Privacy Policy
Version 1.0, effective from 1 September 2026
Short and to the point: who processes your data, why, how long we keep it, who we share it with, and what you can do about it. We cover cookies and tools that only run after your consent in a separate section.
1Data controller
The data controller is NEOGRAFIKO spółka z ograniczoną odpowiedzialnością (NEOGRAFIKO sp. z o.o.), Osiedle 60-lecia Odzyskania Niepodległości Polski 14/4, 83-200 Starogard Gdański, Polska.
Registration details: KRS 0000920900 (registry court: Sąd Rejonowy Gdańsk-Północ w Gdańsku, VII Wydział Gospodarczy Krajowego Rejestru Sądowego), NIP 5922285976, REGON 389905136.
The company operates under the brand Baltic Experience.
Contact for data protection matters: email [email protected], phone +48 888 797 988, correspondence address Osiedle 60-lecia Odzyskania Niepodległości Polski 14/4, 83-200 Starogard Gdański.
We have not appointed a data protection officer. Data matters are handled by the company’s management board at the address above.
2What data we collect
Data you provide in forms on the site:
- first and last name,
- email address,
- phone number,
- Instagram handle, if you give it,
- invoicing details: company name, address, tax ID,
- the content of your message and enquiry details (date, number of people, chosen cruise or standard),
- files attached to a partnership enquiry.
For online orders, we also collect: order number, selected items, amount, payment status and the payment identifier assigned by the operator, plus the content of your consents together with the version of the terms and conditions you accepted.
Technical data collected automatically: IP address, browser type and version, operating system, approximate location at city level, referral source, and on-site events. This data reaches analytics and advertising tools only after you consent in the cookie banner.
We do not collect special categories of data. If, before departure, you give us health information relevant to safety on board, we process it only on the basis of your consent and only for that purpose.
We do not collect or store payment card details or bank login data. You provide these directly to the payment operator.
3Purposes and legal basis
Responding to a form enquiry, preparing an offer and agreeing a date: Article 6(1)(b) GDPR, meaning steps taken at your request before entering into a contract, and Article 6(1)(f) GDPR, our legitimate interest in maintaining correspondence.
Entering into and performing the contract: handling the order, reserving a place, organisational contact, and delivering the service: Article 6(1)(b) GDPR.
Billing, invoicing, accounting, and tax obligations: Article 6(1)(c) GDPR, a legal obligation on the controller.
Marketing: information on availability, prices, and upcoming trips, as well as advertising through external tools: Article 6(1)(a) GDPR, your consent. Our own marketing to existing customers is based on Article 6(1)(f) GDPR.
Use of your image in brand materials: Article 6(1)(a) GDPR, a separate, voluntary consent.
Establishing, pursuing, and defending legal claims: Article 6(1)(f) GDPR.
Site security, fraud prevention, and infrastructure maintenance: Article 6(1)(f) GDPR.
Providing your data is voluntary, but without it we cannot respond to your enquiry, accept your order, or deliver the service.
4Who we share data with
Your data may reach trusted parties who process it on our behalf:
- our hosting and server infrastructure provider, with servers located in the European Union,
- our transactional email provider, which sends order confirmations and notifications,
- the accounting office handling invoicing and settlements,
- yacht operators and partners involved in delivering the trip, to the extent needed to run it,
- analytics and advertising tool providers, activated only after consent: Google, Meta, TikTok.
The payment operator mElements S.A. (Paynow) processes transaction-related data as a separate controller, under its own documents and for its own purposes.
We may disclose data to public authorities where required by law.
Some analytics and advertising tool providers operate outside the European Economic Area. Any transfer then relies on standard contractual clauses or an adequacy decision of the European Commission, and only takes place once you have consented to those tools.
We do not sell data and do not share it for other companies’ marketing purposes.
5How long we keep data
Form enquiries: up to 12 months from the last contact, unless they lead to a contract.
Orders, invoices, and settlement documents: 6 years, counted from the end of the tax year in which the tax obligation arose.
Data processed on the basis of consent, including marketing and image-rights consents: until consent is withdrawn.
Data needed to establish, pursue, or defend claims: until the limitation period expires.
Data in analytics and advertising tools: according to the retention periods set in those tools, typically up to 14 months from the last activity.
Partnership enquiries with attachments: until the process is closed, unless you consent to longer storage.
6Your rights
In connection with the processing of your data, you have the right to:
- access your data and receive a copy of it,
- rectify inaccurate data and complete incomplete data,
- have your data erased,
- restrict processing,
- port data processed on the basis of consent or a contract,
- object to processing based on legitimate interest, including direct marketing,
- withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.
Submit a request by email to [email protected] or in writing to Osiedle 60-lecia Odzyskania Niepodległości Polski 14/4, 83-200 Starogard Gdański. We respond within a month. In complex cases we may extend this by a further two months, explaining the reasons.
You also have the right to lodge a complaint with the supervisory authority: the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland.
We do not make decisions about you based solely on automated processing, including profiling, that would produce legal effects or similarly significantly affect you.
8Changes to this policy
We update this policy when we change the scope of our services, the tools we use, or when the law requires it.
The current version is always available on the site. The version number and effective date are shown at the top of the document.
Questions about this policy: [email protected].
Masz pytanie do tego dokumentu?
Napisz albo zadzwoń przed zakupem. Odpowiadamy tym samym językiem, którym napisaliśmy ten dokument.
NEOGRAFIKO spółka z ograniczoną odpowiedzialnością, Osiedle 60-lecia Odzyskania Niepodległości Polski 14/4, 83-200 Starogard Gdański
Pozostałe dokumenty

