Privacy policy
Updated: 2 November 2026
Data controller and contact
The data controller is Fundacja ProfiSailing, al. Niepodległości 17/36, 43-100 Tychy, Poland; KRS 0001074027, NIP 6463008805, REGON 527149257. For privacy enquiries, email biuro@profisailing.pl, phone +48 503 352 363 or write to the foundation’s address.
What data we process and why
When you contact us by form, email or phone, we process the contact details, company information and message you provide. The Polynesia application form also requires your date of birth and passport number to prepare the journey, including flight bookings. These details and an email address are required to submit that form. If you provide a Polish tax ID (NIP), the system may automatically fill in the company’s legal name and address.
- Answering enquiries: GDPR Article 6(1)(f) — our legitimate interest in handling correspondence.
- Preparing a contract at your request: GDPR Article 6(1)(b).
- Legal obligations, where applicable: GDPR Article 6(1)(c).
- Establishing or defending claims: GDPR Article 6(1)(f).
Marketing by the foundation and Blue Horizon
On the Polynesia form you can separately and voluntarily agree to receive information about events and offers from Fundacja ProfiSailing and Blue Horizon sp. z o.o. by email, phone or SMS. Each channel has its own option; declining does not affect your application. For this purpose, the two organisations use only your email address or phone number, based on consent under GDPR Article 6(1)(a). Your date of birth and passport number are not used for marketing. Consent covers only these two named organisations. For any selected channel, the foundation may share the relevant contact details and consent record with Blue Horizon. Blue Horizon sp. z o.o. is based at ul. Starowiejska 16/2, 81-356 Gdynia, Poland; contact the partner. You can withdraw each consent from either organisation by emailing biuro@profisailing.pl or biuro@bluehorizon.plrespectively. Data is used for marketing until consent is withdrawn; records of consent or withdrawal may be kept for the period needed to demonstrate compliance.
How the website works
The site provides information and files. There are no user accounts, account registration or online payments. Optional Google Analytics 4 measurement is used. Analytics tags load only after analytics consent. Google Ads measurement remains disabled. Your analytics choice is stored locally in your browser. The server may log technical data such as IP address, request time, resource URL and browser information to operate and secure the connection.
Email links open your email application. The Google map on the LAAX trip page loads only after you select a location. Google then receives connection data, including your IP address and browser information. You can close the map with the button below it. Other links to Google Maps and external services open their providers’ sites, which have their own privacy policies. Google Privacy Policy.
Optional visit measurement
The privacy panel lets you accept or reject analytics. Google Analytics 4 is used for visitor and form performance statistics. Google tags load only after analytics consent; forms, phone and email work regardless of your choice. Change consent through “Privacy settings” in the footer. Your category choices and decision date are stored locally in your browser for up to 180 days.
When measurement is enabled, Google may receive technical data and information about the page visited, campaign source, phone or email clicks, offer downloads and successful form submissions. Our measurement code does not send form content, names, email addresses, phone numbers, dates of birth or passport numbers. Form data goes only to the enquiry management system. Google’s practices are described in its privacy policy.
Recipients and retention
Website hosting and technical operation of forms and the CRM are provided by Step Change IT sp. z o.o. Data may be handled by this company for those purposes, by email and IT support providers, and disclosed to authorised public bodies. Data needed to organise travel may be shared with Blue Horizon sp. z o.o., our long-standing partner and organiser of the Polynesia sailing programme, and with carriers and travel providers as necessary for bookings. We keep correspondence until the matter is resolved, or for the applicable statutory period where needed for legal obligations or claims. Technical logs support server operation and security; retention details are available from the foundation.
Viewing an offer does not register you for an event.
Your rights
Subject to the GDPR, you may request access, rectification, erasure, restriction or portability of your data, and object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it for the future. You can complain to the President of the Polish Personal Data Protection Office: uodo.gov.pl.
The site does not use profiling or automated decisions about visitors.
Scope of this policy
This policy covers the website and contact with the foundation. Detailed rules for event participants are provided during application. Updates will be marked with a new date.
Legal basis: GDPR.