104218 (“u Magdy bike rental and car park”), contact: tel. 519 107 729, e-mail: imadzia@onet.pl. We have not appointed a Data Protection Officer — for all matters concerning your data, contact the controller using the details above.

2. What data we process, for what purpose and on what basis

• Online booking (SlotWise system): name, phone, e-mail, chosen date and type of bike, data necessary to process payment — for the purpose of concluding and performing the rental agreement (Article 6(1)(b) GDPR).
• Contact form / telephone contact: name, phone or e-mail and the content of the message — for the purpose of providing a reply and handling the enquiry (Article 6(1)(b) and (f) GDPR — our legitimate interest in communicating with the customer).
• Website statistics and analytics (Google Analytics 4, Google Tag Manager): data on website usage (pages visited, entry source, approximate location, device type, cookie identifiers) — for the purpose of improving the website’s performance and measuring the effectiveness of marketing activities, only after consent to cookies has been given (Article 6(1)(a) GDPR).
• Advertising and conversion measurement (Google Ads): information about interaction with an advert and actions taken on the website (e.g. clicking a phone number, making a booking) — for the purpose of settling and optimising advertising campaigns, after consent has been given (Article 6(1)(a) GDPR).
• Protection against advertising abuse (click fraud): IP address and basic technical request data (browser identifier, address of the page visited, advert click parameters) — for the purpose of detecting and blocking invalid, automated or repeated clicks on Google Ads adverts and protecting against advertising fraud, based on our legitimate interest (Article 6(1)(f) GDPR). We process this data regardless of consent to cookies, we store it for no longer than 60 days, after which it is automatically deleted; it is not used for profiling or personalised advertising.

3. Cookies and consent (Consent Mode)

The website uses cookies and similar technologies:

• Necessary — required for the proper functioning of the website and the booking system; they do not require consent.
• Analytics (Google Analytics 4) — traffic statistics; they require consent.
• Advertising / marketing (Google Ads) — measurement of conversions and advert effectiveness; they require consent.

You manage consent through the cookie banner (CookieScript) displayed on your first visit. Until consent is given, Google tools operate in a limited mode (Google Consent Mode v2, default settings = no consent: analytics_storage, ad_storage, ad_user_data, ad_personalization set to “denied”). You can withdraw consent at any time by changing the settings in the banner or by deleting cookies in your browser — withdrawal does not affect the lawfulness of processing carried out before withdrawal.

4. Google tools and transfer of data outside the EEA

We use tools provided by Google Ireland Limited: Google Analytics 4, Google Tag Manager and Google Ads (conversion measurement). In connection with their operation, data may be transferred to Google LLC in the United States — Google provides appropriate safeguards (including standard contractual clauses and participation in the Data Privacy Framework). If we enable the Google Ads Enhanced Conversions feature, a hashed (irreversibly encrypted, SHA-256) e-mail address or phone number provided in a booking may be transferred to Google, solely for the purpose of matching conversions — Google does not receive this data in plain form.

5. SlotWise booking system

Online bookings are handled by the external SlotWise system (bookings.slotwise.pl), acting as a data processor on our behalf. The data provided in a booking (name, contact, date, payment) is processed for the purpose of performing the bike rental agreement. Details of the provider’s processing are set out in its terms and privacy policy.

6. Data retention periods

• Booking data and rental agreement records — for the duration of the service and the period arising from tax regulations and the limitation of claims.
• Data from the form / contact enquiries — up to 12 months from the last contact, provided no agreement was concluded.
• Analytics data in Google Analytics 4 — in accordance with the set retention period (14 months), after which it is aggregated or deleted.
• IP address logs for protection against advertising abuse (click fraud) — no longer than 60 days, then automatically deleted.

7. Data recipients

Data may be entrusted to entities that support the operation of the website and the company: the hosting provider (lh.pl), the booking system provider (SlotWise), Google (analytics and advertising tools), the payment operator and the e-mail provider. Data is not sold to third parties or used for automated decision-making that produces legal effects (profiling).

8. Your rights

You have the right to: access your data, rectify it, erase it, restrict processing, data portability, object to processing based on legitimate interest, and — for data processed on the basis of consent — withdraw it at any time. You also have the right to lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warszawa). For data matters, write to imadzia@onet.pl or call: 519 107 729. Providing data in a booking is voluntary but necessary to conclude the rental agreement.

9. Changes to the policy

We may update the policy in connection with changes to regulations or the tools we use. The current version is always available on this page, with the date of the last update indicated.