Privacy & Cookie Policy

Last updated: 3 August 2026

Plain-language summary: we use your information to respond to your inquiry and arrange requested services. Analytics tools are loaded only after you accept them in the cookie banner.

1. Who controls your personal data?

The controller of personal data processed through this website is Igor Kardasz, operating the Gdańsk Private Experiences project, based in Gdańsk, Poland. You can contact the controller at hello@gdanskprivateexperiences.com.

2. What information may be processed?

Depending on how you contact us, we may process your name, email address, telephone number or WhatsApp identifier, preferred date, number of guests, occasion, estimated budget, selected service preferences, the content of your message, and correspondence connected with your inquiry or booking.

When you accept analytics cookies, technical and usage information may also be processed, such as approximate location, device and browser information, visited sections, clicks, scrolling behaviour, session duration and referral source.

3. Why and on what legal basis do we process data?

To answer inquiries and take steps requested before entering into an agreement — Article 6(1)(b) GDPR.
To arrange, coordinate and perform an agreed service — Article 6(1)(b) GDPR.
To meet legal, accounting or tax obligations, where applicable — Article 6(1)(c) GDPR.
To establish, pursue or defend legal claims and maintain service security — our legitimate interests under Article 6(1)(f) GDPR.
To use Google Analytics and Microsoft Clarity — your consent under Article 6(1)(a) GDPR, which may be withdrawn at any time through “Cookie settings”.

4. Contact through WhatsApp and email

The inquiry button prepares a message and opens WhatsApp. The message is not submitted to this website automatically. When you choose to communicate through WhatsApp, your information is also processed by the provider of WhatsApp under its own privacy terms. Email is handled by the relevant email service providers.

5. Analytics providers and international transfers

After consent, the website may use Google Analytics (Google) and Microsoft Clarity (Microsoft). These providers may process information on servers outside the European Economic Area. Where required, transfers are based on recognised legal safeguards, such as adequacy decisions or standard contractual clauses used by the relevant provider.

6. How long do we keep data?

Inquiry data that does not lead to a booking: normally up to 12 months after the last contact.
Data connected with an agreement: for the duration of the relationship and then for periods required by law or necessary for possible claims.
Analytics information: according to the retention settings and rules of Google Analytics and Microsoft Clarity.
Your cookie preference: stored locally in your browser until you clear it or change the setting.

7. Who may receive data?

Data may be shared only where necessary with hosting, email, analytics, communications, accounting, legal and IT providers, as well as selected experience suppliers involved in fulfilling a request. A supplier receives only information reasonably needed to provide its part of the service. Data may also be disclosed where required by law.

8. Your rights

Subject to the GDPR conditions, you may request access, correction, deletion, restriction, portability, or object to processing based on legitimate interests. Where processing is based on consent, you may withdraw consent without affecting earlier lawful processing. You may also lodge a complaint with the President of the Personal Data Protection Office in Poland (Prezes Urzędu Ochrony Danych Osobowych).

9. Is providing data required?

Providing contact and request information is voluntary, but without sufficient information we may be unable to answer or prepare an offer. Analytics consent is optional and refusing it does not prevent use of the website.

10. Cookies and similar technologies

The website uses necessary local browser storage to remember whether you accepted or rejected analytics. With consent, Google Analytics and Microsoft Clarity may use cookies or similar technologies to measure traffic and understand how the site is used. Analytics tools are not activated before acceptance.

You may change your decision at any time by selecting Cookie settings in the website footer. You may also clear or block cookies through your browser settings.

11. Automated decision-making

We do not use personal data to make decisions producing legal or similarly significant effects solely by automated means.

12. Changes to this policy

This policy may be updated when the website, services, providers or legal requirements change. The current version and update date will remain available on this page.

← Back to the website