Privacy policy

1. Data controller

The controller of personal data is Kacper Opiela.

For privacy matters and to exercise rights relating to personal data, contact:

opielamoves@gmail.com

2. What data may be processed

The scope of data depends on how you use the website.

During an ordinary visit, basic technical data may be processed, such as IP address, request time, browser and device information, and the address of the page visited. This is needed for the site to operate properly and securely.

When you use the globe, Mapbox may receive technical data needed to display the map, handle the session, provide security and account for the service. The website does not ask for access to the device's current location.

After you consent to analytics, Google Analytics 4 may process information about how the site is used, including pages visited, approximate location, device type and selected events on the page. Google Analytics is not started before consent.

After the same consent, Vercel Analytics may process anonymised visit information, including pages visited, referrer, approximate location, operating system and browser. The service does not use cookies. Visitors are identified by a request hash that resets every 24 hours. Vercel Analytics is not started before consent.

After a form is sent, information provided by the user may be processed, including name, email address, preferred dates, form of travel, places and the message itself. Basic technical data needed to protect the form may also be processed.

3. Purposes and lawful bases

Data may be processed for the following purposes:

• handling enquiries and steps taken at the user's request before a possible contract, Article 6(1)(b) GDPR,
• site analytics through Google Analytics 4 and Vercel Analytics, only after consent, Article 6(1)(a) GDPR,
• security, proper operation of the site, preventing misuse, and establishing or defending claims, Article 6(1)(f) GDPR,
• meeting legal obligations where they apply, Article 6(1)(c) GDPR.

Consent to analytics may be withdrawn at any time.

4. Service providers

In connection with the operation of the website, data may be passed to technical service providers, only to the extent needed for their function.

These currently include:

• Vercel, infrastructure, hosting and Vercel Analytics after consent,
• Mapbox, maps and the interactive globe,
• Resend, sending messages,
• Google, email handling,
• Google Ireland Limited, Google Analytics 4 after consent.

The website does not run behavioural advertising or remarketing and does not use Meta Pixel.

Personal data is not sold.

5. Transfers outside the EEA

Some providers may also process data outside the European Economic Area, including in the United States.

In those cases, transfers use mechanisms provided by the GDPR that are appropriate to the provider and the type of transfer.

These may include European Commission adequacy decisions or standard contractual clauses.

6. Retention

Data is kept only for as long as needed for the purpose for which it was collected.

Messages sent through the forms are as a rule kept for no more than 12 months after correspondence ends.

If the contact leads to a collaboration, data may be kept longer to the extent needed to carry it out, meet legal duties or protect claims.

The retention period for event data in Google Analytics has been set to 14 months.

In Vercel Analytics the visitor identifier is reset every 24 hours.

Infrastructure, map and email providers may keep their own technical data and logs for periods that follow from their terms, security requirements or accounting.

7. Your rights

To the extent provided by the GDPR, you may request:

• access to your data,
• a copy of your data,
• rectification,
• erasure,
• restriction of processing,
• portability, where the law provides for that right,
• withdrawal of consent given,
• an objection to processing based on legitimate interests.

You may also lodge a complaint with the President of the Personal Data Protection Office in Poland.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

8. Voluntary provision of data

Providing data in the forms is voluntary.

Without the information marked as required, sending or handling an enquiry may not be possible.

Form data is not used for advertising profiling or automated decision-making.

9. Changes to this policy

This privacy policy may be updated when the law, the website's functions or the services used change.

The current version of the document and its effective date are always available on this page.