Skip to content
Vision Travel PL

Vision Travel sp. z o.o.

Privacy policy

In force from

This is an informational translation. The Polish version of this policy is the binding one: Polityka prywatności.

In short: visiontravel.pl is a company information site (a digital business card). The site has no forms, does not create accounts and does not use cookies or analytics. Apart from the server log described below, we receive personal data only when you write to us or call us.

Who is the controller of your data

The controller of personal data related to the visiontravel.pl website is Vision Travel sp. z o.o. (a Polish limited liability company) with its registered office at Dębe 61, 05-140 Serock, Poland, entered in the Polish business register (KRS, the National Court Register) under number 0001263344, tax identification number (NIP) 5362006589, statistical identification number (REGON) 545594581. In this policy, “we” means the company.

How to contact us

For any matter concerning your data, email us at kontakt@visiontravel.pl or kontakt@sanblas.pl, or write to our registered office address. We have not appointed a data protection officer; we deal with data matters ourselves.

What we do with data, on what basis and for how long

Email message or phone call

What data. Your email address or phone number, your first and last name if you give them, and the content of your message.

Why and on what legal basis. To reply and, at your request, to prepare an offer: steps taken at your request before entering into a contract (Article 6(1)(b) GDPR) or our legitimate interest in answering correspondence (Article 6(1)(f) GDPR).

For how long. One year from receiving the message, the same as enquiries on the sanblas.pl website. If the conversation leads to a booking of a sailing trip or tour, the privacy policy of the sanblas.pl website (in Polish), where we handle bookings, applies from then on.

Server log

What data. When you open the site, the server records in a technical log your IP address, the time of your visit, the address of the page you opened and your browser type.

Why and on what legal basis. So that the site works, stays secure and abuse can be detected: our legitimate interest (Article 6(1)(f) GDPR).

For how long. 7 days: that is how long the server provider keeps the log, after which the entries are deleted automatically. We do not combine this data with other data and do not use it to identify people.

Who we share data with

Data goes to providers who process it on our behalf and on our instructions (under data processing agreements):

We also pass data to public authorities where the law requires it. We do not sell your data to anyone.

Transfers of data outside the European Economic Area (EEA)

Railway, Cloudflare and Google are companies headquartered in the United States or belonging to US-based groups. Where possible, we choose to store data in the European Union. If data nevertheless goes outside the EEA, this happens on the basis of a European Commission decision finding an adequate level of protection (the EU-US Data Privacy Framework) or standard contractual clauses adopted by the Commission. You can get a copy of these safeguards by writing to us.

Your rights

You have the right to:

To exercise these rights, write to us at one of the addresses given above. We will reply within one month.

Automated decisions

We do not take decisions based solely on automated processing, including profiling.

Changes to this policy

When we change this policy, the new version will appear at the same address, with its effective date.