Privacy
Last updated: 31 October 2026
Who we are
This website and the trip apps are run by Slow Kraków with Hanna, Wielkanocna 4F, 30-376 Kraków, NIP 6772338593. For anything about your personal data, write to [email protected].
What we collect, and why
When you contact us (contact form, trip sketch, email or WhatsApp) we receive your name, email address and, if you give them, your phone number, travel dates, group size, ages of children, the experiences you picked and your message. We use them only to answer you and to prepare your trip (legal basis: steps before a contract, art. 6(1)(b) GDPR).
When you book with us we also keep your trip plan, the bookings we make in your name, the messages in your trip app and our invoices (contract, art. 6(1)(b); invoices: legal obligation, art. 6(1)(c)). To book hotels, tickets, guides or drivers we pass on only what they need, usually the names of the travellers and your arrival time.
Your trip app opens with a private link and knows you only by first name and client number. It stores your plan on your device so it works offline. If you switch on notifications, your browser gives us an anonymous push address, which we delete after the trip.
Cookies and tracking
This website uses no advertising or tracking cookies. Your trip sketch is kept in your own browser (local storage) and never leaves it until you send it. If we ever switch on visitor statistics, we will ask for your consent first.
Who else processes data
- Our web host in Poland, which stores the website and the messages you send.
- Our email provider, which delivers our emails.
- WhatsApp (Meta) if you choose to message us there. WhatsApp’s own privacy policy applies to that chat.
- Map tiles in the trip app load from OpenStreetMap, and the weather forecast comes from MET Norway through our server.
- Fonts are stored on our own server. Some photos and short videos may load from Unsplash or Pexels until we copy them to our server.
How long we keep it
Enquiries that don’t lead to a trip: 12 months, then deleted. Trips: until the trip is over and any questions are settled; invoices and accounting records: as long as Polish law requires (usually 5 years).
Your rights
You can ask to see, correct, delete or receive your data, to limit its use, or object to it, by writing to [email protected]. We reply within one month. You can also complain to the Polish data protection authority, the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl.
We don’t sell your data, and we make no automated decisions about you.