Privacy Policy

WARSAW BY BIKE

1. General Information

This Privacy Policy defines the rules for processing personal data of users of the website https://warsawbybike.pl/ and customers of the WARSAW BY BIKE rental service.

The Controller of personal data is: MAKAK Karol Popławski ul. Filtrowa 83/8, 02-032 Warsaw, Poland Tax ID (NIP): 526 258 09 69, REGON: 140427187 e-mail: info@sklepzrowerami.pl (hereinafter referred to as: the “Controller”)

The Controller processes personal data in accordance with applicable laws, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).

2. Scope of Processed Data

The Controller may process the following personal data:

IP address and technical data related to the use of the website.
First and last name.
E-mail address.
Phone number.
Residential address (if required for the Agreement).
Identity document details (strictly for verification only upon equipment pick-up).
Data regarding reservations and rentals.
Payment data (scope depending on the chosen payment method).

3. Purposes and Legal Grounds for Processing

Personal data are processed for the following purposes:

Conclusion and execution of the Equipment Rental Agreement – legal basis: Art. 6(1)(b) GDPR (performance of a contract).
Handling online reservations and customer contact – Art. 6(1)(b) GDPR.
Processing complaints and inquiries – Art. 6(1)(c) GDPR (legal obligation) and Art. 6(1)(b) GDPR.
Maintenance of accounting and tax records – Art. 6(1)(c) GDPR.
Ensuring equipment security and pursuing potential claims – Art. 6(1)(f) GDPR (legitimate interest of the Controller).
Statistical and analytical purposes for the website – Art. 6(1)(f) GDPR.

Additional Information:

Providing data is voluntary but necessary for the Agreement (reservation and release of Equipment); failure to provide data may prevent the service from being rendered.
Data may come directly from the Customer or from the booking system used by the Customer.
The Controller does not make decisions regarding the Customer based solely on automated processing, including profiling that produces legal effects.

4. Data Recipients

Personal data may be transferred to:

Accounting firms and bookkeeping offices.
Payment operators.
Hosting companies and reservation system providers.
Public authorities – only to the extent required by law.

If tool providers (e.g., analytical tools) transfer data outside the EEA, the transfer is based on standard contractual clauses or another mechanism compliant with GDPR; information about providers and applied safeguards is available upon request.

5. Data Retention Period

Personal data are stored:

For the duration of the Agreement and after its completion for the period required by law.
Accounting data – in accordance with the Accounting Act.
Data processed based on consent – until such consent is withdrawn.
Data processed for the purpose of pursuing claims – until the statute of limitations for such claims expires.

6. Rights of the Data Subject

Every person whose data is processed has the right to:

Access their data.
Rectify their data.
Erase their data (“right to be forgotten”).
Restrict processing.
Data portability.
Object to the processing.
Withdraw consent at any time (if processing is based on consent).

To exercise these rights, please contact the Controller at: info@sklepzrowerami.pl.

7. Right to Lodge a Complaint

The data subject has the right to lodge a complaint with:
President of the Personal Data Protection Office (PUODO)ul. Stawki 2, 00-193 Warsaw, Poland

8. Cookies

Detailed information about cookies (including categories, legal bases, and consent management) can be found in the Cookie Policy available on the website. Necessary cookies are used based on legitimate interest, while analytical/marketing cookies are generally used based on consent.

9. Data Security

The Controller applies appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or destruction.

10. Final Provisions

The Controller reserves the right to amend this Privacy Policy. The current version of the Privacy Policy is always available on the website. This Privacy Policy is effective as of February 1, 2026.

Warsaw, February 1, 2026.