• This Privacy Policy comes into effect on 14.02.2020
• The Privacy Policy sets out the rules of processing and protection of your personal data, collected in connection with provision of flight search, booking and purchase services to you through the indoorway.com website and its mobile version (the “Website”). The Privacy Policy also outlines the rules around collection and use of cookies and similar technologies.
• Indoorway sp. z o.o. with its registered seat in Lublin at Tomasza Zana 39A, 20-634 Lublin, registered in the register of entrepreneurs of the National Court Register maintained by the District Court for the city of Lublin-Wschód in Lublin, VI Commercial Division of the National Court Register, KRS 0000660847, NIP: 7123329089, REGON: 366435705 („Indoorway”) is the controller of your personal data and takes appropriate steps to ensure security of your data.
• By starting to use the Website or by your continued use of our services following the posting of new versions of this Privacy Policy (as applicable), you confirm that you have read and you agree to be bound by provisions of the Privacy Policy. This is our entire and exclusive Privacy Policy and it supersedes any earlier version. This Privacy Policy forms part of and should be read in conjunction with our Terms of Use and any additional applicable terms of our services.
• For important reasons, we may periodically be required to make changes to our Privacy Policy (for example if we substantially change the way our services or the Website’s functions or following legislative changes). We will notify you of these changes by e-mail (if we have it) and/or through a pop-up available upon logging onto your account, as well as by posting the modified Privacy Policy on the dedicated website: https://www.indoorway.com/privacy-policy. We recommend that you revisit this Privacy Policy regularly. The date of the last review of the Privacy Policy will always be indicated at the top of the document.

• Contact form. To ensure the possibility to contact you, we request that you provide the following personal data: your e-mail address and telephone number. Provision of e-mail address is mandatory – otherwise we will not be able to respond to you.
• Purpose: enabling you to contact Indoorway. Your personal data may also be used for the purpose of direct marketing of Indoorway services, on condition that you grant a separate consent to telephone and/or e-mail contact and you don’t object to the processing of your personal data for marketing purposes.
• Legal basis: Indoorway’s legitimate interest in in ensuring contact between you and Indoorway.
• Consent to phone and e-mail contact for marketing purposes. Your personal data is processed for marketing purposes based on Indoorway’s legitimate interest. However, to enable us contacting with you, it is necessary for us to obtain additional, voluntary consent. Such consent may be withdrawn by you at any point.
• How long do we process your data? Your personal data is processed for as long as you keep expressing your interest in our services, however, not longer than for 5 years from the date on which we last heard from you. We will also stop processing your data when you request that we delete your personal data, unless there are other applicable legal bases for the processing.
• Newsletter registration. Indoorway provides a newsletter service for its users and potential customers. We then process your personal data in the form of your e-mail address and your first and last name. Provision of e-mail address is mandatory – otherwise we will not be able to contact you.
• Purpose: to provide information about our services.
• Legal basis: Indoorway’s legitimate interest in providing information to users and potential clients and conducting direct marketing of its services.
• How long do we process your data? Your personal data is processed for as long as you keep expressing your interest in our services, however, no longer than (i) for 5 years from the last time we heard from you or (ii) until the date when you have canceled your subscription to the newsletter.
• Case study. For this purpose, we process your e-mail address and phone number. Provision of e-mail address is mandatory – otherwise we will not be able to respond to you.
• Purpose: sending case studies or other information materials of your choice.
• Legal basis: Indoorway's legitimate interest in responding to users' inquiries (i.e. requests for materials).
• How long do we process your data? Your personal data is processed for as long as you keep expressing your interest in our services, however, no longer than for 5 years from the last time we heard from you.
• Login data. Indoorway is responsible for creating accounts for users (Indoorway Customer's employees or associates) as part of the service provided. The following personal information is processed for each user: first names, surnames, email addresses and the name of the company that is our Customer. Provision of your personal data is mandatory – otherwise we will be unable to create a user account for you.
• Purpose: providing users with access to Indoorway services.
• Legal basis: Indoorway's legitimate interest in providing services to the Client.
• How long do you process your data? Your personal data is processed as long as you have your account with us, but no longer than 3 years from termination of your account.
• Your personal data may also be processed for the purpose of defence against claims or safeguarding our legal rights. In such an event, we process your data based on our legitimate interest in defending our claims, until conclusion of legal proceedings or expiry of statutory limitation periods, whichever happens first.
• Data collected through cookies and other technologies. Through the use of cookies and similar technologies, we collect information on the device you use, the type of browser, your IP address and other device IDs, as well as information on your interaction with the Website. You can find more information on the use of cookies and similar technologies in Section 5 below.
• Legal basis: Depending on the types of cookies, and technologies applied, the processing of personal data may be performed on the following bases: (i) Indoorway’s legitimate interest in improving Websites’ functionalities, providing you with the best user experience and direct marketing of our services; (ii) consent to processing of your personal data for marketing purposes, insofar as Indoorway may not act rely on legitimate interest – such consent can be withdrawn at any time, which will not affect legality of the processing performed prior to such withdrawal.
• How long do we process your data? Your personal data is processed for as long as necessary for the purposes listed above, i.e. 5 years.

You have the right to object to the processing of your data by us, when it is based on legitimate interest (in particular when processed for marketing purposes – in such cases we will immediately stop processing your personal data). You also have the right to request that we correct or delete your data, if you find out that certain information about you is incorrect or outdated.

If you file a request that we stop processing your data and delete it, we will do so unless there exists an important overriding legal interest (e.g. defense of claims or existence of a legal obligation to retain the data, for example for accounting or tax purposes) which will entitle us to keep your personal data for a longer period. You also have the right of access to your data, to request a copy of data that we process about you, as well as the right to data portability and to restriction of processing.

If you have any questions with regard to the processing of your data by us or if you wish to exercise your rights, you can contact us at [email protected] You also have the right to file a complaint to data protection authority.

We entrust the processing of your personal data to entities, which act on our behalf and solely based on our instructions (data processors). In particular we use data processors, whom we select carefully, to store your data on secure servers located within the territory of the EU. Appropriate safeguards are applied, in particular we take care to appoint only trusted and verified processors and we sign GDPR-compliant data processing agreements with them, in particular to enable processing of payments and booking of tickets.

We may also be obliged to share your personal data with competent authorities (in particular the police or prosecution service), if they approach us with such a request, provided that there exists an appropriate legal basis for making your personal data available to them (e.g. a court order).

In order to improve the operation of the Website, we use cookies, web beacons, device fingerprinting and similar technologies. We also make use of Google Analytics tools.

Cookies are text files containing small amounts of information which are downloaded to your personal computer, mobile or other device when you visit a website. Cookies are then sent back to the originating website on each subsequent visit, or to another website that recognizes that cookie. Cookies are useful because they allow a website to recognize a user’s device. Cookies do lots of different jobs, like letting you navigate between pages efficiently, remembering your preferences, and generally improve the user experience. They can also help to ensure that adverts you see online are more relevant to you and your interests. The following types of cookies are used on the Website:

• Persistent cookies - these cookies remain on a user’s device for the period of time specified in the cookie. They are activated each time that the user visits the website that created that particular cookie.
• Session cookies - these cookies allow website operators to link the actions of a user during a browser session. A browser session starts when a user opens the browser window and finishes when they close the browser window. Session cookies are created temporarily. Once you close the browser, all session cookies are deleted.
• Strictly necessary cookies - These cookies enable services you have specifically asked for. For those types of cookies that are strictly necessary, no consent is required. These cookies are essential in order to enable you to move around the Website and use its features, such as accessing secure areas of the Website. Without these cookies services you have asked for, like shopping baskets or e-billing, cannot be provided.
• Performance cookies - These cookies collect anonymous information on the pages visited. By using the Website, you agree that we can place these types of cookies on your device. These cookies collect information about how visitors use the Website, for instance which pages visitors go to most often, and if they get error messages from web pages. These cookies don’t collect information that identifies a visitor. All information these cookies collect is aggregated and therefore anonymous. It is only used to improve how the Website works.
• Functionality cookies - These cookies remember choices you make to improve your experience. By using the Website, you agree that we can place these types of cookies on your device. These cookies allow the Website to remember choices you make (such as your user name, language or the region you are in) and provide enhanced, more personal features. These cookies can also be used to remember changes you have made to text size, fonts and other parts of web pages that you can customize. They may also be used to provide services you have asked for such as watching a video or commenting on a blog. The information these cookies collect may be anonymized and they cannot track your browsing activity on other websites.
• Targeting or advertising cookies - These cookies collect information about your browsing habits in order to make advertising relevant to you and your interests. These cookies are used to deliver adverts more relevant to you and your interests. They are also used to limit the number of times you see an advertisement as well as help measure the effectiveness of the advertising campaign. They are usually placed by advertising networks with our permission. They remember that you have visited a website and this information is shared with other organizations such as advertisers. Quite often targeting or advertising cookies will be linked to site functionality provided by the other organization.

Web beacons (also known as pixel tags) are transparent image files used to monitor your journey around a single interact with the Website and its content.

Device fingerprinting is a technology which allows us to collect information about your device (what browser or operating system you use, plug-ins, time zone, other settings). We use this information to identify you and to ensure security of our website.

Cookies and similar technologies (web beacons, device fingerprinting) are used for statistical purposes, to adapt the website content, performance and structure to users’ individual preferences, to provide users with advertising content adapted to their preferences. Cookies and web beacons for ads targeting purposes can be linked to other online services, such as Facebook. Please note that cookies may collect personal information to enhance the site's functionality. Such data is stored in encrypted form and the access to them is limited. Cookies that are used by the third parties via the Website, including in particular the users of the website, are subject to their own privacy policy

Handling and use of 'cookies' and similar technologies is allowed automatically. However, these settings can be changed at any time. For details on how cookies are handled and used, see the settings of your web browser. You can learn more about cookies and similar technologies and check how to disable them for the browser you use by visiting the following website: http://www.allaboutcookies.org.

Google Analytics: we use third party trackers to let us know when users have visited the Website by “clicking-through” our sponsored advertising or content hosted on third party platforms. The Website uses Google Analytics & Firebase code to gather statistical information. Google Analytics sets cookies to help us accurately estimate the number of visitors to the Website and the volumes of usage of the Website. This is done to ensure that the Website is available when you want them and are fast. For more information on how Google Analytics processes this information, visit www.google.com/analytics.

Google Tag Manager is a tool which enables us to analyze the use of the Website. It allows us to monitor the way you interact with the Website by assigning a unique ID number to your device, which makes it possible for us to recognize your device upon your next visit.