Privacy Policy

1. Data Controller

The controller of personal data is Tomasz Morawik, running a sole proprietorship under the name Tomasz Morawik, with its registered office at ul. Gaik 80, 31-338 Kraków, NIP: 945 185 80 08, REGON: 356 341 018, e-mail: tomek@mechanicznalotka.pl, tel.: 695 191 176.

2. What data we process

• identification and contact data (first and last name, e-mail address, phone number),
• account data in the booking system (login, booking and payment history),
• transaction data (payment identifier, amount, payment status),
• technical data (IP address, cookies necessary for the operation of the website).

3. Purposes and legal bases of processing

• Booking and contract performance: handling class registrations and maintaining the user account (Art. 6(1)(b) GDPR).
• Payment processing: execution and settlement of online payments (Art. 6(1)(b) GDPR).
• Newsletter: informing you about news and tournaments, only with your consent (Art. 6(1)(a) GDPR).
• Image: documenting the club's activities on the basis of legitimate interest and granted consents (Art. 6(1)(f) and (a) GDPR).
• Legal obligations: storage of accounting and settlement documentation (Art. 6(1)(c) GDPR).

4. Recipients of data

Your data may be transferred to entities supporting the operation of the website, only to the extent necessary to provide the services:

• Payment operators: Paynow (mBank S.A.) and Autopay S.A. — for the execution of online and card payments.
• Hosting and infrastructure providers: Vercel Inc. and Supabase — for data storage and maintenance of the website.
• Communication provider: Brevo — for sending e-mails and SMS related to bookings.

These entities process data on our behalf and only to the extent necessary to provide the services. We do not sell personal data or share it with third parties for marketing purposes.

5. Data retention period

We process data for the period necessary to fulfil the purposes for which it was collected: for the duration of holding the account and performing bookings, and, as regards settlements and accounting documentation, for the period required by law (at least 5 years). Data processed on the basis of consent is stored until it is withdrawn.

6. Your rights

You have the right to:

• access your data and receive a copy of it,
• rectification (correction) of data,
• erasure of data (the "right to be forgotten"),
• restriction of processing,
• data portability,
• object to processing (e.g. a request to remove a photo featuring your image),
• withdraw consent at any time (e.g. consent to the newsletter),
• lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office (PUODO), ul. Stawki 2, 00-193 Warszawa.

To exercise the above rights, contact us at tomek@mechanicznalotka.pl.

7. Cookies

Our website uses only technical cookies that are necessary for its proper operation. We do not use analytical, advertising or tracking cookies — we do not profile users and do not transfer data for marketing purposes.

In particular, we use a login session cookie (sb-mlotka-auth-token), which maintains the login and the booking session and is deleted upon logout or session expiry. To protect forms against bots, we additionally use the Cloudflare Turnstile service.

You can block or delete cookies in your browser settings, but this may prevent logging in and the correct operation of the booking system.

8. Data security

Data collected by the booking system and contact forms is stored on a secured server and transmitted using an encrypted connection (HTTPS). We apply technical and organisational measures protecting data against unauthorised access.