Legal

Privacy Policy

This page explains what personal data we collect on Niceaway.com, why we collect it, how long we keep it and what rights you have.

Effective from 24 October 2026. See also: Cookie Policy
1

Who we are

The controller of your personal data is ALVARO Jesica Alvaro, ul. Kminkowa 156, 62-064 Plewiska-Poznań, Poland, tax ID (NIP): 627 262 2807, REGON: 361 883 209 ("we", "us"), the publisher of Niceaway.com.

If you have any questions about your personal data, email us at hello@niceaway.com or write to the address above.

We process personal data in line with the EU General Data Protection Regulation (GDPR) and Polish law, including the Electronic Communications Law of 12 July 2024, which covers cookies.

2

What we use your data for

What we collect depends on how you use the site. You can read our articles without giving us any personal data.

PurposeDataLegal basisHow long
Replying to your email or a message sent through the contact formyour name, email address and the content of your messageour legitimate interest in answering messages (Art. 6(1)(f) GDPR)until the matter is closed, then until any possible claims expire
Sending the newsletter and materials you request (e.g. our media kit)email address, name and company name (if you give them), opens and clicks in our emailsyour consent (Art. 6(1)(a) GDPR)until you withdraw your consent; after that we keep a record that you unsubscribed so we don't email you again
Advertising partnerships with brandscontact details of company representatives, company detailsperformance of a contract (Art. 6(1)(b) GDPR) and our legitimate interest (Art. 6(1)(f) GDPR)for the duration of the partnership, then until any possible claims expire
Accounting and taxdetails on invoices and accounting recordslegal obligation (Art. 6(1)(c) GDPR)5 years from the end of the year in which the tax payment was due
Site statistics, testing new page versions and showing adscookie identifiers, IP address, device and browser information, how you use the siteyour consent given in the cookie banner (Art. 6(1)(a) GDPR together with Art. 399 of the Polish Electronic Communications Law)until you withdraw consent or the cookies expire (see the Cookie Policy)
Basic, anonymous site statistics (Cloudflare Web Analytics)the page you visit and the page you came from, browser, operating system and device type, country, page load time; the tool does not use cookies or any other identifiers that could recognise you on later visitslegitimate interest, i.e. measuring which content is popular and improving the site (Art. 6(1)(f) GDPR)we only receive aggregated statistics that cannot identify you
Site security and technical maintenanceIP address, server log dataour legitimate interest in protecting the site from attacks (Art. 6(1)(f) GDPR)usually a few weeks, longer only if the data is needed to investigate an incident

Giving us your data is voluntary. Without an email address, however, we can't reply to you or send you the newsletter.

3

Who we share data with

We never sell personal data. We share it only with service providers who help us run the site, and only as far as they need it to do their job:

  • our hosting provider, whose servers run the site,
  • GetResponse S.A. (newsletter and sign-up forms),
  • Google Ireland Limited (Google Workspace email, Google Analytics, Google AdSense and the consent management tool),
  • Booking.com, Travelpayouts and GetYourGuide (booking widgets and affiliate links),
  • Nelio Software (A/B testing of page versions),
  • Cloudflare, Inc. (anonymous site statistics without cookies),
  • our accountants and IT service providers,
  • public authorities, where the law requires it.

Google's advertising partners that show ads on the site process data based on the consent you give in the cookie banner. You can see the full list in the privacy settings.

4

Transfers outside the EEA

Some providers (e.g. Google and Cloudflare) may also process data outside the European Economic Area, including in the US. These transfers rely on a European Commission adequacy decision (including the EU-US Data Privacy Framework) or on standard contractual clauses approved by the European Commission. You can request a copy of these safeguards by emailing hello@niceaway.com.

5

Your rights

You have the right to:

  • access your data and get a copy of it,
  • have your data corrected,
  • have your data deleted,
  • restrict how we process it,
  • data portability,
  • object to processing based on our legitimate interest,
  • withdraw your consent at any time, without affecting the lawfulness of processing before you withdrew it,
  • lodge a complaint with a data protection authority: in Poland, the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw), or the authority in the country where you live.

You can unsubscribe from the newsletter with one click, using the link at the bottom of every email. To use any of your other rights, email us at hello@niceaway.com. We'll reply without undue delay and within one month at the latest.

6

Profiling and ads

If you consent, Google and its partners may show you ads personalized to your interests. We don't make any decisions based solely on automated processing that have legal effects for you. You can change your consent at any time in the privacy settings.

8

How we protect your data

We use technical and organizational measures appropriate to the risk, including an encrypted connection (HTTPS), restricted access to the site's admin panel, protection against attacks and regular backups.

9

Changes to this policy

We update this policy when the law or the tools we use change. The current version is always on this page, and the date at the top shows when it took effect.

Have a question about your data? Get in touch!

Contact us