Privacy Policy

1. General Information

This Privacy Policy defines the rules for processing and protecting personal data of users of the John Dragon website available at https://johndragon.pl ("Website") and customers using cruise booking services.

The data controller is GPI PROJEKT Prosta Spółka Akcyjna, headquartered in Warsaw (05-077), ul. Cyklamenowa 7, NIP: 9522229976, e-mail: [email protected] ("Controller").

We respect your privacy and ensure the protection of personal data in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).

2. Types of Processed Data

We process the following types of personal data:

• Identification data: name, surname
• Contact data: e-mail address, phone number
• Data related to cruise bookings: date and time of cruise, number of participants
• Data related to payments: transaction data processed by the payment provider
• Technical data: IP address, browser type, browsing history on the Website (cookies)

3. Purpose and Legal Basis for Data Processing

We process your personal data for the following purposes:

• Performance of the contract (Art. 6(1)(b) GDPR) - processing reservations, handling cruise bookings, contact with the customer
• Legitimate interest of the Controller (Art. 6(1)(f) GDPR) - handling complaints, pursuing claims, marketing of own services, Website analytics
• Consent (Art. 6(1)(a) GDPR) - sending marketing information (newsletter), if you have given such consent
• Legal obligation (Art. 6(1)(c) GDPR) - accounting, tax obligations

4. Data Recipients

Your personal data may be disclosed to:

• Payment providers - for the purpose of processing payments for cruises
• Hosting and IT services providers - for the purpose of maintaining the Website
• Accounting and legal service providers
• Entities authorized under the law (e.g., courts, law enforcement agencies)

We do not transfer personal data outside the European Economic Area (EEA).

5. Data Retention Period

We retain your personal data for the following periods:

• Data necessary for contract performance - until the contract is completed and claims are time-barred
• Accounting data - in accordance with tax regulations (5 years)
• Marketing data - until consent is withdrawn or a justified objection is raised
• Data for legitimate interest purposes - until a justified objection is raised

6. Your Rights

You have the following rights regarding your personal data:

• Right of access - you can request a copy of your data
• Right to rectification - you can request correction of incorrect data
• Right to erasure - you can request deletion of data in justified cases
• Right to restriction of processing - you can request limitation of data processing
• Right to object - you can object to data processing for legitimate interests or marketing purposes
• Right to data portability - you can receive your data in a structured, commonly used format
• Right to withdraw consent - if processing is based on consent, you can withdraw it at any time

To exercise the above rights, please contact us at: [email protected]

You also have the right to lodge a complaint with the President of the Office for Personal Data Protection (UODO).

7. Cookies

The Website uses cookies - small text files stored on your device.

We use cookies for the following purposes:

• Ensuring proper functioning of the Website
• Remembering user preferences
• Website analytics (e.g., Google Analytics)
• Marketing and personalization of content

You can manage cookies through your browser settings. Please note that disabling cookies may limit the functionality of the Website.

8. Data Security

We apply appropriate technical and organizational measures to protect personal data against unauthorized access, loss, damage, or destruction.

Payment data is processed by our payment providers using secure SSL protocols and comply with PCI DSS standards.

9. Changes to the Privacy Policy

We reserve the right to make changes to this Privacy Policy. The current version is always available on the Website.

Significant changes will be communicated to users through the Website or by e-mail.

10. Contact

If you have any questions about the Privacy Policy or the processing of your personal data, please contact us:

GPI PROJEKT Prosta Spółka Akcyjna

ul. Cyklamenowa 7, 05-077 Warszawa

E-mail: [email protected]

Phone: +48 538 304 707