Privacy Policy

1. Who we are (Data Controller)

This website, thetripcrew.com (the "Website"), is operated by:

• NCS Norbert Wachnicki (sole proprietorship registered in the Polish Central Register and Information on Economic Activity — CEIDG)
• Registered address: ul. Wilanowska 16/20/36, 00-422 Warszawa, Poland
• Tax ID (NIP): 5262602257
• E-mail: info@ncs.pl

NCS Norbert Wachnicki is the data controller of your personal data within the meaning of Regulation (EU) 2016/679 (the "GDPR").

2. What data we process and why

2.1 Server logs

When you visit the Website, our servers automatically record technical data: your IP address, date and time of the request, requested URL, browser type and version (User-Agent), and the referring page. We process this data to deliver the Website, ensure its security, prevent abuse (e.g. rate limiting) and diagnose technical problems.

Legal basis: our legitimate interest (Art. 6(1)(f) GDPR) in operating a secure and functional website.

2.2 Analytics and session recording (with your consent)

With your prior consent, we use the following tools to understand how visitors use the Website:

• Google Analytics 4 (Google Ireland Ltd.) — collects pseudonymous statistics about visits (pages viewed, approximate location, device and browser data, traffic sources). Google Analytics uses cookies and similar identifiers.
• First-party session analytics (vvv.ncs.pl) — our own tool operated by the controller, which records how a page is used during your visit (page content displayed, mouse movement, scrolling, clicks and text typed into forms — passwords and fields marked as sensitive are masked and never recorded). It stores a random visitor identifier in your browser's local storage. Recordings are used solely to improve the usability of the Website and are not shared with third parties.

Legal basis: your consent (Art. 6(1)(a) GDPR), given via the cookie banner. You can withdraw it at any time via the "Cookie settings" link in the footer — withdrawal does not affect the lawfulness of processing before withdrawal.

2.3 Advertising (with your consent)

We may display advertisements served by Google AdSense (Google Ireland Ltd.). If you consent, Google may use cookies and similar technologies to personalise ads and measure their performance; without consent, only non-personalised ads may be shown. Details on how Google uses data are available at policies.google.com/technologies/partner-sites.

Legal basis: your consent (Art. 6(1)(a) GDPR).

2.4 Contact

If you contact us by e-mail, we process the data you provide (e-mail address, content of the message) in order to reply and handle your enquiry.

Legal basis: our legitimate interest (Art. 6(1)(f) GDPR) in handling correspondence.

3. Embedded third-party content

Some pages load resources or embed content from third parties, which means your IP address and technical browser data are transmitted to those providers when the page loads:

• Google Fonts and other static resources (Google LLC / CDN providers),
• Google Maps (Google Ireland Ltd.) — on pages containing maps,
• YouTube (Google Ireland Ltd.) — on pages containing embedded videos,
• OpenStreetMap (OpenStreetMap Foundation) — map tiles on some pages.

4. Recipients of data

Your data may be disclosed to: our hosting and IT infrastructure providers, Google (analytics and advertising services described above), and — where required — public authorities acting on a valid legal basis. We do not sell your personal data.

5. Transfers outside the EEA

Google may transfer data to servers located outside the European Economic Area, including the United States. Such transfers are safeguarded by the EU–US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses. You can request a copy of the relevant safeguards by contacting us.

6. How long we keep data

• Server logs — up to 12 months, unless a longer period is required for security incident investigation or by law.
• Analytics and session-recording data — up to 14 months from collection.
• Your cookie consent choice — up to 12 months (see the Cookie Policy).
• E-mail correspondence — for the time needed to handle the enquiry and for the limitation period of possible claims.

7. Your rights

Under the GDPR you have the right to:

• access your data and obtain a copy of it,
• rectify (correct) your data,
• erase your data ("right to be forgotten"),
• restrict processing,
• data portability,
• object to processing based on legitimate interest,
• withdraw consent at any time (where processing is based on consent).

To exercise these rights, contact us at info@ncs.pl. You also have the right to lodge a complaint with the supervisory authority: the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa, Poland, uodo.gov.pl.

8. Is providing data mandatory?

Providing personal data is voluntary. However, technical data (such as your IP address) is processed automatically as a necessary part of delivering the Website over the internet.

9. Automated decision-making

We do not make decisions based solely on automated processing that would produce legal effects concerning you. If you consent to personalised advertising, Google may profile your interests for ad selection purposes — you can refuse or withdraw this consent at any time.

10. Cookies

Information about cookies and similar technologies used by the Website is provided in the Cookie Policy.

11. Changes to this policy

We may update this Privacy Policy, for example when we introduce new features or tools. The current version, with its "last updated" date, is always available on this page.