PRIVACY POLICY
EQUI EXPEDITIONS
1. General Information
The controller of personal data processed within the Equi Expeditions website is West Work Service, a limited liability company with its registered office in 45-057 Opole, ul. Ozimska 4/7, Poland, registered in the National Court Register under KRS number 0000937371.
The Controller processes personal data in accordance with:
- Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR),
- regulations on the protection of privacy and electronic communications.
Contact for personal data protection matters: rodo@equiexpeditions.com
2. Scope of Personal Data Processing
The Administrator processes personal data in particular in the following scope:
- name and surname,
- email address,
- telephone number,
- residential address,
- date of birth,
- data included in the application form,
- data necessary to conclude and execute the contract,
- data necessary to provide insurance coverage for the participant.
In the scope necessary to ensure the safety of participants, the Administrator may process limited health information, particularly information about health contraindications.
3. Purposes and Legal Basis for Processing Data
Personal data is processed for the following purposes:
- accepting applications and reservations,
- concluding and executing a contract for participation in a tourist event,
- organizing and conducting active tourist events,
- insuring participants,
- fulfilling the Administrator’s legal obligations,
- conducting accounting and tax settlements,
- handling complaints,
- conducting marketing of own services.
The legal basis for processing data is:
- performance of a contract (art. 6 para. 1 lit. b GDPR),
- legal obligation (art. 6 para. 1 lit. c GDPR),
- legitimate interest of the Administrator (art. 6 para. 1 lit. f GDPR),
- consent of the person whose data is processed (art. 6 para. 1 lit. a and art. 9 para. 2 lit. a GDPR).
4. Marketing and Communication
The Controller may process personal data for the following purposes:
- informing about Equi Expeditions’ current and future offerings,
- sending organizational and offer information.
Marketing is conducted:
- based on separate user consent (e.g., newsletter),
- or on the basis of the Controller’s legitimate interest in existing customers.
Lack of consent to marketing does not affect the possibility of concluding or implementing a contract.
Personal data is not shared with other entities for marketing purposes.
5. Recipients of Personal Data
Personal data may be shared only with entities necessary to realize the Administrator’s activities, particularly:
- partners and subcontractors implementing tourist events,
- tour operators, guides, and instructors,
- accommodation facilities,
- insurance companies,
- carriers and transportation companies,
- accounting offices and law firms,
- providers of IT services, hosting, email, and reservation systems,
- public authorities – pursuant to legal provisions.
6. Social Media and External Platforms
The Administrator maintains profiles in social media and uses external tools, particularly social media platforms (e.g., Facebook, Instagram, TikTok).
In the case of user interaction with these platforms (e.g., clicking an icon, visiting a profile, liking, commenting), personal data may also be processed by the administrators of these services in accordance with their own privacy policies.
The Administrator has no influence over the scope or manner of data processing by these entities.
7. Analytical and Marketing Tools
The Administrator may currently or in the future use analytical and marketing tools, particularly those used for:
- analyzing website visitor statistics,
- improving website functionality,
- conducting marketing activities.
The use of such tools is only possible after obtaining the user’s consent, expressed through the cookie management mechanism.
8. Cookies
The Administrator’s website uses cookies and similar technologies to:
- ensure the proper operation of the website,
- analyze website traffic,
- conduct marketing activities.
The user can:
- consent to the use of cookies,
- refuse consent,
- change cookie settings at any time.
Detailed information regarding the use of cookies is included in a separate Cookie Policy available on the website.
9. Data Transfer Outside the EU/EEA
Personal data may be transferred:
- within the EU and the EEA,
- and in the case of travel packages or the use of external tools – also to third countries.
In such cases, the Controller applies appropriate legal safeguards, in particular standard contractual clauses, in accordance with the GDPR.
10. Automated Decision-Making
The Controller does not make fully automated decisions regarding users that produce legal effects or significantly affect them in a similar manner, including through profiling.
11. Rights of the Data Subject
The data subject has the right to:
- access to data,
- rectification,
- deletion,
- restriction of processing,
- data portability,
- objection,
- withdrawal of consent,
- filing a complaint with the President of the Personal Data Protection Office.
12. Data Security
Administrator applies appropriate technical and organizational measures to protect personal data.
13. Final Provisions
The Privacy Policy may be updated. The current version of the document is published on the Administrator’s website.
