The controller of your personal data is Dynamite Dev. Mariusz Przybylski, Folwarczna 40, 91-487 Łódź, Łódzkie Voivodeship, Poland, VAT ID (NIP): 6681806982, REGON: 100987658 - the operator of the Today in Wrocław portal, available at dziswewroclawiu.pl.
For matters relating to the protection of personal data, you may contact us at the following e-mail address: kontakt@dziswewroclawiu.pl
Data provided upon registration:
Data obtained when logging in via Google / Facebook (OAuth):
Data generated while using the portal:
Data in a tour guide profile (Tour guides section):
Tour guide profile data is publicly visible on the portal, including the automatically translated English version, and regular tours also appear in the event calendar, the newsletter and the portal's social media posts.
Order and invoice data:
Technical data (collected automatically):
| Purpose | Legal basis (GDPR) |
|---|---|
| Creating and maintaining a user account | Art. 6(1)(b) - performance of a contract |
| Logging in via Google / Facebook | Art. 6(1)(b) - performance of a contract |
| Publishing comments, ratings, and likes | Art. 6(1)(b) - performance of a contract |
| Adding events by users | Art. 6(1)(b) - performance of a contract |
| Publishing a tour guide profile and its tours (on the portal, in the event calendar, the newsletter and the portal's social media posts) and automatically translating the profile into English | Art. 6(1)(b) GDPR - performance of a contract |
| Verifying a tour guide's qualifications and sending reminders before the publication period ends | Art. 6(1)(b) GDPR - performance of a contract |
| Handling the contact form, change reports and enquiries to authors of classified ads | Art. 6(1)(f) GDPR - legitimate interest (replying to messages) |
| Measuring sales of paid services in Google Analytics 4 (browser identifier saved with the order, only after consent to analytics cookies) | Art. 6(1)(a) GDPR - consent |
| Content moderation and portal security | Art. 6(1)(f) - legitimate interest |
| Visit statistics (Google Analytics 4) - analytics cookies | Art. 6(1)(a) - consent (consent banner, withdrawable at any time) |
| Serving ads (Google AdSense) - advertising cookies | Art. 6(1)(a) - consent (consent banner, withdrawable at any time) |
| Improvement of service quality based on data that does not require cookies | Art. 6(1)(f) - legitimate interest |
| Handling orders and payments for paid services (classified ads, business listings, tour guide profiles, advertising) | Art. 6(1)(b) - performance of a contract |
| Issuing invoices and storing accounting documents | Art. 6(1)(c) - legal obligation (accounting and tax law) |
| Sending the newsletter | Art. 6(1)(a) - consent (confirmed by a link in an e-mail, withdrawable with one click) |
| E-mail communication (account verification, password reset) | Art. 6(1)(b) - performance of a contract |
| Compliance with legal obligations | Art. 6(1)(c) - legal obligation |
The portal uses cookies - small text files stored in the browser. We distinguish:
| Type | Name / description | Lifetime |
|---|---|---|
| Session | Session cookie - maintains logged-in status | Until browser is closed |
| Remember me | Persistent cookie - if "Remember me" was selected | 30 days |
| CSRF | Token protecting forms against attacks | Session |
| Preferences | Language, likes (session storage) | Session / persistent |
| Consent | dww_consent - your choice from the consent banner (browser local storage, not a cookie) |
Until browser data is cleared |
| Security | _GRECAPTCHA - Google reCAPTCHA, tells humans from bots in forms |
6 months |
| Analytics (with consent only) | _ga, _ga_* - Google Analytics 4: visit statistics, most-read content |
Up to 24 months |
| Advertising (with consent only) | Google AdSense / DoubleClick - serving ads and measuring their performance | Up to 24 months |
On your first visit we show a consent banner. Until you give consent, analytics and advertising cookies are disabled - we use Google Consent Mode v2, where the default state is denial and the advertising script is not loaded at all. Necessary cookies (session, CSRF, security) always work, because the portal cannot function without them, and they do not require consent.
You can change or withdraw your choice at any time - the "Cookie settings" link in the footer reopens the same banner. You can also delete cookies in your browser settings; disabling necessary cookies may prevent the use of certain portal features (e.g. maintaining a login session).
In connection with the operation of the portal, we use the services of external providers:
| Provider | Purpose | Privacy policy |
|---|---|---|
| Google LLC | Login via Google (OAuth 2.0), Google Places API (data on places and restaurants), Google reCAPTCHA v3 (protecting forms against bots) | policies.google.com/privacy |
| Google Analytics 4 (with consent only) | Portal visit statistics - anonymised, without profiling for advertising purposes | policies.google.com/privacy |
| Google AdSense (with consent only) | Serving ads that fund the portal and measuring their performance | policies.google.com/technologies/ads |
| mBank S.A. (PayNow) | Handling online payments for paid listings and advertising services. The operator receives the data needed to settle the transaction (amount, order identifier, name, e-mail address). We do not store payment card data - the entire payment process takes place on the operator's side. | paynow.pl |
| Anthropic PBC | Automatic translation and categorisation of content published on the portal (descriptions of events, attractions, articles, and tour guide profiles and their tours). We only send content intended for publication; for tour guide profiles this includes the guide's name or business name and the description they provided. Contact details, account data and order data are not sent. | anthropic.com/legal/privacy |
| Meta Platforms (Facebook) | Facebook login (OAuth) and publishing the portal's posts on Facebook and Instagram (event announcements, including tour guides' tours with their name or business name) | facebook.com/privacy/policy |
| Bilety24 | Displaying events and links for purchasing tickets (public data only) | bilety24.pl |
We do not sell or share your personal data with third parties for marketing purposes.
Google LLC, Meta Platforms and Anthropic PBC are based in the United States. Data is transferred on the basis of standard contractual clauses approved by the European Commission and - for providers participating in the EU-U.S. Data Privacy Framework - on the basis of a European Commission adequacy decision.
Under the GDPR, you have the following rights:
To exercise the above rights, please contact us at: kontakt@dziswewroclawiu.pl
If you believe that we are processing your data unlawfully, you have the right to lodge a complaint with the President of the Personal Data Protection Office (uodo.gov.pl).
We apply technical and organisational measures ensuring an appropriate level of security:
The Today in Wrocław portal is not directed at persons under 13 years of age. We do not knowingly collect personal data of children below this age. If you believe that such data has been collected, please contact us - we will remove it without delay.
If you have any questions regarding this privacy policy, please contact us:
We reserve the right to amend this privacy policy. Users will be informed of any significant changes through a notice on the website or by e-mail. The date of the last update is always displayed at the top of this page.
