Privacy Policy

Last Updated: 7 March 2026 | Controller: Velohrapl, Aleja Niepodległości 26, 42-202 Częstochowa | Email: info@velohrapl.com

1. Introduction

This Privacy Policy describes how Velohrapl ("we", "us", "our") collects, uses, stores, and protects personal data when you visit our website at velohrapl.com or contact us in connection with our educational services. We process personal data in accordance with Regulation (EU) 2016/679 (GDPR) and the Polish Act on Personal Data Protection of 10 May 2018.

2. Data Controller

The data controller responsible for your personal data is Velohrapl, with its registered address at Aleja Niepodległości 26, 42-202 Częstochowa, Poland. You can contact us regarding data protection matters at info@velohrapl.com or by post at the address above.

3. What Data We Collect

We may collect the following categories of personal data:

Contact information: name, email address, telephone number, provided when you submit our contact form or enquire about workshops.
Communication records: the content of messages you send to us and our responses.
Technical data: IP address, browser type, device information, pages visited, and time spent on the site, collected automatically through cookies and server logs.
Preference data: your cookie consent choices and language preferences.

4. Legal Basis for Processing

We process your personal data on the following legal bases:

Contractual necessity (Article 6(1)(b) GDPR): to respond to your enquiries and provide the educational services you have requested.
Legitimate interests (Article 6(1)(f) GDPR): to operate and improve our website, ensure its security, and communicate with people who have expressed interest in our services.
Consent (Article 6(1)(a) GDPR): for non-essential cookies, where you have given explicit consent through our cookie consent mechanism.
Legal obligation (Article 6(1)(c) GDPR): where processing is required to comply with applicable law.

5. How We Use Your Data

We use the personal data we collect to respond to enquiries and questions submitted through the contact form, to provide information about our workshops and guides, to improve the content and functionality of our website, to maintain records of communications, and to comply with legal obligations that apply to us as an organisation operating in Poland.

6. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected. Contact form submissions and related communications are retained for a period of three years from the date of last contact. Technical data collected through cookies is retained in accordance with the cookie durations described in our Cookie Policy. After the applicable retention period, data is securely deleted or anonymised.

7. Data Sharing

We do not sell, rent, or trade personal data with third parties. We may share data with service providers who assist us in operating our website and services, such as hosting providers, subject to appropriate data processing agreements. We may disclose data where required by law, court order, or regulatory authority.

8. International Transfers

Our website is hosted within the European Economic Area. If any data is transferred outside the EEA, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, in accordance with Chapter V of the GDPR.

9. Your Rights

Under GDPR and applicable Polish law, you have the following rights in relation to your personal data:

Right of access: to obtain a copy of the personal data we hold about you.
Right to rectification: to have inaccurate data corrected.
Right to erasure: to request deletion of your data where no legitimate basis for retention exists.
Right to restriction: to limit how we process your data in certain circumstances.
Right to data portability: to receive your data in a structured, commonly used format.
Right to object: to object to processing based on legitimate interests.
Right to withdraw consent: where processing is based on consent, to withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at info@velohrapl.com. We will respond within one month of receiving your request. You also have the right to lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (UODO), at ul. Stawki 2, 00-193 Warsaw, or via uodo.gov.pl.

10. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or alteration. These include encrypted data transmission (HTTPS), access controls, and regular review of our security practices.

11. Cookies

Our website uses cookies. For detailed information about the cookies we use, their purpose, and how to manage your preferences, please see our Cookie Policy.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically.

13. Contact

For any questions about this Privacy Policy or how we handle your personal data, contact us at: info@velohrapl.com or Aleja Niepodległości 26, 42-202 Częstochowa, Poland.