1. Data Controller

The controller of your personal data is:
Jeep Tour Georgia
Rynek 10 Street, 62-035 Kórnik, Poland
E-mail: jeeptourgeorgiaachiko@gmail.com

2. Scope and Purposes of Data Processing

1. Account registration and management

   • Data: first and last name, e-mail address, password, billing and shipping address.

   • Purpose: to enable purchase of tours, account login, payment processing, and delivery of travel documents.

   • Legal basis: Art. 6(1)(b) GDPR (performance of a contract).

2. Order fulfillment and payment handling

   • Data: contact details, shipping address, phone number, invoicing data, payment details (shared only with the payment provider).

   • Purpose: to execute the sales contract, issue invoices, and handle complaints.

   • Legal basis: Art. 6(1)(b) GDPR.

3. Customer inquiries and complaints handling

   • Data: first and last name, e-mail address, description of the inquiry or complaint, any attachments.

   • Purpose: to respond to inquiries and resolve complaints.

   • Legal basis: Art. 6(1)(f) GDPR (legitimate interest of the Controller – providing customer support).

4. Marketing and newsletter

   • Data: first and last name (optional), e-mail address.

   • Purpose: to send commercial information about tours and promotions.

   • Legal basis: Art. 6(1)(a) GDPR (consent).

5. Cookies and other tracking technologies

   • Data: cookie identifiers, browsing behavior (visited pages, session duration).

   • Purpose: to improve website functionality, provide analytics, and personalize marketing (including remarketing).

   • Legal basis: Art. 6(1)(f) GDPR and the Polish Electronic Services Act.

3. Data Recipients

• Payment service providers (e.g., PayU, Przelewy24) – for payment processing;

• Courier companies – for delivery of travel documents;

• IT service providers (hosting, e-mail services, e-commerce platform) – for website operation;

• Accounting firm – for bookkeeping and invoicing;

• Public authorities – when legally required (e.g., Tax Office).

4. Data Retention Periods

• Account and order data: retained for 5 years after the end of the year in which the service was provided (due to tax regulations).

• Marketing data (newsletter): retained until consent is withdrawn.

• Inquiry and complaint data: retained until the matter is resolved, but no longer than 3 years from submission.

• Cookies: retained according to each cookie’s lifespan, but no longer than 24 months.

5. Data Subject Rights

You have the right to:

1. Access your personal data and receive a copy.

2. Rectify inaccurate or incomplete data.

3. Erase your data (“right to be forgotten”) where no legal basis for further processing exists.

4. Restrict processing of your data.

5. Data portability, in a machine-readable format.

6. Object to processing based on the Controller’s legitimate interest.

7. Withdraw consent at any time, without affecting prior lawful processing.

8. Lodge a complaint with the President of the Personal Data Protection Office if you believe processing violates the GDPR.

6. Cookies and Analytics Tools

1. Essential cookies – required for website operation (user sessions, shopping cart).

2. Statistical cookies – collect anonymous data on site usage (e.g., Google Analytics).

3. Marketing cookies – used for personalized offers and advertising (e.g., Facebook Pixel, Google Ads).

You can manage cookie preferences via your browser settings or the consent panel on our website.

7. Changes to the Privacy Policy

We reserve the right to amend this Privacy Policy. All changes will be published on this page with an updated “Last updated” date.

Contact for Data Protection Matters:
Jeep Tour Georgia
Rynek 10 Street, 62-035 Kórnik, Poland
E-mail: jeeptourgeorgiaachiko@gmail.com