This Privacy Policy explains how we collect, use, and protect your personal data when you use our website or book one of our tours. By using our services, you agree to the terms of this Privacy Policy.

The data controller responsible for your personal data is:

PMC PARTNERS sp. z o.o.

Address: Wadowicka 6, 30-415 Kraków, Poland

VAT ID (NIP): PL6793235208

Email: office@hellocracow.com

We may collect the following information:

• First and last name
• Email address
• Phone number
• Booking details (dates, tour type, number of participants)
• IP address and browser data
• Any other information you choose to provide when booking or contacting us

We may also collect usage data automatically (e.g. your IP address, browser type, visited pages, time and date of visits).

We process your personal data for the following purposes:

• To process and manage your bookings
  
• To contact you about your reservation (confirmations, updates, reminders)
  
• To provide customer support and respond to your inquiries
  
• To send newsletters or promotional offers (only with your consent)
  
• To analyze and improve our website and services (e.g. via analytics tools)
  
• To comply with legal obligations, such as accounting and tax regulations
  

The legal basis for processing your data may include:

• Performance of a contract – when processing is necessary to fulfill your booking or provide requested services
  
• Your consent – for marketing communication, newsletter subscriptions, or optional tracking tools (e.g. Facebook Pixel)
  
• Our legitimate interests – such as improving our services and ensuring the security and functionality of the website
  
• Legal obligations – for compliance with applicable laws and regulations

• Legal basis: Your explicit consent
  
• Unsubscribe: Click "Unsubscribe" in any email or contact us directly
  
• Service provider: We may use platforms like Mailchimp or Brevo; data may be processed outside EEA under appropriate safeguards
  
• Retention: Stored while subscribed, removed or anonymized upon unsubscribe
  

Cookies are small text files placed on your device to make our site work efficiently, remember preferences, and support analytics and marketing. We and our trusted partners use cookies, including:

1. Session cookies – Temporary, deleted when browser closes; essential for site navigation and secure transactions.
   
2. Persistent cookies – Saved on your device for set periods (e.g., language or login preferences).
   
3. Third-party cookies – Set by external services (e.g. analytics, advertising).

• Ensure proper website functionality
  
• Remember your preferences (e.g. language)
  
• Analyze website traffic (e.g. via Google Analytics)
  

We use Google Analytics to understand site usage (visits, pages, timing). The service logs your IP address, but we do not combine it with personal data. See Google’s policy for more detail.

1.  Facebook Pixel (Meta Platforms Ireland Ltd.)
• Tracks user behavior, ad performance, remarketing on Facebook/Instagram
• Collects IP, page visits, actions, device/browser info, and possibly Facebook user ID
• Retention: up to 90 days
• Legal basis: Consent
• More info: https://www.facebook.com/privacy/policy
2. Other advertising cookies (e.g. Google Ads) – used to deliver relevant ads; legal basis: consent
   
• You may opt-out via our Cookie Settings banner or external tools such as:
• NAI: http://optout.networkadvertising.org/#!/
• DAA: http://optout.aboutads.info/#!/

• Inform about cookies and tracking
  
• Link to this Privacy Policy
  

• Third-party service providers (e.g. booking systems, email, payments)
  
• Marketing platforms and analytics providers (e.g. Meta, Google)
  
• Government authorities, if required by law
  
• Other companies, if we undergo a merger or business transfer (you will be informed in such cases)
• We don’t sell your personal data to third parties.
  

As we operate from Poland, your data may be transferred and processed within the European Economic Area (EEA). If we work with service providers outside the EEA, we ensure appropriate safeguards are in place.

Your data is stored:

• As long as necessary for service delivery and legal obligations
  
• Based on the data type; e.g., accounting data retained for 5 years
  
• Until you request deletion, with incomplete/inaccurate data corrected or removed at our discretion

You have the right to:

• Access your personal data
  
• Correct or update data
  
• Request deletion of your data (right to be forgotten)
  
• Restrict or object to data processing
  
• Withdraw consent at any time (without affecting prior processing)
  
• Data portability
  
• Lodge a complaint with supervisory authority (UODO in Poland)

Our Site is not intended for children under 16. We do not knowingly collect data from minors without guardian consent. If you believe we hold data of a minor, contact us to remove it.

We may show ads using third-party ad technologies which use cookies to deliver personalized ads. You may opt-out via the above-mentioned external links.

Our website may include links to other websites. We are not responsible for their content or privacy practices. Please read their privacy policies if you visit them.

We use appropriate technical and organizational measures to protect your data. However, no system is 100% secure, so we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We recommend reviewing this page regularly.

If you have any questions about this Privacy Policy or how we process your data, please contact us at:

📧 office@hellocracow.com