INFORMATION CLAUSE (RODO)
Version of 2020.06.03
According to Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/WE (General Data Protection Regulation), publ. Dz. Urz. UE L Nr 119, s. 1, we inform that:
1. The administrator of your personal data is Digital Dragon based in Krakow, hereinafter referred to as "Administrator",
2. In matters concerning the protection of personal data, you can contact the Data Protection Officer by e-mail to the indicated address - info@questingo.com (with the note "personal data")
3. Your personal data has been collected during the use of the Online Shop available on the website www.questingo.com, by filling in the forms available in the shop (enabling, among others, registration), purchasing a trip, or during any exchange of information with the Administrator by phone, e-mail or in any other way, as well as during reporting problems concerning the Online Shop and Mobile Application or the services provided.
4. We process your personal data:
1) name and surname, (in case of natural persons conducting business activity, legal persons and organizational units that are not legal persons: name - company, NIP number and - if it has and name and surname of a person authorized to represent);
2) e-mail address,
3) date of birth (in the case of a user having the status of a consumer, within the meaning of Article 22 [1] of the Civil Code for the purposes of verifying the age of users using the Online Shop and filtering the available options according to age),
4) a password,
5) address of residence and/or business activity (in case of users having the status of an entrepreneur within the meaning of Article 43 [1] of the Civil Code),
6) records concerning all types of correspondence between you and the Administrator and records concerning correspondence between users within the functionalities of the Online Store and the Mobile Application;
d) data concerning your visits to the Online Store and Mobile Application and the resources you use; including information about the connection parameters (time stamp, IP address),
e) responses to any surveys or questionnaires concerning the Services provided (these data may be used for analysis purposes, including user behaviour);
f) comments (feedbacks) of users, which will be added after the completed Service.
5. With regard to personal data concerning your visits to the Online Store and the Mobile Application, the Administrator may (where required and obtained your consent to do so) obtain data concerning the devices and networks used by you to access the services in the Online Store and the Mobile Application. This data may include: your IP address, login data, browser type and version, types and versions of plug-ins used by web browsers, operating system and platform, advertising identifier, information on visits, including the URL of the site on which the link leading to the Online Shop was clicked on, data download errors, time of visits to specific pages. This data is collected by the Administrator, who collects this data in particular through cookies.
5. Your personal data will be processed for the following purposes:
1) exercising the rights and obligations resulting from the agreement concluded between the User and the Administrator or making the necessary settlements in connection with its conclusion (inter alia, Article 6.1.b of the RODO), as well as providing you with information related to the services provided, which is necessary for the performance of mutual contractual obligations then the data are processed and, after its completion, the data will be stored for the period necessary to prove the correctness of the performance of the obligations resulting from the agreement until the expiry of the time limits indicated in the regulations on archiving and the expiry of the time limits for claiming under the agreement;
2) to perform the Administrator's statutory duties, in particular tax and reporting duties (inter alia 6.1.c of the RODO) - for the time necessary to perform the Administrator's statutory duties, in particular until the expiry of the limitation period for tax liabilities;
3) enable you to transmit and exchange information with other users within the framework of the Online Shop and Mobile Application, which involves the exercise of mutual rights and obligations resulting from the agreement concluded between the User and the Administrator (Article 6.1.b of the RODO) - for the time necessary to perform the contract, and after its completion, the data will be stored for the time necessary to prove the correctness of performance of the obligations under the contract until the expiry of the deadlines indicated in the regulations on archiving and the deadlines for claims under the contract;
4) ensure that the Administrator provides services in accordance with the applicable laws, including in particular the rules of the On-line store and Mobile Application and this Policy, which is necessary to fulfil mutual contractual obligations (Article 6.1.b of the RODO), the Administrator's fulfillment of its statutory obligations (Article 6.1.c of the RODO) and the performance and defence of claims under the concluded agreement (Article 6.1.f of the RODO) - for the time necessary to perform the contract, and after its completion, the data will be stored for the time necessary to prove the correctness of performance of the obligations under the contract until the expiry of the deadlines indicated in the regulations on archiving and the deadlines for claims under the contract; in case of the Administrator's statutory obligations, the processing of Personal Data will be carried out for the time necessary to fulfil the Administrator's statutory obligations; in case of defence and execution of claims resulting from the contract for the time necessary to fulfil the Administrator's legally justified interest or until the User submits a justified objection,
5) provide you (in a manner consistent with the applicable regulations) with marketing materials and information, instructions and guidelines necessary to improve the performance of the Services - your personal data is then processed with your consent (Article 6.1.a RODO) and/or in the Administrator's legitimate interest, i.e. improvement of the provided services and direct marketing (Article 6.1.f RODO) for the time necessary to realise the Administrator's legitimate interest or until you submit a justified objection, and in the case of direct marketing no longer than until you express your objection;
6) management of the Website and the Application and to solve problems related to the use of the Online Shop, data analysis and supervision - the basis for processing your personal data is then the Administrator's legitimate interest, which is to ensure the security of the service provided as well as improvement of the functions available in the Online Shop and the Mobile Application (Article 6.1.f of the RODO); personal data are then processed for the time necessary to realise the Administrator's legitimate interest or until you submit a justified objection;
7) improvement of the Online Store and Mobile Application and the services provided, as well as to ensure that their content is communicated to you in an appropriate manner, in particular taking into account the devices by means of which you use the Online Store, which constitutes a legitimate interest of the Administrator (Art. 6.1.f) of the RODO); personal data are then processed for the time necessary to satisfy the Administrator's legitimate interest or until the User submits a justified objection;
8) for analytical and statistical purposes, including satisfaction surveys of Users who are Consumers (processing is necessary due to the legitimate interest of the Administrator - Article 6.1.f of the RODO), personal data will be processed until there is an additional legal basis (e.g. allowing for their processing in order to perform the contract) - if the Administrator loses this basis, personal data will be anonymised;
9) ensure security of using the services available in the Mobile Store and the Mobile Application, which is necessary to perform mutual contractual obligations, draw up, perform or defend claims resulting from the contract (Article 6.1.b) of the RODO), fulfil the Administrator's statutory obligations (Article 6.1.c) of the RODO), as well as in the Administrator's legitimate interest (to ensure security of the Services provided) (Article 6.1.f) of the RODO) - for the time necessary for the execution of the agreement, and after its termination, the data will be stored for the time necessary to prove the correctness of the execution of the obligations arising from the agreement until the expiry of the time limits indicated in the archiving regulations; in the case of the Administrator's statutory obligations, the processing of personal data will be carried out for the time necessary to execute the Administrator's statutory obligations; in the case of security for the time necessary to execute the Administrator's legally justified interest or until the User submits a justified objectio;
10) to perform other statutory duties of the Administrator, in particular tax and reporting duties (Article 6 paragraph 1 lit c) RODO) - for the time necessary to perform the Administrator's statutory duties, in particular until the expiry of the limitation period for tax liabilities;
11) in the case of expressing voluntary and optional consents (Article 6 paragraph 1 lit a) of the RODO and Article 10 of the Act of 18.07.2002 on the provision of services by electronic means and Article 172 of the Act of 16.07.2004. - telecommunications law) the data shall also be processed for marketing purposes consisting in providing information about the services provided by the Administrator, special offers, promotions and discounts, also on the basis of separate consents expressed by e-mail or during a telephone conversation - until the withdrawal of consent.
6. Providing personal data is voluntary, however, the consequence of failure to provide such data will be the Administrator's inability to conclude an agreement and provide services via the Online Store and Mobile Application to you.
7. To the extent that data are processed on the basis of separate consent, you have the right to withdraw your consent at any time. However, this does not affect the lawfulness of the data processing prior to revocation.
8. The recipients of your personal data may be:
1) entities authorised to receive your personal data on the basis of the provisions of generally applicable law (including the Police, Courts, the Public Prosecutor's Office and other entities carrying out investigation and prosecution activities),
2) business partners,
3) Administrator's service providers (in particular in the technical field, hosting services, analytical and statistical tools, payments, accounting services of other entities, in the field of postal services), on the basis of relevant contracts signed with the Administrator,
4) persons cooperating with the Administrator within the Online Shop on the basis of issued authorisations.
9. Your personal data may be transferred to a third country or an international organisation outside the European Economic Area in the area of server service, performance of the ordered service, then all transfers of personal data will be made on the basis of the so-called standard contractual clauses, adopted by the European Commission and ensuring an appropriate level of security in accordance with the applicable regulations, and may be based on the decision of the European Commission or the explicit consent of the User.
10. You have the right to demand from the Administrator access to your personal data, correct them, delete them (the so-called right to be forgotten), limit the processing, objection, transfer the data. To the extent that your personal data is processed on the basis of separate consent, you have the right to withdraw your consent at any time. However, your withdrawal of consent does not affect the lawfulness of the data processing that was carried out before the withdrawal of your consent.
11. The right to object to the processing of your personal data concerns the following case:
1) the processing of your personal data for the purpose of direct marketing, if you exercise your right to object, the Administrator will stop processing your personal data for this purpose;
2) Your special situation - you have the right to object to the processing of your personal data also in other cases than direct marketing. However, this requires that you indicate a special situation justifying the Administrator's discontinuation of personal data processing to the extent indicated in the objection. In such a case the Administrator shall stop processing your personal data, unless the necessity of processing takes precedence over your rights in a given case or the processing is necessary to establish, assert or defend claims.
12. Your personal data may be used for automated decision making, including profiling, including information contained in cookies. Profiling will affect the functionality and quality of the Online Store, the content of your specific profile, the range of services dedicated to you.
13. You have the right to lodge a complaint with the supervisory authority, i.e. the President of the Office for Personal Data Protection, if you believe that the processing of your personal data violates the provisions of the RODO.