Privacy policy

1. Data controller

The controller of personal data is Drake Factory Kamil Hajduk, 03-287 Warszawa, ul. Skarbka z Gór 15D/36.

For privacy and personal data matters, contact: prywatnosc@gorolazi.com.

2. Data we process

• e-mail address provided in the form;
• selected platform: Android, iOS or both;
• selected communication language;
• information about consents, their wording, version and date;
• sign-up source, e.g. landing page;
• technical server log data, such as connection date, IP address or its shortened/hashed form, browser and device information.

3. Purposes and legal bases

• handling early access sign-up — Article 6(1)(b) GDPR;
• sending organisational information about app availability and download invitations — Article 6(1)(b) GDPR;
• sending marketing information, updates about features, community, bonuses and badges — Article 6(1)(a) GDPR, the user’s consent;
• proving when and what consent was given — Article 6(1)(f) GDPR, the controller’s legitimate interest;
• ensuring website security and preventing abuse — Article 6(1)(f) GDPR.

4. Marketing consent

Marketing consent is voluntary and is not required to join early access.

The user may withdraw consent at any time by contacting the controller at prywatnosc@gorolazi.com or using an unsubscribe link if included in an e-mail.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

5. Data recipients

Data may be shared with technical service providers supporting the website and e-mail delivery, such as hosting, e-mail, database, server infrastructure and IT service providers.

Data is not sold to advertisers or data brokers.

6. Transfers outside the EEA

If the controller uses providers processing data outside the European Economic Area, such transfers will take place only using mechanisms provided by the GDPR, such as an adequacy decision or standard contractual clauses.

7. Data retention

• early access sign-up data will be stored until app availability information is sent, and then for the time necessary for support, accountability and potential claims;
• data processed based on marketing consent will be stored until the consent is withdrawn;
• information about consents may be stored longer if needed to demonstrate compliance;
• technical logs are stored for the time necessary to ensure website security and stability.

8. User rights

The user has the right to access data, rectify data, erase data, restrict processing, data portability, object to processing and withdraw consent at any time.

The user also has the right to lodge a complaint with the Polish Personal Data Protection Office.

9. Voluntary provision of data

Providing an e-mail address is voluntary, but necessary to receive early access information.

Lack of marketing consent does not prevent joining the Mountain Crew.

10. Cookies and analytics

The website may use technical mechanisms necessary for its proper operation. If analytics or marketing cookie-based tools are introduced in the future, this policy will be updated and, where required, a consent management mechanism will be displayed.

11. Changes to this privacy policy

This privacy policy may be updated due to website or app development, changes in technical providers or changes in law.

The current version is always available on this page.