aurora nvd

Privacy Policy

Data controller

  1. The data controller is Krzysztof Fus, operating a sole proprietorship under the name Krzysztof Fus, registered in the Central Registration and Information on Business (CEIDG), based in Kraków at Osiedle Avia 7/127, 31-877 Kraków, Poland.
  2. Contact details: NIP (tax ID) 6751790626, REGON 526931719, email: contact@aurora-nvd.eu.

Contact form inquiries

  1. Submitting the contact form sends the data directly to the controller’s own mailbox, hosted with the same hosting provider — no third-party form-handling or email-sending service is involved.
  2. Personal data (name, email address, message content) is processed for the purpose of responding to the inquiry.
  3. The legal basis is Article 6(1)(b) GDPR (steps taken prior to entering into a contract, at the request of the data subject) and Article 6(1)(f) GDPR (the controller’s legitimate interest in handling correspondence).

Cookies and analytics

  1. The site uses Google Analytics (GA4), a web analytics service provided by Google Ireland Limited, to understand how visitors use the site.
  2. Google Analytics only sets cookies and processes your data after you give consent via the cookie banner shown on your first visit. If you decline, no analytics cookies are set and no data is sent to Google Analytics.
  3. If you consent, data collected includes pages visited, time on site, device/browser type, and approximate location (derived from IP address); Google Analytics does not store IP addresses in an identifiable form.
  4. The legal basis for this processing is your consent (Article 6(1)(a) GDPR), which you can withdraw at any time by declining cookies on a future visit or clearing your browser’s local storage for this site.
  5. More information is available in Google’s Privacy Policy.

Equipment rental agreements

  1. Equipment rental is carried out under a written rental agreement.
  2. In connection with entering into and performing that agreement, the controller processes a broader scope of data than for a simple inquiry, including: name/company name, residential or business address, PESEL number (Polish national ID, for individuals) or NIP/REGON/KRS (for businesses), the data needed to issue an invoice, and — when handing over or returning equipment of significant value — an ID document number, for the purpose of verifying the renter’s identity and preparing a handover/return report.
  3. The legal basis for processing is Article 6(1)(b) GDPR (performance of the rental agreement), Article 6(1)(c) GDPR (tax and accounting obligations), and Article 6(1)(f) GDPR (the controller’s legitimate interest in protecting against theft or misuse when renting high-value equipment).
  4. Data may be shared with parties that support the controller in performing the agreement, in particular accounting, IT or legal service providers, and — for equipment deliveries — the courier company.
  5. Providing this data is voluntary but necessary, respectively, to respond to an inquiry or to enter into and perform the rental agreement.

Guided hiking trips

  1. In connection with registering for and taking part in a trip, the controller processes a participant’s name and contact details (email, phone), and, for minors, the details of the guardian consenting to their participation.
  2. The legal basis for processing is Article 6(1)(b) GDPR (performance of the contract to take part in the trip) and Article 6(1)(f) GDPR (the controller’s legitimate interest in ensuring participant safety).
  3. During a trip, participants may be recorded, photographed, or filmed, and their resulting image — with the participant’s consent as described in the Terms & Conditions — may be used in online publications, on the controller’s website, and on its social media, including for marketing and promotional purposes. The legal basis is the participant’s consent (Article 6(1)(a) GDPR) and Article 81(1) of the Polish Act on Copyright and Related Rights.
  4. Data may be shared with parties that support the controller in organizing the trip, in particular an insurer (where insurance is purchased through the controller) and accounting or legal service providers.
  5. Providing this data is voluntary but necessary to register for and take part in a trip.

Retention period

  1. Data related to an inquiry is stored for as long as necessary to respond to it.
  2. Data related to a concluded rental agreement is stored until any claims arising from the agreement become time-barred, and for the period required by tax and accounting regulations.
  3. Data related to trip participation is stored until any claims relating to the trip become time-barred. An image recorded with a participant’s consent may be used without a time limit, within the scope of that consent as described in the Terms & Conditions.

Data subject rights

  1. You have the right to access your data, to have it corrected or erased, to restrict its processing, to data portability, and to object to processing.
  2. You also have the right to lodge a complaint with the President of the Polish Data Protection Authority (Prezes Urzędu Ochrony Danych Osobowych).
  3. To exercise these rights, contact us by email at contact@aurora-nvd.eu.