This Privacy Policy ("Policy") sets out the rules for the processing of personal data of users of the website http://endurotrails.pl/ ("Users" of the "Website") and other persons indicated in this Policy by ECO RIDERS sp.z o.o. with its registered office in Bielsko-Biała ("Administrator").

I. PROCESSING OF PERSONAL DATA
1. [Administrator of personal data] The administrator of your personal data is EcoRiders Sp. z o. o. with its registered office in Bielsko-Biała (43-300), ul. Żywiecka 92/4, entered in the Register of Entrepreneurs, kept by the District Court in Bielsko-Biała, VIII Commercial Department of the National Court Register under KRS number: 0000791039, NIP 9372722119, being the service provider of the Website. The Administrator can be contacted via the e-mail address Contact regarding personal data protection info@endurotrails.pl or at the following address: ul. Żywiecka 92/4, 43-300 Bielsko-Biała with the note "RODO"
2. [Purposes of data processing] Your personal data will be processed in order to:
a) aimed at implementing the bicycle rental agreement,
b) performance of the contract concluded by you with the Administrator;
c) necessary to fulfill the legal obligations incumbent on the Administrator, in particular those arising from tax law and accounting regulations;
d) for purposes resulting from the Administrator's legitimate interests, in particular providing contact with you before the conclusion of the contract and during the contract as well as after its termination;
e) to determine, investigate or defend against possible claims;
f) related to business operations, in particular for the purposes of conducting analyzes and statistics, as well as for marketing purposes.
g) archiving.

3. [Basics of data processing] The basics of processing your personal data are:
a) i.e., the performance of a contract to which you are a party or to take action at your request before the conclusion of the contract; (Article 6 (1) (b) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95 / 46 / EC (general regulation on data protection), hereinafter referred to as: "GDPR")
b) implementation of the legal obligation incumbent on the Administrator, (art.6 par.1 lit.c) RODO i.e.,)
c) legitimate interest of the Administrator (art.6 par.1 letter f) of the GDPR).
4. [Transfer of personal data] The recipients of your personal data may be - only in cases where it is necessary and to the extent necessary - entities cooperating with the Administrator in the scope of services provided to the Administrator and supporting the Administrator's current business processes, in particular entities providing services IT, marketing, legal, courier, agencies.
5. [Period of personal data processing] The period of processing your personal data depends on the purpose for which the data is processed. The period for which your personal data will be stored is calculated based on the following criteria:
a) If data processing is based on your voluntary consent, then personal data will be stored until it is withdrawn. Consent to the processing of personal data may be withdrawn at any time.
b) If the processing of data is necessary for the performance of the contract to which you are a party or to take action at your request before the conclusion of the contract, your personal data will be processed for the duration of the contract, and after this period for the limitation period of possible claims arising from commonly applicable law.
c) If the processing is necessary to fulfill the legal obligation incumbent on the Administrator, your personal data will be processed for a period of time resulting from the generally applicable provisions of law.
d) If the processing is necessary for the purposes of legitimate interests pursued by the Administrator or by a third party, your personal data will be processed for a period not longer than necessary for the purposes for which the data is processed or until an objection is raised to the processing of personal data in the scope of processing personal data for these purposes, for reasons related to your particular situation, unless the Administrator demonstrates the existence of valid legitimate grounds for processing, overriding your interests, rights and freedoms, or grounds for establishing, investigating or defending claims.
e) If personal data is processed for the purposes of direct marketing, then your personal data will be processed until you object to the processing of personal data for the purposes of such marketing, including profiling, to the extent that the processing is related to such direct marketing.
6. [Voluntary provision of personal data] Providing personal data is voluntary. However, failure to provide all required personal data will constitute an obstacle to the conclusion of the contract and, as a consequence, the Administrator's inability to provide services to you or to implement.
7. [Your rights] You have the right to:
a) access to your personal data,
b) rectify your personal data,
c) delete personal data if:
d) restrictions on the processing of personal data,
e) transferring data,
f) object to the processing of personal data
g) lodging a complaint to the supervisory body regarding the protection of personal data - the President of the Office for Personal Data Protection.

II. PROCEDURE FOR IMPLEMENTATION OF RIGHTS

1. Every natural person (hereinafter the "Applicant") has the right to apply to the Administrator for the exercise of the rights indicated in Chapter I, point 7 of the Policy.
2. The above applications will be implemented by the Administrator, taking into account the provisions of the GDPR. The above means that in the cases listed in the provisions of the GDPR, the rights indicated in Chapter I, point 7 of the Policy may not be available to the person to whom the personal data relates, or the application will be implemented for a fee to cover the costs of its implementation.
3. The application should be submitted by writing to info@endurotrails.pl 
4. If the Administrator does not process the Applicant's personal data (except for the processing of personal data for the purposes of the application itself), the Applicant will be informed about it and the Applicant's data obtained as a result of submitting the application will be immediately deleted.
5. The Administrator is entitled to verify the identity of the Applicant. The lack of effective verification of the Applicant's identity for reasons for which the Applicant is responsible may result in the Administrator's failure to process the submitted application, of which the Applicant will be immediately informed.
6. The Administrator shall provide the Applicant with a response to the application within 30 days from the date of its receipt at the latest. In complicated cases or requiring a lot of effort, this period may be extended by 2 months, of which the Applicant will be informed.

III. COOKIES AND SYSTEMS LOGS

1. As soon as the User connects to the Website, information about the number (including IP) and type of the User's end device from which the User connects to the Website appears in the Website's system logs. The Administrator, who is the Service provider of the Website, will process, in accordance with applicable law, also data on the number (including IP) and type of the User's end device, as well as the connection time of the abovementioned persons with the Website and other operational data regarding the User's activity. These data are processed in particular for technical purposes and to collect general statistical information.
2. The Administrator may use cookies (i.e. small text files sent to the User's device, identifying him in a way necessary to simplify or cancel a given operation) in order to collect information related to the User's use of the Website. Cookies enable: maintaining the User's session; adaptation of the Website to the User's needs; creating statistics of viewing the Website's subpages.
3. The User may change cookie settings at any time. To do this, you need to change your web browser's cookie settings. Settings can be changed to block the automatic handling of cookies in the web browser settings or to inform about them every time they are placed on the User's device. Detailed information about the possibilities and ways of handling cookies is available in the software (web browser) settings.