Privacy Policy

Privacy Policy

Last updated: 16.10.2026

1. General information

This Privacy Policy explains how personal data is processed and how cookies and similar technologies are used in connection with the website https://www.tangovolver.pl/ (the “Website”).

This document has been prepared with reference to Regulation (EU) 2016/679 of the European Parliament and of the Council (the General Data Protection Regulation, or “GDPR”) and applicable legislation concerning privacy and the storage of information on users’ devices.

2. Data controller

The data controller is:

Gianpio Cappucci

Contact email: volvercasadetango@gmail.com

Postal address: Barska 26, 30-307 Kraków

The data controller determines the purposes and means of processing personal data in connection with the operation of the Website.

Before publication, the controller’s identity and the legal status under which the Website is operated must be established, including whether it is operated privately, as part of a business, or by another entity.

3. What personal data may be processed?

The data processed depends on how the Website is used and which features are available. Depending on the circumstances, this may include:

  • contact details, such as an email address and name, if provided in a message or contact form;
  • the contents of messages and other information voluntarily submitted by users;
  • technical data associated with accessing the Website, such as IP addresses, browser and device information, and technical events recorded in server logs;
  • information about Website usage if analytics tools, particularly Google Analytics, are enabled;
  • information stored in cookies or obtained through similar technologies, subject to the applicable settings and user consent;
  • data transmitted to external service providers when users access embedded media, maps, or social media features.

The data controller should not collect more personal data than is necessary for the specified purposes.

4. Purposes and legal bases for processing

Personal data may be processed for the following purposes where the relevant activity actually takes place.

a) Responding to messages and enquiries

Information submitted by email or through a contact form is processed to respond to enquiries and manage correspondence.

Legal basis: Article 6(1)(f) GDPR — the data controller’s legitimate interest in handling correspondence. Where processing is necessary to take steps at the data subject’s request before entering into a contract, Article 6(1)(b) GDPR may apply.

b) Operating and securing the Website

Technical data and server logs may be processed to maintain the Website, ensure security, diagnose errors, and prevent abuse.

Legal basis: Article 6(1)(f) GDPR, to the extent that the data controller has a legitimate interest in maintaining and securing the Website.

c) Statistics and traffic analysis

If Google Analytics is enabled, information about Website usage may be processed to analyse traffic, content popularity, and how visitors interact with the Website.

Legal basis for processing personal data: generally, user consent where required and relied upon for this analytics activity. Applicable rules governing consent to store or access information on a user’s device must also be observed.

Google Analytics should not be activated before obtaining any consent required by law.

d) Displaying embedded content and external features

If the Website contains embedded YouTube videos, Google Maps, externally hosted fonts, or social media widgets, the relevant providers may receive technical information about users, including IP addresses and information associated with loading or using the embedded feature.

Depending on the integration and configuration, processing may rely on user consent or another applicable legal basis. Technologies requiring prior consent must not be activated before that consent is obtained.

e) Establishing, exercising, or defending legal claims

Where necessary, personal data may be processed to establish, exercise, or defend legal claims.

Legal basis: Article 6(1)(f) GDPR — the data controller’s legitimate interest.

5. Is providing data mandatory?

Providing information in a message or contact form is voluntary, but certain information may be necessary for the data controller to respond to an enquiry.

Technical data may be processed as a consequence of connecting to the Website. Access to optional features, such as analytics or certain embedded content, may depend on the user’s consent.

6. Recipients of personal data

Where necessary for the purposes described above, personal data may be disclosed to the following categories of recipients:

  • hosting and technical infrastructure providers, including LH.pl, to the extent required by the service used;
  • Google in connection with Google Analytics, YouTube, Google Maps, or Google Fonts, where the relevant services are actually enabled;
  • social media operators whose features or content are embedded on the Website;
  • security, backup, or other technical service providers, where used;
  • competent public authorities where disclosure is required by law.

The actual recipients must be verified against the services and integrations enabled on the Website.

7. Transfers of personal data outside the European Economic Area

Some external service providers may process personal data outside the European Economic Area (EEA), or may use subcontractors who can access data from third countries.

Where such transfers take place, they must comply with Chapter V of the GDPR. Depending on the circumstances, this may require an adequacy decision or appropriate safeguards, such as Standard Contractual Clauses.

Before publication, the transfer arrangements of the providers actually used must be verified. The Website should not claim that transfers either do or do not occur without checking the relevant service configurations and contractual terms.

8. Data retention periods

Personal data is retained for no longer than necessary for the purpose for which it was collected, subject to applicable legal requirements.

In particular:

  • correspondence is retained for as long as necessary to handle an enquiry and afterwards for a period justified by the need to preserve a record of communications or defend against claims;
  • server logs are retained according to the hosting provider’s retention policy and technical configuration;
  • analytics data is retained according to the Google Analytics configuration and applicable consent and retention settings;
  • cookie data is retained for the period specified for the relevant cookie, or until it is deleted by the user or consent is withdrawn, where applicable;
  • data relating to legal claims is retained until the relevant limitation periods expire or the relevant proceedings conclude.

The specific retention periods must be established and completed based on the actual settings of the services used.

9. Cookies and similar technologies

The Website may use cookies and similar technologies to ensure its proper operation, remember preferences, analyse traffic, or display external content.

Depending on the configuration, these may include:

  • Strictly necessary cookies, required for the Website to function or to provide a feature explicitly requested by the user;
  • Analytics cookies, used to measure and analyse traffic, for example through Google Analytics;
  • Marketing cookies or cookies associated with external services, where relevant features are enabled;
  • Technologies used by embedded content providers, such as YouTube, Google Maps, or social media services.

The storage of or access to information on a user’s device is subject to applicable law. Where prior consent is required, it must be obtained before the relevant technology is activated. Including information about cookies in this Privacy Policy does not, by itself, constitute consent.

Users should be able to manage their consent, including withdrawing it where required. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Users can also manage cookies through their browser settings. Disabling certain cookies may affect some Website features.

10. External services

The Website may use the following services where they have actually been configured.

Google Analytics — an analytics tool used to measure traffic and understand how visitors use the Website. The provider is Google. Consent settings, retention periods, and any data transfers must be verified.

YouTube — embedded videos may establish connections to YouTube or Google servers. Depending on the embedding method and the user’s settings, the provider may process technical data and information relating to video playback.

Google Maps — embedded maps may transmit technical information, including IP addresses, to the provider when the map is loaded or used.

Google Fonts — if fonts are loaded directly from Google’s servers, the browser may connect to Google’s infrastructure. If fonts are hosted locally on the Website’s server, the data transmission may differ.

Social media — buttons, widgets, and embedded content may allow the relevant service providers to receive information about users. The scope depends on the platform and implementation.

Each provider processes data in accordance with its own privacy terms. Before publication, confirm which integrations are actually enabled and add links to the relevant provider privacy notices.

11. Data subject rights

Under the GDPR, and where applicable to the circumstances, users have the following rights:

  • the right to access their personal data;
  • the right to obtain a copy of their data;
  • the right to rectification;
  • the right to erasure;
  • the right to restriction of processing;
  • the right to data portability, where the statutory conditions are met;
  • the right to object to processing based on legitimate interests;
  • the right to withdraw consent at any time where processing is based on consent;
  • the right to lodge a complaint with the competent supervisory authority.

In Poland, the supervisory authority is the President of the Personal Data Protection Office (UODO). Information about submitting a complaint is available at https://uodo.gov.pl/.

To exercise these rights, users may contact the data controller at volvercasadetango@gmail.com.

The availability of certain rights depends on the legal basis and circumstances of processing. Where there are reasonable doubts about the identity of the person making a request, the data controller may request information necessary to verify that identity.

12. Data security

The data controller implements appropriate technical and organisational measures, taking into account the nature of the personal data and the risks involved, to protect it against unauthorised access, loss, alteration, or disclosure.

The specific safeguards in place depend on the Website’s configuration, hosting arrangements, and services used.

13. Links to other websites

The Website may contain links to external websites. Once a user visits an external website, its operator is responsible for its own data processing and privacy practices. Users are encouraged to review the privacy policy of each external website they visit.

14. Changes to this Privacy Policy

This Privacy Policy may be updated when the Website’s functionality, services, applicable law, or data processing practices change.

The current version will be published on the Website together with the date of the latest update.

15. Contact

For questions about privacy or the processing of personal data, please contact the data controller:

Email: volvercasadetango@gmail.com

Suggested text: Our website address is: https://www.tangovolver.pl.