Privacy Policy

Last Updated: 16 July 2026

This Privacy Policy describes how Zipibu (operating at zipibu.info) collects, uses, stores and protects personal data. It applies to all visitors to the website and to persons who contact us through the contact form or by email. This policy is issued in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the General Data Protection Regulation, hereinafter "GDPR") and the Polish Act of 10 May 2018 on the Protection of Personal Data (Dz.U. 2018 poz. 1000, as amended).

1. Data Controller

The controller of personal data collected via zipibu.info is the editorial project Zipibu, with its registered correspondence address at Powstańców Warszawskich 9, 82-300 Elbląg, Poland. You can contact the data controller by email at [email protected] or by telephone at +48 55 641 97 97.

2. What Personal Data We Collect and Why

The table below sets out the categories of personal data we may collect, the purpose for which each category is collected, and the legal basis under GDPR for each processing activity.

Category of data Specific data points Purpose Legal basis (GDPR Article 6) Retention period
Contact enquiry data Name, email address, telephone number (optional), message content, subject selected To respond to enquiries submitted via the contact form or by email Article 6(1)(b) — performance of a contract or steps prior to entering a contract; or Article 6(1)(f) — legitimate interests in responding to enquiries 12 months from the date of the last correspondence, unless a longer period is required for legal reasons
Technical / server log data IP address (anonymised where possible), browser type, operating system, pages visited, time and date of visit, referrer URL To maintain website security, diagnose technical problems, and understand general usage patterns Article 6(1)(f) — legitimate interests in maintaining a secure and functional website 90 days from collection, then deleted or further anonymised
Cookie-derived analytics data Anonymised session data, page view counts, device type, approximate geographic region (country/region level only) To understand how visitors use the site and to improve content and navigation Article 6(1)(a) — consent, given through the cookie consent mechanism Up to 24 months from the date of collection, depending on the specific analytics tool used
Functional preference data Cookie consent choices, language or display preferences if set by the user To remember user preferences and avoid displaying the consent banner on subsequent visits Article 6(1)(a) — consent; or Article 6(1)(f) — legitimate interests in providing a functional user experience 12 months from the date of consent or last site visit

3. Cookies

This website uses cookies. A full description of the cookies used, their purposes, and how to manage them is provided in our Cookie Policy. We use a consent management mechanism that allows you to accept, reject, or customise non-essential cookies. Essential cookies required for basic site functionality are set without requiring consent, as permitted under Recital 47 of the GDPR and the Polish Electronic Services Act (Ustawa z dnia 18 lipca 2002 r. o świadczeniu usług drogą elektroniczną, Dz.U. 2002 Nr 144 poz. 1204, as amended).

4. How We Share Personal Data

We do not sell, rent, or trade personal data to third parties. Personal data may be shared only in the following limited circumstances:

  • With hosting and infrastructure providers who process data on our behalf under data processing agreements compliant with Article 28 of the GDPR. These providers are located in the European Economic Area or operate under appropriate safeguards.
  • With analytics service providers, where you have consented to analytics cookies, under data processing agreements that ensure appropriate protection of your data.
  • With competent public authorities (such as the Polish supervisory authority, UODO, or law enforcement) where required to do so by law or by a valid legal order.

We do not transfer personal data to countries outside the European Economic Area except where appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission under Article 46(2)(c) of the GDPR.

5. Your Rights Under GDPR

As a data subject under the GDPR and Polish law, you have the following rights in relation to your personal data:

  • Right of access (Article 15 GDPR): You have the right to obtain confirmation of whether we process personal data concerning you and, if so, to receive a copy of that data.
  • Right to rectification (Article 16 GDPR): You have the right to request correction of inaccurate personal data we hold about you.
  • Right to erasure (Article 17 GDPR): In certain circumstances, you have the right to request deletion of your personal data ("right to be forgotten").
  • Right to restriction of processing (Article 18 GDPR): You may request that we limit the processing of your data in certain circumstances, for example while a rectification request is being assessed.
  • Right to data portability (Article 20 GDPR): Where processing is based on consent or contract and is carried out by automated means, you have the right to receive your data in a structured, commonly used, machine-readable format.
  • Right to object (Article 21 GDPR): You have the right to object to processing based on legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
  • Right to withdraw consent (Article 7(3) GDPR): Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
  • Right to lodge a complaint: You have the right to lodge a complaint with the Polish supervisory authority, the Urząd Ochrony Danych Osobowych (UODO), at ul. Stawki 2, 00-193 Warszawa, tel. 22 531 03 00, uodo.gov.pl.

To exercise any of these rights, please contact us at [email protected]. We will respond within one calendar month of receiving your request, as required by Article 12(3) of the GDPR. In complex cases, this period may be extended by a further two months, in which case we will notify you within the first month.

6. Data Security

We implement technical and organisational measures appropriate to the risk associated with the data we process. These measures include encrypted data transmission (HTTPS/TLS), access controls limiting who within our organisation can access personal data, and regular review of our data handling practices. No transmission over the internet is completely secure, and we cannot guarantee the absolute security of data transmitted to us. Once received, we take reasonable steps to protect it.

7. Links to External Websites

Our guides may contain links to external websites, including pttk.pl, gis.gov.pl, and other public information resources. We are not responsible for the privacy practices of those websites. We recommend you review the privacy policies of any external sites you visit through links on this website.

8. Children's Privacy

This website is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child under 16 has provided us with personal data, please contact us at [email protected] and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this document reflects the date of the most recent revision. Where changes are material, we will make reasonable efforts to notify visitors, for example by displaying a notice on the website. We encourage you to review this policy periodically.

10. Contact

All enquiries relating to this Privacy Policy, including requests to exercise your data subject rights, should be directed to:

Zipibu
Powstańców Warszawskich 9
82-300 Elbląg, Poland
Email: [email protected]
Tel: +48 55 641 97 97