TRIPERINO SERVICE PRIVACY POLICY
Effective Date: November 3, 2025
§ 1. GENERAL PROVISIONS
This Privacy Policy sets out the rules for processing and protecting personal data of users of the Triperino service (www.triperino.pl).
The administrator of personal data is Maksymilian Blok operating under the business name Codemaxi, NIP: 5911713026, with registered office at ul. Akacjowa 21, Grabowo Kościerskie.
This Policy has been prepared in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).
§ 2. TYPES OF DATA PROCESSED
As part of the Service's operation, we process the following categories of personal data:
- registration data: email address, username (login), password (in encrypted form),
- profile data: travel preferences, favorite artists, sports teams, other user preferences,
- behavioral data: information about visited places, places marked as unwanted, search history,
- location data: information about the user's geographical location (with consent),
- technical data: IP address, browser type, operating system, data from cookies,
- user-generated content: reviews, comments, photos, opinions.
§ 3. PURPOSES AND LEGAL BASIS FOR PROCESSING
We process personal data for the following purposes and on the following legal bases:
a) Provision of Service (Art. 6(1)(b) GDPR):
- creating and managing user accounts,
- enabling use of Service features,
- personalization of content and recommendations,
- "fast trip" feature and trip planning.
b) Legitimate interest (Art. 6(1)(f) GDPR):
- traffic and user behavior analysis for statistical purposes,
- ensuring Service security,
- development and improvement of Service functionality,
- moderation of user-generated content.
c) User consent (Art. 6(1)(a) GDPR):
- processing of location data,
- sending newsletters and marketing notifications,
- advanced profiling and personalization.
§ 4. SHARING OF PERSONAL DATA
Personal data may be shared with the following categories of recipients:
- a) IT and hosting service providers (to the extent necessary for the Service's operation),
- b) Google LLC (as part of using Google Analytics and Google Tag Manager),
- c) public authorities based on applicable legal provisions.
We do not sell or share personal data with third parties for marketing purposes without the user's explicit consent.
Data is processed on servers located in the European Union.
§ 5. DATA RETENTION PERIOD
We retain personal data for the period necessary to achieve the purposes for which it was collected:
- a) user account data - until the account is deleted by the user,
- b) behavioral data and preferences - until consent is withdrawn or the account is deleted,
- c) technical and analytical data - maximum 26 months (in accordance with Google Analytics policy),
- d) user-generated content - may be retained after account deletion for moderation purposes.
After the retention period expires, data is irreversibly deleted or anonymized.
§ 6. COOKIES AND TRACKING TECHNOLOGIES
The Service uses cookies and other tracking technologies for the following purposes:
- a) ensuring proper Service operation,
- b) remembering user preferences,
- c) traffic analysis using Google Analytics,
- d) tag management using Google Tag Manager.
Users can manage cookies through their browser settings.
Disabling cookies may affect Service functionality.
§ 7. USER RIGHTS
Users have the right to:
- a) access their personal data,
- b) rectify inaccurate data,
- c) deletion of data ("right to be forgotten"),
- d) restriction of processing,
- e) data portability,
- f) object to processing,
- g) withdraw consent at any time,
- h) lodge a complaint with the supervisory authority (President of the Personal Data Protection Office).
To exercise the above rights, please contact the Administrator.
§ 8. DATA SECURITY
We apply appropriate technical and organizational measures to protect personal data against unauthorized access, loss or destruction.
User passwords are stored in encrypted form.
Only authorized persons have access to personal data.
§ 9. CONTACT
For matters related to personal data protection, you can contact the Administrator:
Maksymilian Blok
Codemaxi
ul. Akacjowa 21, Grabowo Kościerskie
NIP: 5911713026
§ 10. FINAL PROVISIONS
This Privacy Policy may be updated. We will notify users of significant changes with appropriate advance notice.
The Policy enters into force on the date of its publication in the Service.