Privacy Policy

Last updated: 20 April 2026

This Privacy Policy explains how Krakow Urban Tours collects, uses, stores, and protects your personal data when you visit our website, contact us, or book a tour with us.

By using this website, submitting an enquiry, or making a booking, you acknowledge that your personal data may be processed in accordance with this Privacy Policy.

1. Who We Are

Data Controller:
Krakow Urban Tours Sp. z o.o.
ul. Wspólna 25F
32-085 Modlniczka
Poland

VAT ID: 6762630151
Company No.: 523686461
Email: info@krakowurbantours.com

2. Personal Data We May Collect

Depending on how you use our website or services, we may collect the following personal data:

  • Name
  • Email address
  • Phone number
  • Booking details
  • Travel or participation details relevant to your booking
  • Special requests, dietary requirements, or accessibility information that you choose to provide
  • Correspondence sent to us by email or through contact forms
  • Technical and usage data, such as IP address, browser type, device information, pages visited, and time spent on the website
  • Cookie and consent-related data where applicable

3. How We Collect Your Data

We may collect your data when you:

  • Browse or interact with our website
  • Submit a contact or enquiry form
  • Email us directly
  • Make a booking through our website or third-party booking system
  • Accept or manage cookie preferences through our consent tools

4. How We Use Your Personal Data

We may use your personal data for the following purposes:

  • To respond to your enquiries and requests
  • To process and manage bookings
  • To communicate with you about your booking or tour
  • To provide customer support
  • To operate, maintain, and improve our website and services
  • To monitor website performance, security, and technical functionality
  • To comply with legal, tax, accounting, and regulatory obligations
  • To send marketing communications where you have given consent or where permitted by law

5. Legal Bases for Processing

Under the GDPR, we process personal data on one or more of the following legal bases:

  • Performance of a contract – where processing is necessary to provide the services you have booked or requested
  • Pre-contractual steps – where processing is necessary to respond to your enquiry before a booking is made
  • Legal obligation – where we are required to process data to comply with applicable laws
  • Legitimate interests – where processing is necessary for the legitimate operation, protection, and improvement of our business and website, provided your rights do not override those interests
  • Consent – where consent is required, including for certain cookies or certain marketing communications

6. Sharing Your Personal Data

We do not sell your personal data.

We may share personal data only where necessary with trusted third parties, including:

  • Website hosting and technical service providers
  • Booking and reservation providers, including FareHarbor
  • Payment, communication, analytics, or website-support providers, where used
  • Professional advisers, accountants, or legal advisers where necessary
  • Public authorities or regulatory bodies where required by law

Any such sharing is limited to what is reasonably necessary for the relevant purpose.

7. International Transfers

Some of our service providers may process personal data outside Poland or the European Economic Area. Where this happens, we take reasonable steps to ensure that appropriate safeguards are in place and that your personal data is protected in accordance with applicable data protection law.

8. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, including to fulfil bookings, respond to enquiries, maintain business records, comply with legal and accounting obligations, resolve disputes, and enforce our agreements.

Usage and technical data is generally kept for a shorter period unless needed for security, fraud prevention, or legal compliance.

9. Your Rights

Subject to applicable law, you may have the right to:

  • Request access to your personal data
  • Request correction of inaccurate or incomplete data
  • Request deletion of your data
  • Request restriction of processing
  • Object to processing based on legitimate interests
  • Withdraw consent where processing is based on consent
  • Request data portability where applicable
  • Lodge a complaint with a competent data protection authority

If you are in Poland or your data is processed there, you may lodge a complaint with the President of the Personal Data Protection Office (UODO).

10. Cookies and Similar Technologies

Our website may use cookies and similar technologies to ensure the site functions properly, remember your preferences, improve performance, and measure usage.

Some cookies are strictly necessary for the operation of the website and booking process. Other cookies, such as analytics or marketing cookies, may be used only where consent is required and has been given.

You can manage cookies through your browser settings and, where applicable, through our cookie consent tool.

For more detailed information about the cookies and similar technologies used on this website, please read our Cookie Policy.

11. Third-Party Websites

Our website may contain links to third-party websites or booking systems. We are not responsible for the privacy practices, content, or policies of those third-party websites. We recommend reviewing their privacy policies separately.

12. Children’s Data

Our website is not intended for children acting independently. Where a parent, guardian, or responsible adult provides personal data relating to a child in connection with a booking, we process that data only as necessary for the relevant booking or service.

13. Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or disclosure. However, no method of transmission over the internet or method of electronic storage is completely secure.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page together with the revised “Last updated” date.

15. Related Legal Information

For information about bookings, cancellations, participation rules, and liability, please read our Terms & Conditions.

16. Contact Us

If you have any questions about this Privacy Policy or would like to exercise your data protection rights, please contact us at info@krakowurbantours.com.