Privacy Policy
This Privacy Policy explains how Maius Travel collects and uses personal data when you visit maiustravel.com, send us an enquiry or travel with us. We process personal data in line with the EU General Data Protection Regulation (GDPR) and Polish data protection law.
Who is the data controller
The controller of your personal data is:
MAIUS TRAVEL Paulina Jurkowska-Pudełko
ul. Beskidzka 26/55, 30-611 Kraków, Poland
NIP (VAT ID): 726 221 96 02
E-mail: office@maiustravel.com
Tel./WhatsApp: +48 509 206 526
For any question about your data, or to exercise your rights, please write to office@maiustravel.com.
What data we process, why, and on what legal basis
Enquiries and quotations: When you contact us through the contact form, e-mail, phone or WhatsApp, we process your name, e-mail address, phone number, company name (for travel agencies and tour operators) and the content of your message. We use this data to answer your enquiry and prepare an offer. Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in replying to messages (Art. 6(1)(f) GDPR).
Bookings and delivery of travel services: To organise a tour, accommodation, transport, guiding or other services, we process the data of the person placing the booking and, where needed, of the participants: names, contact details, travel dates, room allocation, and other details required by hotels, carriers, venues or authorities. Legal basis: performance of a contract (Art. 6(1)(b) GDPR). If you choose to tell us about dietary requirements or accessibility needs, we use this information only to arrange the services you ask for and pass it only to the provider concerned, based on your explicit consent (Art. 9(2)(a) GDPR).
Business partners: When we work with travel agencies, tour operators and suppliers, we process the business contact details of their staff (name, position, business e-mail and phone). Legal basis: our legitimate interest in running business cooperation (Art. 6(1)(f) GDPR).
Accounting and legal obligations: We keep invoices and accounting records as required by Polish tax and accounting law. Legal basis: legal obligation (Art. 6(1)(c) GDPR).
Claims: We may keep data needed to establish, exercise or defend legal claims. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
Website statistics: If you accept statistics cookies in our cookie banner, we use Google Analytics 4 (loaded through Google Tag Manager) to understand how visitors use the website, for example which pages are visited and how visitors arrive. Legal basis: your consent (Art. 6(1)(a) GDPR). Without your consent Google Analytics is not activated.
Website operation and security: When you visit the website, our hosting provider automatically records technical data such as IP address, date and time of the visit, browser type and the page requested (server logs). This is needed to deliver the website and keep it secure. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
Cookies
We use cookies and similar technologies. Functional cookies are necessary for the website to work. Statistics cookies are used only with your consent. Details, and the option to change or withdraw your consent at any time, are available in our Cookie Policy (EU) and in the “Manage consent” panel on the website.
Who receives your data
We share personal data only as far as necessary, with:
– providers of the travel services you book: hotels and other accommodation, coach and transfer companies, licensed guides, tour leaders, restaurants, museums, attractions and memorial sites (for example the Auschwitz-Birkenau Memorial, which requires participant names for reservations);
– the travel agency or tour operator that booked the service on your behalf, if applicable;
– our IT and service providers: website hosting (KRU.PL, Poland), e-mail and communication services, and Google Ireland Limited (Google Analytics, Google Tag Manager);
– our accounting office, legal advisers and insurers;
– public authorities, where required by law.
We do not sell your personal data.
Transfers outside the European Economic Area
Google may process data in the United States. Such transfers are based on the EU-US Data Privacy Framework, to which Google LLC is certified, and on Standard Contractual Clauses approved by the European Commission. If a tour you book includes services outside the EEA, we transfer to the local provider only the data needed to deliver that service, as permitted by Art. 49(1)(b) GDPR.
How long we keep your data
– Enquiries that do not lead to a booking: up to 2 years from the last contact.
– Booking and contract data: for the duration of the contract and then until claims become time-barred (generally up to 6 years).
– Invoices and accounting records: 5 years from the end of the calendar year in which the tax obligation arose.
– Data processed on the basis of consent: until you withdraw consent.
– Google Analytics data: up to 14 months (according to the retention setting in Google Analytics).
Your rights
You have the right to:
– access your personal data and receive a copy;
– have inaccurate data corrected;
– have your data erased or its processing restricted;
– data portability;
– object to processing based on our legitimate interest;
– withdraw consent at any time, without affecting the lawfulness of processing before the withdrawal.
To exercise these rights, write to office@maiustravel.com. You also have the right to lodge a complaint with the supervisory authority: the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa, Poland, uodo.gov.pl.
Is providing data required
Providing personal data is voluntary, but without it we cannot answer your enquiry or arrange the services you book.
Automated decisions
We do not make decisions based solely on automated processing, including profiling, that produce legal effects for you.
Changes to this policy
We may update this Privacy Policy when our services or the law change. The current version is always available on this page, with the date of the last update shown at the top.
Last updated: 22 October 2026