Privacy and Cookie Policy

With regard to the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as “GDPR”, in the following Privacy and Cookie Policy, we inform you about the rules governing the processing of your personal data on the website www.flydrive.pl, hereinafter referred to as: “Website”, and about your rights in this regard.

Capitalized terms have the meanings assigned to them in the Terms and Conditions, available at www.flydrive.pl/pl/regulamin.

I. General Provisions

The controller of your personal data is Grupa Uchacz Spółka komandytowa, with its registered office at Podłopień 303, ZIP code: 34-650, Tax ID (NIP): 7371862099, National Business Registry Number (REGON): 492044720, entered in the KRS Register of Entrepreneurs maintained by the District Court for Kraków Śródmieście in Kraków, 12th Commercial Division of the National Court Register, under number 0000952817, hereinafter also referred to as: “Controller”. Personal data is processed:
- in accordance with the provisions regarding the protection of personal data,
- in accordance with the implemented Privacy Policy,
- to the extent and for the purpose necessary for the proper provision of the service and operation of the Website.
You can contact the data controller by email at: kontakt@flydrive.pl.

II. Where did we get your personal data?

We receive most of the data directly from you. You provide this data:
- when booking a parking space,
- when contacting us by phone, email, the contact form on the Website, or the Administrator’s social media accounts and channels,
- by consenting to the sending of commercial information via email,
- by using the features of the Administrator’s social media accounts and channels.
In addition, some information about you may be automatically collected by the tools we use that employ cookies; for more details, please see Section 4 of this Privacy and Cookie Policy.

III. Scope, purposes, duration, and legal basis for the processing of personal data

In accordance with the principle of purpose limitation set forth in the GDPR, we use the data you provide only to the extent necessary to achieve the specific purpose. Below is a list of the purposes for which we process your data, along with the relevant legal bases for such processing.

1. Parking Reservation

When making a parking reservation through the Website, you must provide the necessary information, such as your first and last name, email address, and license plate number (for long-term parking reservations). Additionally, you can always provide your phone number, license plate number, and flight number. If you are making a reservation as part of your business activities, you should provide your company name, business address/headquarters, and tax ID number. To complete the payment, you must also provide the necessary payment details, such as your bank account number (for bank transfer payments). We do not store payment card information. Providing this information is voluntary but necessary to complete the reservation.

The data provided in connection with a parking reservation is processed for the purpose of making the reservation (Article 6(1)(b) of the GDPR), to issue an invoice and include it in accounting records (Article 6(1)(c) of the GDPR), and for the purposes of defending against or pursuing claims, as well as for archival and statistical purposes (Article 6(1)(f) of the GDPR). Reservation data will be processed for the time necessary to properly perform the Reservation service, and then until the statute of limitations for claims arising from the concluded contract expires. Furthermore, after this period expires, anonymized data may still be processed for statistical purposes. The controller is also required to retain invoices containing your personal data for a period of 5 years from the end of the tax year in which the tax liability arose.

2. Contact

When you contact us by phone, email, contact form, or social media, you provide your phone number or email address as the sender’s address, or your username in the case of social media. In addition, you may include other personal information in the body of your message or during your conversation. Providing this information is voluntary, but necessary to establish contact.

In this case, the above data is processed for the purpose of contacting you, and the legal basis for processing is your consent resulting from your initiation of contact (Article 6(1)(a) of the GDPR). After the contact is concluded, the legal basis is a legitimate interest in the form of archiving the correspondence for the purpose of demonstrating its course in the future (Article 6(1)(f) of the GDPR). The content of the correspondence may be archived for the period of the statute of limitations for any claims that may arise from it. If no potential claims arise from the content of the correspondence, it is deleted 30 (thirty) days after we respond to your last question submitted via the contact form or sent by email.

3. Social media and external websites

We process your personal data when you use our social media accounts, particularly when you share content in comments or posts. In such cases, we may process your personal data, such as your username, first name, last name, profile picture, or the content you share.

The above data is processed on the basis of our legitimate interest (Article 6(1)(f) of the GDPR), which consists of maintaining and managing social media profiles, as well as conducting marketing activities through these platforms or using statistics.

We also process information that you send via chat or in private messages, or that you post in comments or group posts (the purposes of data processing in this regard are specified in the Contact section above).

4. Commercial Information

The data you provide when consenting to receive marketing communications (including your first and last name and email address) is used to send you emails containing such information, and the legal basis for processing this data is your consent (Article 6(1)(a) of the GDPR).

The data you provide will be processed until you withdraw your consent. You may also opt out of receiving commercial communications at any time by contacting us. If you opt out, you will no longer receive emails, but your personal data will continue to be stored in the mailing system. This is to protect against potential claims related to the sending of messages containing commercial information, in particular to demonstrate that you have consented to receiving them previously, which constitutes a legitimate interest of the Controller (Article 6(1)(f) of the GDPR).

5. Compliance with tax and accounting obligations

In connection with the performance of the Agreement, we fulfill the tax and accounting obligations imposed on us by applicable laws, in particular those related to the retention of accounting records. To this end, we process data such as: first and last name, company name, address or registered office, and tax identification number (NIP).

The processing of the aforementioned data is necessary due to applicable tax and accounting regulations (Article 6(1)(c) of the GDPR). Data related to the fulfillment of tax and accounting obligations will be processed for the duration of the statute of limitations for tax liabilities (5 years from the end of the tax year).

6. Determination, defense against claims, and enforcement of claims

In the event of any claims arising from the use of the Website or the Agreement entered into with us, we are entitled to process personal data for the purpose of establishing, defending against, or pursuing such claims. For this purpose, we may process any personal data related to a given claim; therefore, the scope of such data may vary depending on the nature of the claim in question.

The processing of personal data is necessary for our legitimate interest in protecting our rights (Article 6(1)(f) of the GDPR). We will process this data until the statute of limitations for claims expires as specified by law (e.g., 3 years for businesses, 6 years for consumers).

IV. Data in cookies

1. General Information

Cookies are small text files stored on your device (e.g., computer, tablet, smartphone) that can be read by IT systems (third-party cookies). Some cookies are deleted at the end of the web browser session, i.e., when you close the browser (so-called session cookies). Other cookies are stored on your device and allow your browser to be recognized the next time you visit the site (persistent cookies).

Every time you use the Website, we may collect non-personal information about you through cookies from third-party tools (third-party cookies) for statistical purposes, remarketing, and audience targeting. Some of the tools we use on the Website rely on cookies to function properly.

When you visit the website for the first time, you will see a message about the use of cookies. In particular, you can prevent the collection of data regarding your use of the website by Google Analytics 4 cookies, as well as the processing of this data, by installing the browser plugin available at the following address: https://tools.google.com/dlpage/gaoptout. You can also block cookies in your browser settings or enable a warning function when cookies are sent.

Disabling or restricting cookies may prevent you from using some of the features available on our Website and may make it difficult to use the Website. For example, buttons, widgets, video playback, and social media features implemented on our Website may not be available to you.

2. Social media

The Website uses plugins and other social media tools provided by social media platforms such as Facebook and Instagram. When you view a webpage containing such a plugin, your browser establishes a direct connection to the servers of the social media platform operators (service providers). The content of the plugin is transmitted by the respective service provider directly to your browser and integrated into the website. Through this integration, the service providers receive information that your browser has accessed our Website, even if you do not have a profile with the respective service provider or are not currently logged in. This information (along with your IP address) is transmitted by your browser directly to the provider’s server and stored there.

If you have logged in to a social media platform or an external service provider, those entities will be able to directly associate your visit to the Website with your profile on that social media platform. If you use a specific plugin, such as clicking the “Like” or “Share” button, the relevant information will also be sent directly to the server of the respective service provider and stored there. In addition, this information will be published on the respective social media platform and will be visible to people added as your contacts.

We process the above-mentioned data on the basis of our legitimate interest (Article 6(1)(f) of the GDPR) in order to enable the use of additional features on the Website, such as social media plugins. The specified data will be processed by the Controller for as long as the statistics provided by the relevant service provider remain available.

To learn more about how social media providers process your data, please review their privacy policies:

Facebook - https://pl-pl.facebook.com/privacy/explanation;
Instagram - https://pl-pl.facebook.com/privacy/explanation.

3. External service providers

This site may contain embedded content from third-party providers, the use of which may require cookies. Blocking cookies in your browser may prevent you from using these features. Embedded content from other sites behaves as if you were visiting that specific site directly. These sites may collect information about you, use cookies, embed additional third-party tracking, and monitor your interaction with the embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that site.

The Website embeds videos hosted on YouTube. To do this, it uses cookies from Google LLC, which are loaded only when the video is played. When you watch videos, you transmit certain data via the cookies placed on this site; this data does not allow you to be identified as an individual, but it enables us to analyze the channel’s statistics.

We process the above-mentioned data on the basis of our legitimate interest (Article 6(1)(f) of the GDPR) in order to enable the use of additional features on the Website, such as video playback. The data in question will be processed for as long as the statistics provided by the relevant service provider remain available.

To learn more about how third-party service providers process your data, please review their privacy policies:

YouTube - https://policies.google.com/privacy.

4. Google Analytics 4

Google Analytics 4 is a web-based tool provided by Google LLC, headquartered in Mountain View, California, USA,, for analyzing website statistics, which automatically collects information about your use of the Website. The Administrator does not use this software to identify Website users, and this tool is used solely for statistical purposes. Detailed information on how Google uses your data is available at: https://policies.google.com/technologies/partner-sites.

Google Analytics 4 collects information about: your operating system and web browser, your browsing activity on the Website, the time spent on the Website, navigation between individual pages, clicks on specific links, the sources from which you access the Website, your age range, , your gender, your approximate location limited to a city, and your interests as determined by your online activity.

The use of cookies for the collection of anonymous data is based on the Controller’s legitimate interest (Article 6(1)(f) of the GDPR), which consists of ensuring the proper functioning of the website, compiling statistics, and analyzing them to optimize the website and improve your user experience.

User and event data associated with cookies is stored by Google Analytics 4 on servers for a period of 14 (fourteen) months. At the end of this period, the stored data will be automatically deleted once a month.

You can prevent Google Analytics 4 cookies from collecting data about your use of the website and from processing that data by installing the browser plugin available at the following address: https://tools.google.com/dlpage/gaoptout.

If you are interested in details regarding data processing within Google Analytics 4, you can review the information provided by Google: https://support.google.com/analytics/answer/6004245.

5. Google Ads

The Administrator uses the Google Ads advertising system operated by Google LLC, headquartered in Mountain View, California, USA,, to run advertising campaigns, including remarketing campaigns. Remarketing allows the Administrator to display product ads to users who have previously visited the Website. To this end, cookies are used to re-engage users most likely to make a purchase, based on their previous activity on the Website. You can read more about how ad display works through the Google Ads service here: https://policies.google.com/technologies/ads?hl=pl.

The use of cookies for collecting data to personalize ads is based on your consent (Article 6(1)(a) of the GDPR) to engage in remarketing activities, which you provide by clicking on the cookie banner displayed when you visit the Website. This data will be processed until you withdraw your consent.

You can withdraw this consent and customize ads on the Google LLC advertising network by changing your ad settings (including blocking certain ads) at: https://www.google.com/settings/ads. Detailed instructions on how to do this are available at: https://support.google.com/ads/answer/2662856?hl=pl&co=GENIE. Platform%3DDesktop&oco=0. However, even if you disable ad personalization, you may still see ads based on, for example, your general location (based on your IP address), browser type, and search terms.

6. Google Image reCAPTCHA

Google reCAPTCHA is a tool provided by Google Ireland Ltd., based in Dublin, Ireland, designed to ensure website security. Its primary purpose is to protect against automated activities (so-called bots), combat spam, and prevent abuse related to forms and other interactive elements on the website. Additionally, reCAPTCHA supports the process of effectively verifying a user’s identity, making it possible to distinguish real people from automated data-processing systems. This service is used only with prior consent (Article 6(1)(a) of the GDPR).

When using reCAPTCHA, the following personal and technical data may be collected and transmitted to Google LLC: IP address, screen and browser window resolution, language settings, date and time of the visit, operating system information, installed browser plugins, mouse movements, and other data required for the service to function properly.

Detailed information regarding the scope and principles of data processing by Google LLC is available in the provider’s privacy policy at the following address: https://policies.google.com/privacy?hl=pl.

7. Meta Pixel

Meta Pixel (Facebook Pixel) is an analytics tool owned by Meta Platforms, Inc., headquartered in Menlo Park, California, USA. Its implementation on the Website allows us to automatically collect anonymous information about your use of the Website and use it to create audience groups and optimize advertising campaigns on the Facebook platform. The information collected via Meta Pixel does not allow for your identification. The use of Facebook Pixel is based on our legitimate interest in marketing our own products and services (Article 6(1)(f) of the GDPR).

Meta Platforms, Inc. retains event data collected via the Meta Pixel for up to two years. For custom audiences created based on data from the Meta Pixel, the maximum retention period for users in such an audience is 180 days.

Facebook may combine the information it collects with other information about you gathered through your use of Facebook and use it for its own purposes, including marketing (such as delivering a range of advertising products, including real-time bidding from third-party advertisers). You can learn more about Facebook’s data processing and privacy settings in the provider’s privacy policy - https://www.facebook.com/privacy/explanation.

8. TikTok Pixel

TikTok Pixel is an analytics tool owned by TikTok Technology Limited, headquartered in Dublin, Ireland. It is used to measure the effectiveness of ads by analyzing user activity on the Website. The data collected may be used to: serve ads to the right audience, create ad audiences, and use other TikTok advertising tools.

We use cookies to collect anonymous data based on our legitimate interest (Article 6(1)(f) of the GDPR), which consists of creating audience segments and better tailoring advertisements to users’ general preferences. These activities fall within the scope of marketing our own products and services.

Event data collected via TikTok Pixel may be stored for up to 18 months, in accordance with the TikTok Business Product Terms. Audience groups created based on this data are stored until they are deleted from the account or for 12 months after their last use or modification. For custom audiences, the maximum retention period for users is 180 days.

For more information about TikTok’s privacy practices and the processing of personal data, please visit: https://www.tiktok.com/legal/page/eea/privacy-policy/pl.

9. Microsoft Clarity

Microsoft Clarity is an analytics tool developed by Microsoft Corporation, headquartered in Redmond, USA, that enables the analysis of user behavior on a website and, as a result, the optimization of its functionality.

The recorded data is stored for 30 days. Sessions that have been tagged or added to favorites are stored for 13 months. Heatmap data is also stored for 13 months.

You can prevent Microsoft Corporation from collecting data about your use of the website via cookies, as well as from processing that data, by using the opt-out option - https://optout.aboutads.info/?c=2&lang=EN.

Please note that even if you disable cookies, Microsoft Corporation may still collect certain user data. Therefore, please review Microsoft Corporation’s privacy policy and information regarding the processing of personal data at https://www.microsoft.com/pl-pl/privacy/privacystatement.

10. Server logs

Using the Website involves sending requests to the server where the Website is hosted. Every request sent to the server is recorded in the server logs. These logs include, among other things, your IP address, the server date and time, and information about the web browser and operating system you are using. The logs are recorded and stored on the server.

The data stored in the server logs is not linked to specific individuals using the website and is not used to identify you. Server logs are used solely as supporting material for website administration, and their contents are not disclosed to anyone other than those authorized to administer the server.

V. Recipients of personal data

Personal data may be entrusted or transferred, pursuant to appropriate agreements, to third parties providing services related to software delivery, data storage and encryption, hosting companies, professional firms assisting with accounting processes, postal operators and couriers, law firms or tax firms, as well as transferred to other entities for the purpose of fulfilling legal obligations (such as the tax office).

The hosting provider is Team Solution Krzysztof Guzik, located at 71a Józefa Piłsudskiego Street, 34-600 Limanowa (Tax ID 7372086881).

Payments are also processed by third-party payment providers. Currently, the payment provider is Krajowy Integrator Płatności S.A., headquartered in Poznań (zip code 61-894), plac Władysława Andersa 3, 17th floor, KRS number: 0000412357. You can review the TPay system’s privacy policy at: https://tpay.com/polityka-prywatnosci. By making a payment, you are required to accept the indicated policy. After the transaction, your personal information (credit card details, financial data, etc.) will not be stored on our servers.

All entities to which your personal data is entrusted or disclosed guarantee that they will implement the appropriate measures to protect and secure your personal data as required by law.

Because we use the services of Google LLC, based in California, USA, and Meta Platforms, Inc., based in Menlo Park, California, USA, your data may be transferred outside the European Economic Area to the United States of America (USA) connection with its storage on U.S. servers based on the standard contractual clauses adopted by the European Commission regarding the transfer of personal data.

VI. User Rights

1. In connection with the processing of your personal data, you may have the following rights under the GDPR, depending on the scope and purpose of such processing:

the right to confirm whether personal data concerning you is being processed and the right to access such data (Article 15 of the GDPR),
the right to obtain a copy of the personal data being processed (Article 15 of the GDPR),
the right to have your personal data corrected if it is inaccurate, and the right to have incomplete data completed (Article 16 of the GDPR),
the right to erasure of your personal data, also known as the “right to be forgotten” (Article 17 of the GDPR) – you have the right to request the immediate erasure of your personal data in any of the following cases:
- when the personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
- when you object to the processing of data referred to in point 7) below and there are no overriding legitimate grounds for processing such data;
- when personal data is processed unlawfully;
- when personal data must be erased to comply with a legal obligation under European Union law or Polish law.
  However, the erasure of your personal data will not be possible to the extent that its processing is necessary (i) to exercise the right to freedom of expression and information, (ii) to comply with a legal obligation requiring processing under European Union law or Polish law, (iii) to establish, exercise, or defend legal claims.
the right to restrict the processing of your personal data (Article 18 of the GDPR) – you have the right to request a restriction on processing in cases where:
- you contest the accuracy of the personal data – for a period sufficient to verify the accuracy of such data;
- the processing is unlawful, and you oppose the erasure of your personal data, requesting instead that its use be restricted;
- as the Data Controller, we no longer need your personal data for processing purposes, but you need it to establish, exercise, or defend legal claims;
- you have objected to the processing referred to in point 7) below – until it is determined whether our legitimate grounds override the grounds for your objection,
the right to data portability (Article 20 of the GDPR) – you have the right to receive, in a structured, commonly used, and machine-readable format, the personal data you provided when making a reservation; you also have the right to transmit that personal data to another data controller,
the right to object to the processing of your personal data (Article 21 of the GDPR) – you have the right to object to the processing of your personal data if we process such data on the basis of a legitimate interest; we may not accommodate your objection if there are compelling legitimate grounds for processing that override your interests, rights, and freedoms, or grounds for the establishment, exercise, or defense of legal claims;
the right to withdraw consent at any time, where processing is based on consent; the withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent prior to its withdrawal.

2. You can exercise the rights listed above by contacting us at the following email address: kontakt@flydrive.pl.

3. You also have the right to lodge a complaint with the competent supervisory authority (currently the President of the Personal Data Protection Office) at any time if your rights regarding the processing of personal data are infringed (Article 77 of the GDPR).

VII. Data Security

We respect your right to privacy and the security of your data, which is why we have implemented appropriate security and data protection measures. Personal data is processed only by individuals authorized by us or by data processors with whom we work closely. We continuously monitor the condition of our technical infrastructure and provide appropriate training to our staff.

VIII. No profiling

We do not make decisions regarding you based solely on automated processing, including profiling, that would produce legal effects concerning you or similarly significantly affect you.

IX. Changes to the Privacy Policy

We may update our Privacy Policy, including in response to new features or changes in the law. If we make any changes, we will update the date at the bottom of the Privacy Policy page and send you a notification of the changes to the email address provided in your User Account, if you have such an account on the Website. We encourage you to check this page frequently and stay informed about changes made to protect the personal information we collect.