Privacy policy

Privacy Policy

Dear Users, the protection of our customers' personal data is an important part of our business. We assure you that your data is safe with us. Below we describe how we use it in order to enable our customers to benefit from our website in a better and more effective way.

Scope of this Privacy Notice

The controller of customers' personal data is Netstel Software M.Matusiak sp. j., with its registered office in Kraków, ul Prądnicka 41/2, 31-202 Kraków.

We encourage you to read this Privacy Notice, which describes the types of personal data we collect and the purposes for which we collect it, when and how we may share personal data with other organisations, and how you can access and update your personal data.

Personal Data We Collect

When you register on the website and use its features, we may collect data such as:

When you browse the website or use the available mobile applications, we may collect information about:

Other Sources of Personal Data

Use of Personal Data

We use personal data in a number of ways, as described below.

Providing and delivering the products and services you have ordered

The processing of personal data is necessary to manage your account or bookings, to provide access to the products and services you wish to purchase, and to provide support in relation to any services and any refunds.

Managing and improving our products, services and day-to-day operations

We use personal data to manage and improve our products, websites, mobile applications, customer loyalty or reward programmes and other services.

We monitor the use of our services in order to protect your personal data and to detect and prevent fraud, other crimes and misuse of our services. This enables us to ensure that our services are used safely.

We may use personal data to respond to and manage security incidents, accidents or other similar events, including for medical and insurance purposes.

We may use personal data to conduct market research and internal research and development, and to develop and improve our range of products, services, offices, IT systems, security, know-how and methods of communicating with customers.

We use CCTV images to ensure the safety of all employees and customers of our agencies, offices and other buildings, and to prevent, detect and prosecute crime. We may also use these images to establish, exercise or defend our legal claims.

Personalising the Customer Experience

Our aim is to ensure that marketing communications relating to our products and services, as well as communications from our suppliers and business partners, including online advertisements, are tailored to your interests.

To this end, we may use personal data to gain a better understanding of your interests, which enables us to identify other products, services and information that are likely to be of most interest to you. This allows us to tailor our communications so that they are more relevant and interesting to you.

Tracking your online behaviour and purchases helps us to understand you better as a customer, which in turn enables us to provide personalised offers and services.

We may also measure responses to marketing communications relating to the products and services we offer, which enables us to offer products and services that better meet your needs as a customer.

If you do not wish to receive personalised services from us, you may change your preferences at any time by contacting us at [email protected] or by writing to us.

Interacting with Customers

In order to provide better customer service, when you contact us, for example by e-mail, post, telephone or social media, we may use your personal data to provide explanations or support.

The processing of personal data is necessary to manage any promotions and competitions in which you choose to participate, including those organised in cooperation with our suppliers and business partners.

We may invite you to take part in customer research, surveys and other market research carried out by us or by other organisations on our behalf.

To help us understand you better as a customer and to be able to provide customer service and marketing communications (including online advertisements tailored to your interests), we may combine personal data collected when you make purchases at our offices with personal data obtained from our websites, mobile applications and other sources.

Marketing Communications

We may send you relevant offers and news about our products and services in a number of ways, including by e-mail. We may also send you information about the products and services of other companies which we believe may be of interest to you. We will do so only if you have given your prior, freely given consent to receive such marketing communications.

When making a booking or registering, you will be asked whether you wish to receive marketing communications and to choose your preferred method of contact. You may change your marketing preferences online at any time by contacting us at [email protected], by writing to us or by using the "unsubscribe" link included in our marketing communications. The choice is, of course, yours; however, if you decide that you do not wish to receive marketing communications from us, you will not receive offers or promotions that may be of interest to you.

You may receive information from us relating to the services you have purchased, for example confirmations of your bookings and important information on the use of the products or services you have purchased from us.

Market Research

We would like to hear your opinion, which will help us improve our products and services; we may therefore contact you when conducting market research. You may always decide whether to take part, or continue to take part, in our market research.

Sharing Personal Data with Suppliers and Business Partners

We also work with carefully selected suppliers who perform certain functions on our behalf. These include, for example, companies that support us with IT services, data storage and combining, marketing, market research, payment processing and the delivery of products and services.

It may be necessary to share personal data in order to establish, exercise or defend our legal claims, including sharing personal data with others for the purposes of fraud prevention and credit risk reduction.

When we transfer personal data to other organisations, we may require them to keep it secure and prohibit them from using it for their own marketing purposes.

We share only the minimum personal data necessary to enable our suppliers and business partners to provide services to you and to us.

List of Trusted Partners

The list of our Trusted Partners is provided below. If you would like to find out more, please contact us.

Sharing Data with Regulatory Authorities

We may share the minimum necessary personal data with public authorities where we are required to do so by law or where this is permitted by law.

Disclosure of Personal Data

We may disclose personal data to an organisation to which we sell or assign (or with which we have entered into negotiations for the sale or assignment of) the service or website. If the assignment or sale is completed, the organisation receiving the personal data may use it in accordance with this Privacy Notice.

Protection of Personal Data

We assure you that we apply appropriate security measures to protect personal data against accidental loss and unauthorised access, use, alteration and disclosure.

The security of your data also depends on you. For example, where we have given you, or you have chosen, a password for access to certain services, you are responsible for keeping that password confidential.

The personal data we obtain from you may be transferred to and stored outside the European Economic Area ("EEA"). It may also be processed by organisations operating outside the EEA that work for us or for one of our suppliers. We have put in place appropriate safeguards to ensure that personal data is adequately protected and treated in accordance with this Notice. These safeguards include, but are not limited to, appropriate contractual clauses, such as the standard contractual clauses approved by the European Commission, and appropriate security measures.

Data Retention

We will retain your personal data only for as long as is necessary for the purposes set out in this Privacy Notice and/or to comply with legal and regulatory requirements. After this period, we will securely delete your personal data. If, after this period, the data is needed for lawful analytical, historical or other purposes, we will take appropriate steps to anonymise it.

Information on Cookies and Similar Technologies

Cookies are small data files that allow websites to collect and store a range of data from desktop computers, laptops or mobile devices. Cookies enable us to provide important features and functionality on our websites and in our mobile applications, and we use them to improve the quality of our customer service.

Links to Other Websites

Our websites and mobile applications may contain links to websites operated by other organisations that have their own privacy policies. Before providing any personal data on another organisation's website, please read its terms and conditions and privacy notice, as we accept no responsibility for the operation of other organisations' websites.

Social Media Features

Our websites and mobile applications may contain features of social media platforms such as Facebook, Twitter, Google+ and Pinterest, which have their own privacy policies.

Before providing any personal data on another organisation's website, you should read its terms and conditions and privacy notice, as we accept no responsibility for these features.

Access to and Updating of Personal Data; Complaints

You have the right to request a copy of your personal data held by us. You may request, by e-mail at [email protected] or by writing to us, a copy of any other personal data relating to you that we hold.

Please provide any information that will help us to identify and locate your personal data. Where possible, access to the data will be provided free of charge, except where further copies of the data are requested, in which case we may charge a reasonable fee to cover the administrative costs incurred.

We want to make sure that the personal data we hold about you is accurate and up to date. If any of the information we hold is incorrect, please let us know.

You may also request the rectification or erasure of your personal data, object to the processing of your personal data and, where technically feasible, request that the personal data you have provided be transferred to another organisation.

We will update or delete your data unless we are required to retain it for legitimate business purposes or to comply with the law.

You may contact us if you have any concerns about how your personal data is collected, stored or used. We strive to resolve all complaints; however, if you are not satisfied with our response, you may lodge a complaint with the supervisory authority responsible for personal data protection, i.e. your local data protection authority.

Please note that we may need to verify your identity before taking action on a request or complaint. We may also require further information to ensure that you are duly authorised to submit a request or complaint on behalf of another person.

Legal Basis for Processing Personal Data

We will collect and use personal data only where at least one of the following conditions is met:

Example: Personalising the customer experience

We may use personal data to gain a better understanding of your interests, which enables us to identify other products, services and information that are likely to be of most interest to you. This allows us to tailor our communications so that they are more relevant and interesting to you.

Changes to this Notice

This Notice supersedes all previous versions. We may change the content of this Notice at any time, so please check it regularly on our website for updates. If the changes are significant, we will provide a prominent notice on our website, including, where we consider it appropriate, electronic notification of changes to the Privacy Notice.

Key Terms

Data controller: The data controller determines the purposes and means of the processing of personal data.

European Economic Area (EEA): the EU Member States plus Norway, Iceland and Liechtenstein.

Online advertisements: Advertising messages that can be seen on the Internet.

Special categories of personal data: These are categories of personal data revealing racial or ethnic origin; political opinions; religious or philosophical beliefs; trade union membership; genetic data and biometric data uniquely identifying a natural person; data concerning health; and data concerning a natural person's sex life or sexual orientation.

Caricom API Data: Some or all CARICOM states have entered into agreements with the United States under which the personal data required and established by the CARICOM states for border security purposes is provided in advance to the U.S. Department of Homeland Security for processing on behalf of those CARICOM states. For more information, see the Caricom website.

U.S. Secure Flight Data programme: The U.S. Transportation Security Administration (TSA) requires your name, date of birth and gender for watch list screening purposes. You may also provide your Redress Number, if you have one. Failure to provide this data may result in denial of transport or boarding. The TSA may share the information provided with law enforcement or intelligence agencies or other authorities under a public information-sharing system. For more information, see the TSA website.