Privacy and cookies policy

1. General provisions

1. The Website is owned and administered by the company specified in section 2 below.
2. The Website is an editorial and information portal about Krakow: it publishes articles, rankings, quizzes and guide content, enables users to subscribe to the newsletter and establish partnerships (including the publication of sponsored content), and does not sell tickets or vouchers or provide service bookings directly through the Website.
3. Use of the Website is voluntary and does not require registration for most functions.

2. Personal data controller

The controller of personal data is EscapeCity Sp. z o.o., with its registered office in Krakow at ul. Kościuszki 74/13, 30-114 Krakow, NIP: 9442219177, REGON: 121233058, KRS: 0000357047.

Contact details of the Controller for matters relating to the krakowsecrets.pl Website:

• e-mail: hello@krakowsecrets.pl

3. What data we collect

Users’ personal data are collected to the extent that they use the functions of the Website. Depending on the form, this may include:

• first name and surname;
• e-mail address;
• name of the venue or brand (optional field);
• content of the submission — a description of the business and the expected partnership (optional field).

The above set applies to the subscription / partnership enquiry form available on the Website. The contact form may collect its own separate set of fields.

When using the Website, the following data are also collected automatically: IP address, domain name, browser type, access time and operating system type. Navigation data may also be collected from Users — information about pages visited, links clicked and time spent on the Website.

4. Purposes and legal bases for processing

Personal data are processed for the purpose of:

1. handling enquiries submitted via the contact form and the “Partnership” form (legal basis: Article 6(1)(b) GDPR — steps taken prior to entering into a contract / Article 6(1)(f) GDPR — the Controller’s legitimate interest in responding to the enquiry) — for the time necessary to handle the matter and settle any resulting partnership;
2. providing the newsletter service (legal basis: Article 6(1)(a) GDPR — consent) — until consent is withdrawn or the User unsubscribes from the mailing list;
3. compliance with legal obligations incumbent on the Controller (legal basis: Article 6(1)(c) GDPR), including the settlement of any paid services (e.g. sponsored publication) — for the period required by tax regulations;
4. pursuing the Controller’s legitimate interests (legal basis: Article 6(1)(f) GDPR), namely:
   • compiling visitor statistics and analyses for internal purposes;
   • pursuing or defending against claims;
   • direct marketing of the Controller’s own content and services.

Providing personal data is voluntary, but necessary in order to subscribe to the newsletter, send an enquiry via the contact form or submit a partnership proposal.

5. Recipients of data

Users’ data may be disclosed to entities with which we cooperate in operating the Website, including:

• the hosting company storing data for the purposes of operating the Website;
• the newsletter distribution service provider — GetResponse (GetResponse sp. z o.o., with its registered office in Gdańsk);
• providers of analytical and marketing tools specified in section 7 (Cookies);
• law firms and accountancy firms, where necessary for the operation of the Website.

In this context, data may be transferred outside the European Economic Area (e.g. to cloud infrastructure providers based in the USA), on the basis of the European Commission’s Standard Contractual Clauses or another mechanism compliant with the GDPR.

6. Rights of Website users

A User whose data are processed has the right to:

• access their personal data and receive a copy of them;
• rectify their data if they are inaccurate or incomplete;
• erase their data (the “right to be forgotten”);
• restrict the processing of their data;
• data portability, to the extent provided for under the GDPR;
• object to the processing of data for direct marketing purposes;
• withdraw consent at any time, without affecting the lawfulness of processing carried out before its withdrawal (this applies in particular to newsletter subscriptions);
• lodge a complaint with the President of the Personal Data Protection Office if the User considers that the processing of their data infringes the GDPR.

7. Cookies

The Portal uses cookies, which are small files stored on your device. We divide them into the following categories:

7.1 Types of cookies

The Website uses two types of cookies:

• session cookies — deleted when the browser session ends or the device is switched off. They do not allow any personal data or confidential information to be retrieved from the User’s device;
• persistent cookies — stored on the User’s device until they are deleted or expire. They are stored only with the User’s consent (categories: analytics, marketing).

7.2 Which third-party providers we use

The Website uses third-party cookies for the purpose of:

• collecting statistical data — via the Google Analytics analytics tool (third-party cookie controller: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland);
• sending the newsletter and tailoring marketing content — via the GetResponse tool (controller: GetResponse sp. z o.o.);
• promoting the Website on social media — via Facebook.com plugins (controller: Meta Platforms Ireland Limited)
• displaying maps — if articles embed a Google Maps map (e.g. the “Map preview” component described in the project documentation), cookies are also provided by Google Ireland Limited

If the User does not want a social media service operator to collect data concerning them through our Website, we recommend logging out of the relevant social media service before continuing to use the Website.

7.3 How to manage cookies

Most web browsers accept cookies by default. The User may independently change their cookie settings — including the conditions under which cookies are stored and gain access to their device. In particular, these settings may be changed so as to block the automatic handling of cookies in the web browser settings or to notify the User each time cookies are placed on their device. Detailed information on the available options and methods for managing cookies can be found in the software settings (web browser).

7.4 IP address

The Website may collect Users’ IP addresses. An IP address is used to diagnose technical problems with the server, prepare statistical analyses, administer and improve the Website, and for security purposes.

8. Changes to the privacy policy

We reserve the right to make changes to this privacy policy. Users will be informed of such changes by the publication of a new version of the document on this page. Any questions relating to the privacy policy should be sent to the following e-mail address: hello@krakowsecrets.pl.