1. Data controller
The controller of your personal data is FLY TO CHANGE Spółka z ograniczoną odpowiedzialnością with its registered office in Wrocław, ul. Jarosława Iwaszkiewicza 7D lok. 9, 52-211 Wrocław, Poland, KRS 0001252553, NIP 8993062943, REGON 545210132.
For matters concerning personal data you may write to info@flytochange.club, call +48 889 328 776, or use the company postal address. Full company details are available in the Informacjach prawnych.
2. What data we process and why
Website operation and security
Technical data, including IP address and device information. The legal basis is our legitimate interest in ensuring the secure operation of the website, Article 6(1)(f) GDPR.
For the period necessary to ensure security and to investigate any incidents.
Handling enquiries and consultations
First name, contact details and the information provided in your message. The legal basis is taking steps prior to entering into a contract, Article 6(1)(b) GDPR, or our legitimate interest in conducting correspondence, Article 6(1)(f) GDPR.
As a rule, up to 12 months from the last contact if no contract is concluded.
Newsletter
Email address and information about the consent given. The legal basis is consent, Article 6(1)(a) GDPR, and the consent required by Article 398 of the Polish Electronic Communications Law.
Until consent is withdrawn or the newsletter is discontinued. We may retain the information needed to demonstrate consent for the limitation period for claims.
Analytics and advertising
If we activate Google Analytics 4, Google Ads or Meta Pixel, they will process data about your use of the website and online identifiers only after the relevant consent has been obtained, on the basis of Article 6(1)(a) GDPR and Article 399 of the Polish Electronic Communications Law.
In accordance with the settings of the activated service and the periods indicated in the Cookie Policy.
Contact via social media and WhatsApp
Profile data, contact details and the content of messages. The legal basis is taking steps prior to entering into a contract, Article 6(1)(b) GDPR, or our legitimate interest in conducting communication, Article 6(1)(f) GDPR.
As a rule, up to 12 months from the last contact if no contract is concluded, or until a valid objection is raised.
Publication of reviews, images or promotional materials
The content of the review, first name or profile name, image, voice and materials provided, as covered by the consent given. The legal basis is separate, voluntary consent, Article 6(1)(a) GDPR.
Until consent is withdrawn or the agreed publication period ends.
We receive data directly from you or automatically when you use the website. At the initial enquiry stage we do not ask for data identifying other travellers. If we receive another person’s data from someone acting on behalf of a group, we will provide that person with the appropriate processing information as required by the GDPR. Providing data is voluntary, but without contact details we may be unable to reply to your message or provide the selected service.
We do not take decisions concerning you which produce legal effects or similarly significant effects based solely on automated processing.
3. Who we may share data with
Depending on the features actually enabled on the website, we may use providers of hosting, databases, email, newsletter, calendar, security, consent management, analytics and advertising. These include in particular Vercel, Supabase, Cloudflare, Cookiebot, Resend, Brevo, Google and Meta. Data may also be received by our legal advisers, accountants, IT providers and authorised public authorities.
Some providers may process data outside the European Economic Area. In such cases we rely on appropriate safeguards, in particular an adequacy decision or standard contractual clauses. You may obtain information about the safeguards applied, or a copy of them, by writing to info@flytochange.club.
4. Cookies, newsletter and social media
Technologies necessary for the operation and protection of the website may be used without additional consent. Analytics and advertising are activated only after the relevant choice has been made in the consent panel. Details and the option to change your decision are available in the Cookie Policy.
You may unsubscribe from the newsletter using the link included in each message. When contacting us through Facebook, Instagram or WhatsApp you also use the services of Meta or WhatsApp, which process data according to their own rules.
5. Your rights
Depending on the circumstances, you have the right of access to your data, and the rights to rectification, erasure, restriction of processing, data portability, withdrawal of consent and objection. You also have the right to lodge a complaint with the President of the Personal Data Protection Office in Poland.
You may send your request to info@flytochange.club. Withdrawing consent does not affect the lawfulness of processing carried out beforehand.
6. Data of trip participants
This policy relates primarily to the website and to first contact with FlyToChange. If you enter into a travel contract or provide participants’ data, you will receive a separate privacy notice describing the processing of data needed to deliver the trip, including any transfer to carriers, hotels, insurers and partners abroad.
7. Security and changes to this policy
We apply technical and organisational measures appropriate to the type of data and the risk involved. We update this policy when the features of the website, the tools used or legal requirements change. The current version is always available at a permanent address on the website.