Privacy policy
This Privacy Policy sets out the rules for the processing and protection of personal data provided by Users in connection with using the staghero.com website. This document has been prepared in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).
We value your privacy. We take care to protect your personal data, we do not sell it to third parties, and we process it solely for strictly defined, legitimate purposes.
§1. Who is the Data Controller?
- The Controller of your personal data is the company WBIEGU, with its registered office in Warsaw, ul. Ludwiki 4/28, 01-226, Poland.
- For all matters related to personal data protection (including reporting changes to your data or exercising your rights), you can contact our Data Protection Officer / Representative at: tomasz@integracyjne.pl.
§2. For what purpose, on what legal basis, and for how long do we process your data?
We process your data only to the necessary extent, for the following purposes:
- Execution of services and orders (event bookings)
- Scope of data: First and last name, email address, phone number, event destination/location.
- Legal basis: Necessity for the performance of a contract (Art. 6(1)(b) GDPR).
- Retention period: For the duration of the service provision, and subsequently until the expiration of the statutory limitation period for potential claims.
- Accounting and invoicing
- Scope of data: Company name (if applicable), VAT/Tax ID, registered address.
- Legal basis: Compliance with a legal obligation to which the Controller is subject under tax and financial regulations (Art. 6(1)(c) GDPR).
- Retention period: For a statutory period of 5 years, calculated from the end of the calendar year in which the tax payment deadline expired.
- Handling inquiries and customer support (contact forms, email, WhatsApp)
- Legal basis: Legitimate interest pursued by the Controller (Art. 6(1)(f) GDPR), consisting in responding to prospective and existing client inquiries.
- Retention period: For the time necessary to provide an answer and conclude the correspondence.
- Marketing activities and remarketing (Google Ads, advertising networks)
- Scope of data: Email address, phone number (in pseudonymized/hashed formats), online identifiers, browsing behavior.
- Purpose: Delivering tailored promotional advertisements, building remarketing customer lists, and creating similar audiences across advertising networks (specifically Google Ads Customer Match).
- Legal basis: Legitimate interest of the Controller (Art. 6(1)(f) GDPR) in promoting its own services, and regarding tracking cookies/identifiers – User consent (Art. 6(1)(a) GDPR).
- Retention period: Until an objection is filed or until consent is withdrawn via browser/cookie settings.
- Traffic analysis and website security (automatically collected data)
- Scope of data: IP address, server logs, browser type.
- Legal basis: Legitimate interest of the Controller (Art. 6(1)(f) GDPR).
- Retention period: Until the data loses statistical or technical relevance.
§3. To whom do we transfer or disclose your data? (Data Recipients)
We never sell your personal data. In order to properly deliver our services, your data may be transferred to external entities cooperating with the Controller or disclosed to independent data controllers to the extent necessary to fulfill the processing purposes.
Categories of recipients to whom data may be transferred include:
- Providers of invoicing and accounting systems – for issuing invoices and bookkeeping,
- Hosting and email infrastructure providers (e.g., hekko.net.pl) – maintaining website and mail reliability,
- Our field subcontractors (e.g., instructors, event coordinators, guides) – to directly manage and execute your booked events,
- Electronic payment processors (e.g., Stripe, Przelewy24) – to securely process online transactions,
- Third-party service providers (e.g., activity venues, hotels, transport carriers, insurers) – to the extent necessary to realize the booked package (these entities operate as separate data controllers),
- Providers of analytical and advertising technologies (specifically Google LLC) – as part of our use of Google Ads and Google Analytics.
In exceptional situations, in the event of a breach of law, your data may be disclosed to competent state authorities (e.g., the Police, courts) upon their authorized request.
§4. What are your data protection rights?
Under GDPR regulations, you have the right to:
- Right of access to your personal data and to receive a copy of it,
- Right to rectification (correction) of inaccurate or outdated data,
- Right to erasure ("right to be forgotten"), where legal grounds for continued processing no longer apply,
- Right to restriction of processing,
- Right to object to data processing (including profiling for direct marketing purposes),
- Right to withdraw consent at any time (where processing is based on consent),
- Right to lodge a complaint with a supervisory authority (President of the Personal Data Protection Office in Poland) if you believe your rights under the GDPR have been violated.
§5. Data Security
The Controller implements appropriate technical and organizational measures designed to protect personal data against unauthorized access, loss, alteration, or destruction. Data transmission across the website is encrypted using standard SSL/TLS protocols.
§6. Cookies Policy and Advertising Technologies
- The staghero.com website uses cookies and similar tracking technologies. These are small text files saved on your terminal device.
- Cookies and advertising tags are used for the following purposes:
- Maintaining User sessions,
- Compiling anonymous analytics (Google Analytics) to improve web design and performance,
- Running remarketing campaigns (Google Ads) and building audience segments based on previous visits or pseudonymized customer records to serve relevant ads across Google networks.
- Managing cookies: You can manage or disable cookies at any time via your browser settings (Chrome, Safari, Firefox, Edge, Opera).
- For detailed information on how Google manages tracking data, visit Google's Privacy Policy and the Google Ad Settings page.
§7. Final Provisions
- We reserve the right to amend this Privacy Policy in response to technological updates, statutory changes, or business growth. Updates will be announced directly on this page.
- By using the staghero.com website, you acknowledge the terms outlined in this Privacy Policy, which forms an integral part of the general terms of service.