1. Data Controller

The controller of your personal data is Dariusz Klimasz, ul. Cegielniana 4a/15, 30-404 Kraków, Poland, NIP: 6792540375, REGON: 356429990.

If you have any questions about this Privacy Policy or about how your personal data is handled, you can contact us at contact@la-vistule.com.

2. What Information We Collect

We collect personal data that you voluntarily provide when using our website or submitting a booking request. This may include your first name, last name, email address, phone number, pickup address, destination address, transfer date and time, optional flight number, optional special requests, selected vehicle category, booking history, and payment-related information necessary to process your transaction.

We may also collect technical and website-related data, including cookie data, analytics data, server logs, and CAPTCHA-related data where such tools are used to protect the website against spam or abuse.

3. How We Use Your Information

We use your personal data to receive and manage booking requests, communicate with you about your transfer, process payments, issue invoices where required, maintain booking history, improve website performance, and ensure the security and proper operation of our website and services.

We do not sell your personal data to third parties.

4. Legal Bases for Processing

We process your personal data where necessary to take steps at your request before entering into a contract, to perform a contract with you, to comply with legal obligations, and where necessary for our legitimate interests, including service administration, technical maintenance, fraud prevention, and website security.

Where non-essential cookies or analytics tools require consent, we rely on your consent collected through the cookie banner.

5. Payment Processing

All payments are processed through SumUp. We do not store full payment card details on our own servers. Payment data is processed securely through SumUp in accordance with SumUp’s systems and security standards.

6. Data Sharing

We may share your personal data with carefully selected third parties only where necessary for the operation of our services. These may include SumUp for payment processing, LH.pl or related hosting and email infrastructure providers, Google Analytics for website analytics, accounting or bookkeeping providers, and technical service providers supporting our website or booking system.

We share only the data that is reasonably necessary for the relevant purpose.

7. International Transfers

Some of our service providers may process personal data outside Poland or outside the European Economic Area, depending on their infrastructure and the nature of their services.

Where personal data is transferred outside the European Union or European Economic Area, we will rely on lawful transfer mechanisms required under applicable data protection law.

8. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, including to manage bookings, perform services, maintain records, comply with tax and accounting obligations, resolve complaints, and defend legal claims.

Booking and service-related data may be retained for as long as reasonably necessary for contractual, legal, and administrative purposes. Invoice and accounting data may be retained for the period required under applicable tax and accounting laws. Technical logs, analytics data, and cookie-related data may be retained according to the technical settings of the relevant systems and tools.

9. Cookies and Analytics

Our website uses cookies and similar technologies. These may include cookies necessary for website functionality, as well as analytics cookies used to understand how visitors interact with the website.

We may use Google Analytics and a cookie consent solution such as CookieYes. Non-essential cookies will only be used where required by law and where you have given consent through the cookie banner.

10. CAPTCHA and Website Security

If CAPTCHA or similar anti-spam tools are used on the website, certain technical data may be processed in order to protect the website against automated abuse, spam submissions, and malicious activity.

We may also use server logs and other technical records to maintain website security, detect abuse, and troubleshoot technical issues.

11. Your Rights

Subject to applicable law, you may have the right to request access to your personal data, request correction of inaccurate data, request deletion of data, request restriction of processing, object to certain types of processing, request data portability where applicable, and withdraw consent where processing is based on consent.

You also have the right to lodge a complaint with the competent data protection authority.

To exercise your rights, please contact us at contact@la-vistule.com.

12. Data Provided for Other Passengers

If you provide personal data relating to other passengers as part of a booking, you confirm that you are authorized to provide that data and that the relevant persons have been informed where required.

13. Data Security

We take reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, disclosure, or alteration. However, no online system can be guaranteed to be completely secure.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The current version will always be available on our website. Any updates become effective upon publication unless otherwise stated.

15. Contact

For privacy-related inquiries, requests concerning your personal data, or questions about this Privacy Policy, please contact us at contact@la-vistule.com.