PRIVACY POLICY The Administrator of your personal data is BONUS TRAVEL s.c. Anna Szerer Michał Szerer, based in Poland, Sieradz (98-200), at ul. Żwirki i Wigury 1, email address: biuro@bonustravel.com.pl, phone number: 438208002, NIP: 8272304333, REGON: 101509263. Contact for the Data Protection Officer: rodo@bonustravel.com.pl. You have the right to access your data, to correct it, to request its deletion, to restrict processing, to object to the processing of data, and the right to data portability. You also have the right to lodge a complaint with a supervisory authority if your data is processed in violation of legal requirements. In Poland, the supervisory authority is the President of the Personal Data Protection Office. Data will be processed for the purpose of concluding and executing the contract with the Administrator, making necessary settlements related to its conclusion, fulfilling legal obligations imposed on the Administrator, conducting satisfaction surveys, and for marketing purposes aimed at promoting the Administrator and its services. Providing data is voluntary; however, failure to provide it will result in the inability to conclude the contract. The legal basis for processing your data to the extent necessary to conclude and execute the contract is Article 6(1)(b), while the legal basis for fulfilling the legal obligations imposed on the Administrator is Article 6(1)(c) of the Regulation of the European Parliament and of the Council (EU) 2016/679 of April 27, 2016, on the protection of natural persons in relation to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: GDPR). The basis for data processing is also Article 6(1)(f) of the GDPR, i.e., the legitimate interest of the Administrator in ensuring necessary settlements related to the concluded contract, conducting satisfaction surveys, and marketing aimed at promoting the Administrator and its services In the extent that data is processed based on your separate consent, you have the right to withdraw your consent at any time. However, this will not affect the lawfulness of the data processing that was carried out before the withdrawal. The recipients of personal data will include: airlines and bus companies, hotels, insurance companies, including TU Europa based in Wrocław, banks, payment operators, agents cooperating with the Administrator based on agency and franchising agreements, domestic and foreign contractors for the purpose of fulfilling the contract you have entered into, entities supporting accounting and legal processes, and entities providing IT services, including hosting. Given that we provide services worldwide, your personal data, in connection with the destination you have chosen, may be or will be transferred outside the European Economic Area to the extent necessary to fulfill the contract you have entered into, including to countries that have not been recognized by the European Commission as providing an adequate level of personal data protection. More information about countries providing an adequate level of personal data protection can be found at https://giodo.gov.pl/163/id_art/1519/j/pl. Personal data will be processed for the duration of the service provision and for the time necessary to demonstrate its proper execution, to address complaints, as well as for other legal requirements, e.g., tax regulations. You have the right to object to the processing of your personal data if the Administrator processes personal data: 1. for the purposes of direct marketing; such an objection does not need to be justified; 2. based on other legitimate interests of the Administrator; such an objection requires justification based on your particular situation.