Effective from 9 September 2026.
1. Data controller
The controller of personal data is Artur Smolarek, trading as ArtTaxi, ul. Niebyła 9/37, 31-763 Kraków, Poland, Polish tax identification number (NIP): 7691802064 (“Controller”).
Privacy contact: ArtTaxikrakow@gmail.com, telephone +48 534 804 332.
2. Data that may be processed
Depending on how the website is used, the Controller may process:
- data provided by telephone, email, WhatsApp or an order form, including a name, telephone number, email address and message content;
- information necessary to prepare a quotation or provide a transfer, such as the pickup point, destination, date, time, number of passengers, luggage information, flight number, calculated distance and estimated price;
- billing data required by law;
- technical data, including the IP address, connection date and time, requested page, browser or device type and error information; the IP address, browser information and submission time may also be included in an email generated by the order form;
- information collected through cookies or similar technologies if they are enabled and the user gives the required consent.
3. Purposes and legal bases
- answering an enquiry, preparing a quotation and taking steps before entering into a contract — Article 6(1)(b) GDPR;
- accepting a booking and providing transport services — Article 6(1)(b) GDPR;
- handling an order form and sending confirmation that the request has been received to the email address provided — Article 6(1)(b) GDPR;
- complying with tax, accounting and other legal duties — Article 6(1)(c) GDPR;
- protecting the website, preventing abuse and establishing, pursuing or defending legal claims — Article 6(1)(f) GDPR;
- optional audience measurement and advertising — Article 6(1)(a) GDPR, based on consent.
4. Contact through WhatsApp
Selecting a WhatsApp button opens an external service. If a user sends a message, data will also be processed by WhatsApp under its own rules. Using WhatsApp is voluntary; users may contact ArtTaxi by telephone or email instead.
5. Recipients of data
Data may be disclosed to providers of hosting, email, website maintenance, accounting or legal services, only as necessary to provide their services. Data submitted through an order form is sent to the Controller by email, and confirmation that the request has been received is sent to the user’s email address. Data may also be disclosed to authorised authorities where required by law.
For email contact, Google Ireland Limited provides the email service and may receive personal data. When WhatsApp is used, recipients may include WhatsApp Ireland Limited and other Meta companies. If analytics or advertising tools are enabled in the future and the required consent is obtained, Google Ireland Limited or Meta Platforms Ireland Limited may also process traffic-measurement and advertising data.
6. Google Analytics, Google Ads and Meta Ads
The website does not currently use Google Analytics, Google Ads or Meta Ads.
The Controller may enable these tools in the future to measure traffic, advertising effectiveness and conversions. Technologies requiring consent will not be activated before the user makes a choice in the cookie panel. Once enabled, providers may process IP addresses, online identifiers, browser and device information, visited pages and interactions with the website or advertisements. Users may refuse or later withdraw consent.
7. Transfers outside the EEA
Some providers, particularly Google, Meta and WhatsApp, may process data outside the European Economic Area. Where this occurs, data should be transferred using mechanisms recognised by the GDPR, such as an adequacy decision or Standard Contractual Clauses.
8. Retention periods
- Data relating to an enquiry that does not result in a booking is retained for no longer than 12 months after the last contact, unless longer retention is necessary to protect against legal claims.
- Data relating to a completed service is retained while the service is provided and afterwards for the period required by tax and accounting laws or until relevant claims become time-barred.
- Technical logs are retained for the period set by the hosting provider or required by the Controller for website security and diagnostics.
- Data processed on the basis of consent is used until consent is withdrawn or the relevant purpose is fulfilled.
9. User rights
Depending on the circumstances, a data subject may have the right to access and receive a copy of personal data, rectify or erase data, restrict processing, receive or transfer data, object to processing, withdraw consent and lodge a complaint with the competent supervisory authority. In Poland this is the President of the Personal Data Protection Office.
Requests may be sent to ArtTaxikrakow@gmail.com.
10. Voluntary provision of data
Providing personal data is voluntary, but it may be necessary to receive an answer, obtain a quotation, make a booking or receive a transport service. A booking may not be possible without the information needed to arrange the journey.
11. Cookies
The website may use essential cookies required for correct and secure operation and — with consent — analytics and advertising cookies. Analytics or advertising cookies will be activated only after the relevant tools are implemented and consent is given.
The cookie panel stores the user’s choice in browser storage. Users may reopen the cookie settings at any time, change their decision and delete stored information through browser settings. Refusing analytics or advertising cookies does not restrict access to the website or contact options. The cookie settings panel identifies the categories in use. If additional tools are enabled, the policy or panel will be updated with their providers, purposes and lifetimes.
12. Automated decision-making and profiling
The Controller does not currently make decisions about users based solely on automated processing that produce legal effects or similarly significantly affect them. If advertising tools are enabled in the future, their providers may carry out marketing profiling, but only after the required consent has been obtained.
13. Security and external links
The Controller applies organisational and technical measures appropriate to the nature of the data and the risks involved. The website contains links to external services, particularly WhatsApp. After opening an external service, its provider’s privacy rules also apply.
14. Changes to this policy
This policy may be updated, particularly when new website functions or tools are introduced. The date of the current version appears at the beginning.