Privacy Policy
What data we collect, why, and how we protect it. No tracking, no selling of data.
In short: we only collect the data you give us yourself (contact form, newsletter, messages), use it solely to reply and organise journeys, never sell it and never profile you. The site uses only essential browser storage and a few external services described below.
1. Data controller
The controller of your personal data is M&M Marcin Marcińczak (trading as Art Bali Travel), ul. Widokowa 8, 78-111 Ustronie Morskie, Poland, VAT/NIP 6711639780; contact person: Malwina Marcińczak, e-mail: kontakt@artbalitravel.pl, phone +48 514 895 277. For any matter concerning personal data, write to kontakt@artbalitravel.pl.
2. What data we collect and why
| Situation | Data | Purpose and legal basis | Retention |
|---|---|---|---|
| Contact form / journey enquiry | name, e-mail, chosen journey, message | replying to your enquiry and preparing an offer — Art. 6(1)(b) GDPR (pre-contractual steps) and Art. 6(1)(f) (our legitimate interest in replying to people who write to us) | until the conversation ends, max. 12 months; if an agreement is concluded — for its duration plus the limitation period for claims |
| Journey agreement | agreement data (incl. passport details, date of birth, contact details, health information relevant to safety — only what you provide) | performance of the agreement — Art. 6(1)(b); tax and accounting obligations — Art. 6(1)(c); health data — Art. 9(2)(a) (your explicit consent) | for the duration of the agreement and then as required by law (up to 6 years) |
| Newsletter | e-mail address | sending news about journey dates and blog posts — Art. 6(1)(a) (consent) | until you unsubscribe |
| Contact via WhatsApp, Messenger, phone, e-mail | data you share in the conversation | replying to your message — Art. 6(1)(f) | until the matter is closed, max. 12 months |
| Photos and videos from journeys | your image | publication on the Website and social media — Art. 6(1)(a) (separate consent) | until consent is withdrawn |
Providing data is voluntary, but without it we cannot reply to your enquiry or organise a journey.
3. Who we share data with
- FormSubmit (formsubmit.co) — delivery of website form submissions to our mailbox;
- LH.pl — website and e-mail hosting for kontakt@artbalitravel.pl (servers in Poland);
- Vercel Inc. — auxiliary infrastructure (staging version of the site);
- hotels, carriers, guides and local partners in Indonesia — only data required for bookings (name, passport, date of birth) when you take part in a journey;
- accounting office and insurer — where required by the agreement or law.
Some providers (FormSubmit, Vercel, Google, Meta) may process data outside the European Economic Area, based on the European Commission's standard contractual clauses or an adequacy decision (Data Privacy Framework).
4. Cookies and browser storage
The site uses only essential browser storage (localStorage) that does not track you and is not used for advertising:
| Name | Purpose | Duration |
|---|---|---|
| abt_cookie | remembers your choice in the privacy banner | until you clear browser data |
| abt_music | remembers whether you turned on background music and which track | until you clear browser data |
We do not use Google Analytics, advertising pixels or other tracking tools. If we add visitor statistics in future, we will update this policy and ask for consent in the banner.
5. External services on the site
- Google Fonts — typefaces loaded from Google servers (your device's IP address is transmitted);
- YouTube (privacy-enhanced mode, youtube-nocookie.com) — background video on the home page; YouTube sets no cookies until you interact with the player;
- Google Maps — links to maps in place descriptions (opened in a new tab, outside our site);
- WhatsApp, Messenger, Facebook, Instagram — buttons leading to external services; their privacy policies apply once you click.
6. Your rights
You have the right at any time to access your data and obtain a copy, to rectification, erasure, restriction of processing, data portability, to object (where we rely on legitimate interest) and to withdraw consent — without affecting the lawfulness of processing before withdrawal. Just e-mail kontakt@artbalitravel.pl.
You may also lodge a complaint with the President of the Polish Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl) or your local supervisory authority.
7. Security
The whole site runs over an encrypted HTTPS connection. Only the controller has access to the mailbox and form data. Form data is not stored on the website server — it goes directly to our e-mail.
8. Changes
This policy applies from 3 September 2026. Changes are published on this page with a new update date.