Privacy Policy

Privacy Policy

Updated 11/10/2024

I. General Provisions

1. This Privacy Policy applies to the rules of use of the visitWroclaw.eu portal, which is hereinafter referred to individually as the “Service”.
2. This Privacy Policy sets forth the rules for the processing of any information of a personal data nature that is acquired in connection with the Users’ use of the Services.

II. Personal data controller

1. The administrator of the User data is the Municipality of Wroclaw, pl. Nowy Targ 1-8, 50-141 Wroclaw (hereinafter referred to as “Administrator”).
2. The Administrator attaches great importance to the protection of privacy and confidentiality of the personal data of the Users of the Services, and with due diligence selects and applies appropriate technical and organizational measures to ensure the protection of the processed personal data. The Administrator protects personal data from being made available to unauthorized persons, as well as from being processed in violation of applicable laws.

III. Legal basis for data processing

1. The Administrator processes User information in accordance with the law, including in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter: GDPR).
2. The Administrator, based on the provisions of the GDPR, is authorized to process your personal data under the following circumstances:

1. The user consents to the processing of his personal data.
2. processing of the User’s personal data will be necessary for the fulfillment of the Administrator’s legal obligation,
3. when it will be necessary for the purposes of legitimate interests pursued by the Administrator or by third parties.

(3) The Administrator commissions the operation, maintenance and development of the VisitWrocław service to the Agency for the Development of Wrocław Agglomeration S.A. on the basis of applicable law.

IV. Scope of personal data processed

1. The use of the Services does not require registration by the User and does not require the provision of any personal data. In some situations, the provision of certain data will be required in order to access a specific service. These services include, among others, the following:
   1. application of the Tourist Place using the form
   2. Dwarf application using the form

2. In the cases described in paragraph 1, the Administrator may process the following personal data of the User:

1. Name,
2. Phone number,
3. E-mail address

3. Notwithstanding the above, a User using the Services may provide the Administrator with the following data:

1. IP address,
2. URL of the request,
3. domain name,
4. browser type,
5. The number of interactions with the Service,
6. The amount of time spent on the Service,
7. The date and time of use of the Service,
8. geolocation data,
9. Technical information about the device.

4. The purpose of the Administrator’s processing of the data referred to in paragraph 3 is to analyze the activities of individual Users who use the Service. The data referred to in paragraph 3 are collected by automated means. Consent is voluntary and is not required for proper use of the Services. If the User does not consent in this regard, the Administrator undertakes not to process the User’s data.

V. Retention period of personal data

The personal data provided by the User will be stored for the following periods:

1. cookies – 1 year,
2. Analytics data – 26 months (from the last visit to the Service),
3. other data – 2 years, unless consent to process personal data is withdrawn, data is deleted upon request or an objection is expressed.

VI. Sharing data with other entities

Users’ personal data will be able to be shared with the following entities:

1. Employees and associates of the Administrator who have been authorized to process personal data,
2. Administrator’s partners (including in particular the Agency for the Development of Wroclaw Agglomeration S.A.), public authorities to whom the data will be transferred due to the proceedings and based on applicable laws.

VII. User Rights

1. The user who provided personal data has the following rights:

1. Access to the content of their data,
2. data rectification,
3. data modification.
4. limitation of data processing,
5. data deletion,
6. data portability.

2. In addition to the rights mentioned above, the User has the right at any time to withdraw consent to the processing of the data provided by the User. The Administrator, upon learning of the withdrawal of consent, will immediately take action to delete the stored data.
3. The User may exercise the rights referred to above by contacting the Administrator in the manner indicated in Section XI, Item 2 of this Privacy Policy.
4. You have the right to lodge a complaint with a supervisory authority (the President of the Office for the Protection of Personal Data) if you consider that the processing of data by the Administrator violates the provisions of the applicable law, in particular the GDPR.

VIII. Cookies

1. The service automatically collects data contained in cookies.
2. “Cookies” should be understood as IT data, in particular text files, stored in the Users’ terminal equipment intended for the use of the websites.
3. Cookies are used by the Administrator for the sole purpose of operating the Website, including to recognize the User’s device and display the Website pages in a manner tailored to the User’s individual needs, as well as to create anonymous Website statistics and improve the efficiency and effectiveness of the use of the Services.
4. The user may give his/her consent to the storing of cookies by indicating his/her consent in the cookie dialog box immediately after the Service’s browser loads. The user’s consent to cookies is voluntary for functional, analytics, performance, advertising and other cookies. Required cookies are critical to the basic functions of the Site and the Site will not function as intended without them. These cookies do not store any personally identifiable information. You can update or change the consents you have given at any time by clicking on the cookie settings in the footer of the site.
5. The User may, in any case, block the installation of cookies, delete permanent cookies or otherwise change the conditions for storing or receiving cookies, using the relevant options of his/her Internet browser, with the reservation that disabling cookies in the browser may cause difficulties in using the Website.
6. The administrator on the site also uses third-party services that use cookies, among other things, to collect analytical information and aggregate statistics. This allows us to analyze site traffic and continuously make improvements. At any time, the User may object to the collection of data with the use of cookies provided by third parties.

Among the entities that use cookies for the above purposes are:

1. a) Google LLC, headquartered at 1600 Amphitheatre Parkway, Mountain View, California 94043 USA. The administrator uses Google Analytics, Google Pixel, Google Maps, Google Search Console, Google Tag Manager, YouTube, Programmable Search Engine. Blocking the processing of information by Google Analytics is described at: https://tools.google.com/dlpage/gaoptout?hl=pl.
2. c) Gemius S.A. – conducts research on user behavior on websites with its headquarters at 48 Domaniewska Street, 02-672 Warsaw. You may object to participating in the Gemius study by, among other things, accepting the opt-out clause: http://optout.hit.gemius.pl/removeEN.php. Additional information on the cookie policy is available at: http://www.gemius.pl/cookie-policy.html
3. (e) Cookiebot – a platform for managing cookie consents, Usercentrics A/S, Havnegade 39, 1058 Copenhagen Denmark. Additional privacy policy information available here: https://www.cookiebot.com/en/privacy-policy/
4. (f) Crazy Egg with headquarters at 16220 E Ridgeview Ln, La Mirada, California, 90638, United States. The administrator uses a tool to analyze user behavior on the site. Additional information about the privacy policy is available at: https://www.crazyegg.com/privacy. Anonymous marketing data can be removed at: https://www.crazyegg.com/opt-out

Transfers of data outside the EEA

Our Partners and third parties are mainly based in countries of the European Economic Area (EEA). Some of them, e.g. Google or Microsoft, are based outside the EEA. Partners provide guarantees of a high degree of protection for your personal data. These guarantees arise in particular from the obligation to apply the standard contractual clauses adopted by the (EU)Commission and to comply with the provisions of Article 46(2) of the RODO.

X. Security of User data and children

1. The Administrator undertakes that it will apply adequate technical measures to achieve the highest possible level of security with respect to the User’s personal data, in an effort to prevent unauthorized access to the data.
2. The Administrator undertakes to protect the data from accidental or unauthorized access to unauthorized persons, destruction, loss, damage, alteration and processing in violation of applicable laws.
3. The Administrator declares that he will not knowingly collect and process personal data from persons under the age of 16 without first obtaining consent from their parents or other legal representatives.
4. In the event that the Administrator receives information that it has unknowingly obtained the personal data of a person under 16 years of age, the Administrator undertakes to take immediate action to stop processing the data and delete it.

XI. Concluding remarks

1. This Privacy Policy is subject to change, due to technological developments and modification of existing standards. Therefore, the Administrator undertakes to revise the Policy periodically and regularly in order to introduce the most up-to-date regulations, both legal and technological.
2. In case of any doubts about the content of this Policy, clarification may be obtained by contacting by e-mail at: iod[at]um.wroc.pl or by correspondence to the following address: Municipality of Wroclaw, pl. Nowy Targ 1-8, 50-141 Wroclaw.