Privacy Policy

1. This Privacy Policy explains how RALLY TRAVEL SP. Z O. O., ul. Prymasa Stefana Wyszyńskiego 85, 41-940 Piekary Śląskie, Poland; KRS 0001184730, NIP 4980279762, REGON 542268361 (the “Controller”) processes personal data when users visit https://rally.travel and https://book.rally.travel or use services connected with off-road trainings, GPX route preparation and Quad, UTV/SSV and Enduro trips.

2. The document explains what data we collect, on what legal basis, for how long, to whom it may be disclosed and what rights users have under the GDPR.

1. Personal data means any information relating to an identified or identifiable natural person. Processing means any operation performed on personal data, including collection, storage, use, disclosure, restriction or erasure. User means any person using Rally Travel services or visiting our websites.

1. We may process identification, contact, booking, payment, travel preference and technical data, including IP address, device data, cookies and messages sent through forms, e-mail, phone or chat.

2. Some data is necessary to conclude or perform a contract or to meet legal duties of a travel organiser.

1. Data may be shared with IT, hosting, booking, CRM, mailing, analytics, payment, marketing, legal and accounting providers, as well as local guides, transport companies and accommodation partners where required for a trip.

2. Transfers outside the EEA take place only with safeguards required by the GDPR.

1. Data is collected through contact and booking forms, newsletter sign-ups, website activity, cookies and tracking tools, e-mail, phone calls, events, promotions and customer surveys.

1. Data is kept only as long as necessary. Contract and accounting data may usually be stored for 5 years, marketing data until consent is withdrawn or objection is raised, correspondence and complaint data generally up to 3 years, and claims data until limitation periods expire.

1. Users have the right to complain to the competent supervisory authority, access data, rectify it, erase it, restrict processing, receive data in a portable format, object to processing and withdraw consent at any time.

1. The website uses necessary, functional, analytical, marketing and performance cookies. Cookie settings can be changed in the browser. More information is available in the Cookie Policy.

1. Rally Travel uses technical and organisational safeguards, including SSL/TLS encryption, access control, backups, incident procedures, strong passwords, multi-factor authentication and regular security checks.

1. The Controller does not make solely automated decisions producing legal or similarly significant effects for users and does not use profiling within the meaning of Article 22 GDPR.

1. The Rally Travel website may contain links to external websites. Rally Travel is not responsible for their content or privacy practices.

1. The Controller may update this Privacy Policy. The current version is always available on the website.

1. Questions can be sent to office@rally.travel.