Privacy and cookie policy

01Controller and contact

The controller of personal data relating to slubneprzejazdy.pl and services under the Ślubne Przejazdy brand is OCS International, Polish tax number (NIP) 6772394605, ul. Zamknięta 10 M1.5, 30-554 Kraków, Poland.

For data protection questions, processing enquiries or rights requests, email info@opencartspecialist.com or write to the postal address above. Contact telephone: +48 510 462 044.

This policy covers visitors, people making enquiries or bookings, and passengers and contacts identified when organising the service.

02Information we receive and its sources

The enquiry form collects names, email address, wedding date and town or route. You may also provide a telephone number, preferred car and message. The enquiry is sent to the provider’s configured email inbox.

A booking may require the contracting party’s details, route and times, passenger and coordinator information, agreed extras, payment and invoicing details. You provide information through the form, correspondence, conversations or booking documents.

If a customer identifies another contact or passenger, we may receive their name, contact details and information necessary to organise the journey from that customer. Do not provide unnecessary information; tell those people about the disclosure and this policy. The controller fulfils its own information duties towards them under GDPR Article 14.

The server and security systems may process IP addresses, request times, browser details, requested resources and errors. The form session stores a security token and information needed to handle submission. Logging and retention details need confirmation with the hosting provider.

03Purposes and legal bases

Enquiries about entering a contract, preparing an offer and performing a contract with the data subject: GDPR Article 6(1)(b), steps requested before contracting and contract performance.

General enquiries, correspondence with a business representative, arranging travel for people who are not contracting parties, and coordinator contact: Article 6(1)(f), our legitimate interest in responding and providing the agreed service.

Tax and accounting documentation and other statutory duties: Article 6(1)(c). Complaint handling relies on legal duties where applicable, and otherwise on our legitimate interest in handling claims.

Establishing, pursuing or defending claims and protecting the website from abuse: Article 6(1)(f), our legitimate interest in protecting rights and security.

If we separately offer marketing communications, photograph publication or consent-based tools, consent is collected separately for a specified purpose under Article 6(1)(a) where appropriate. Electronic marketing and non-essential cookies also require compliance with Poland’s Electronic Communications Law. An enquiry or booking does not replace this consent.

04Optional and required information

Providing information is voluntary, but the form cannot be submitted without its required fields. Without information needed to enter into and perform the contract, we cannot confirm or provide the journey. Certain billing information may be required by law.

Telephone number, car choice and the additional message are optional in the enquiry form. Marketing consent is not required to enquire or book.

Please do not include identity-document numbers, payment-card details or unnecessary health information in messages. Boarding assistance can be described without a diagnosis. If special-category information is exceptionally necessary, it requires a separate appropriate basis under GDPR Article 9 and suitable information.

05Recipients

Authorised enquiry and booking staff and providers of hosting, email, IT support, accounting and legal advice may receive information necessary for their tasks on an appropriate basis, including processor agreements where they act as processors.

Drivers and cooperating vehicle owners receive only information needed to agree and provide the service, such as date, route, passenger numbers and coordinator contact. Owning a vehicle does not entitle someone to all correspondence or billing details.

If your contract is with a separate provider, we identify that provider and its data-processing role before sharing information and contracting. An independent controller is responsible for its own privacy information.

Banks or other payment providers may receive information through the chosen payment method, as may authorities legally entitled to receive it.

The website is hosted on a dedicated server with Hetzner. The hosting infrastructure provider is Hetzner Online GmbH. Processing associated with infrastructure support is governed by the terms of the selected service and appropriate data-protection agreements.

06Retention

An enquiry without a booking is kept for the time needed to respond and finish the related correspondence. Further retention needs a separate justification, such as a specific dispute; enquiries are not all kept indefinitely merely because they might one day be useful.

Contract and journey information is kept during performance and afterwards only to the extent and for the time required by law or needed for complaints and claims. Limitation periods depend on the claim; a dispute may justify keeping necessary documentation until resolution.

Tax and accounting documents are kept for their statutory periods. Consent-based information is kept until consent is withdrawn or the purpose ends earlier; necessary evidence of consent may remain to demonstrate compliance or defend claims.

Technical logs and backups are kept for the time necessary for service continuity, security and recovery. This depends on configuration and rotation cycles. If an incident requires investigation or evidence for a claim, only necessary information is retained for the time needed for that purpose.

07Your rights and requests

Subject to GDPR conditions, you can request access and a copy, rectification, erasure, restriction and portability. Rights depend on the basis and circumstances; a duty to retain billing records may prevent immediate deletion.

You can object to legitimate-interest processing for reasons relating to your situation. You can object to direct marketing at any time. Consent may be withdrawn at any time without affecting the lawfulness of earlier processing.

Send requests to info@opencartspecialist.com. If we have reasonable doubts, we may request information necessary to verify identity; we do not automatically require an identity-document scan.

We respond without undue delay, normally within one month of receipt. Where permitted by GDPR, this may be extended by two further months; we explain the extension and reasons within the first month.

You can complain to Poland’s President of the Personal Data Protection Office (uodo.gov.pl) or another competent supervisory authority, particularly in your country of habitual residence, work or the alleged infringement. Contacting us first is not a condition of complaining.

08Cookies and device storage

Cookies are small files stored on your device. Other storage mechanisms and identifiers may also be used. Even without a name, identifiers can be personal data.

Mechanisms necessary for the service you request can maintain sessions, protect the form and support functions you choose. Whether the consent exception applies depends on actual purpose and necessity, not just the file’s name.

Analytics, advertising and other non-essential technologies, if used, require appropriate prior consent. Absence of consent is not consent; continuing to browse does not itself give consent.

Consent controls should allow purpose-based choices and equally easy withdrawal. Browser settings allow cookies to be deleted or blocked; blocking necessary mechanisms may affect selected features. Deleting cookies does not delete information already stored in email or booking records.

Session cookies normally operate until the session ends; preference cookies remain until their expiry or deletion by the user. Preferences such as language choice may be remembered in the browser. Duration and scope depend on the cookie and feature configuration. You can remove stored cookies and change acceptance rules in your browser settings.

09External tools and transfers outside the EEA

Email, hosting, anti-spam services, embedded maps, videos and measurement tools may involve sharing information with their providers. The final list and scope depend on tools actually deployed.

Using Hetzner alone does not determine where all information is processed: the selected server location and email and additional providers also matter. Transfers outside the EEA require compliance with GDPR Chapter V, for example an applicable adequacy decision or standard contractual clauses with necessary additional safeguards. Information about recipients, countries and safeguards, and access to copies, can be requested from the controller.

Where external content requires consent, its loading should prevent disclosure before the appropriate choice. Following an ordinary link to another website takes you to a separate service with its own processing arrangements.

10Automated decisions, photographs and security

The inspected enquiry form automatically checks required fields, the session token and submission frequency. These technical checks do not themselves confirm a booking or make an individual contracting decision.

Form checks support accurate and secure submissions. Booking and journey arrangements are confirmed individually; form validation does not replace these agreements.

Publishing or promoting photographs of identifiable people requires an appropriate separate basis and respect for image rights. Booking a journey alone does not authorise publication of photographs of the couple or guests.

Data access should be limited to authorised people and necessary tasks, with safeguards appropriate to risk. Do not send passwords or payment-card details through the form; safeguards do not guarantee complete absence of risk.

11Children and information about other people

The website is intended for service enquiries and is not directed at children as independent customers. When arranging a child’s journey, provide only information needed for safety, such as child-seat requirements, rather than unnecessary documents or diagnoses.

If you provide someone else’s information, ensure this is necessary to organise the service and lawful. Their rights do not depend on who made the booking.

12Updates and languages

This policy is available in Polish, English and Ukrainian. Questions can be addressed to the controller using the contact details above.

Changes to tools, recipients or purposes require updated information. New wording does not replace required consent or legitimise earlier processing without a basis. The current version and date appear on this page.