Privacy Policy

1. Data Controller

The data controller of your personal data is:

• International Visa Service Sp. z o.o. sp.k.
• NIP: 9542766476
• ul. Graniczna 29, 40-017 Katowice, Poland
• Email: [email protected]

2. What Personal Data We Collect

We may collect the following categories of personal data:

• Contact information: name, email address, phone number
• Booking information: travel dates, tour preferences, number of travellers
• Technical data: IP address, browser type, pages visited, cookies
• Communications: records of correspondence with our team
• Payment information: processed securely through payment providers (we do not store card details)

3. How We Use Your Data

We use your personal data for the following purposes:

• To process and manage your tour bookings
• To respond to your enquiries and provide customer support
• To send booking confirmations and relevant travel information
• To improve our website and services
• To comply with legal obligations
• To send marketing communications (only with your consent)

4. Legal Basis for Processing

We process your personal data based on:

• Contract performance — to fulfil your tour booking
• Legitimate interests — to improve our services and respond to enquiries
• Legal obligation — to comply with applicable laws
• Consent — for marketing communications (you may withdraw at any time)

5. Cookies

Our website uses cookies to enhance your browsing experience. We use:

• Essential cookies: necessary for the website to function correctly
• Analytics cookies: help us understand how visitors use our site (anonymised data)
• Preference cookies: remember your settings and preferences

You can manage cookie settings in your browser. Please note that disabling certain cookies may affect website functionality.

6. Data Sharing

We may share your data with:

• Tour operators and suppliers — hotels, transport providers necessary to fulfil your booking
• Payment processors — for secure payment processing
• Legal authorities — when required by law

We do not sell your personal data to third parties.

7. Data Retention

We retain your personal data for as long as necessary to provide our services and comply with legal obligations. Booking records are typically retained for 5 years after your tour. You may request deletion of your data at any time, subject to legal requirements.

8. Your Rights (GDPR)

Under GDPR, you have the following rights regarding your personal data:

• Right of access — to request a copy of your personal data
• Right to rectification — to correct inaccurate data
• Right to erasure — to request deletion of your data
• Right to restriction — to limit how we process your data
• Right to data portability — to receive your data in a portable format
• Right to object — to object to processing based on legitimate interests
• Right to withdraw consent — for marketing communications at any time

To exercise any of these rights, contact us at: [email protected]

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. However, no internet transmission is 100% secure.

10. International Data Transfers

Your data may be processed in countries outside the European Economic Area (EEA) when working with international suppliers for your tour. We ensure appropriate safeguards are in place in accordance with GDPR requirements.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page indicates when it was last revised. Continued use of our website after changes constitutes acceptance of the updated policy.

12. Complaints

If you have concerns about how we handle your data, you have the right to lodge a complaint with the Polish Data Protection Authority (UODO) or your local supervisory authority.