Privacy policy

Controller and contact

The owner of Nextrip and the controller of personal data is SYGNOWSKI Mariusz. For personal data matters and to exercise the rights below, you can use our contact form.

Scope of the website

We provide travel discovery and comparison features, including an optional TourRadar widget with affiliate links. Bookings and payments take place with offer providers. Our website does not provide user accounts or a newsletter.

Visiting the website

We use Cloudflare Pages to serve and protect the website. Technical connection data may include your IP address, request time, page address, and browser and device information. Processing enables us to provide and secure the service. Where based on our legitimate interest, the legal basis is Article 6(1)(f) GDPR.

Technical hosting data is separate from the optional analytics described below. We do not copy traffic logs into our analytics database. The provider’s retention of technical data depends on its type and operational and security needs. See the Cloudflare privacy policy.

Visitor analytics

Purpose and choice

With your consent, we analyse use of the service to understand interest in offers and improve navigation. The legal basis is consent (Article 6(1)(a) GDPR). Declining does not prevent you from using the website.

Data collected

We record the event receipt time, page path without URL parameters, selected clicks and tour identifiers, approximate country and screen-width category. A random identifier in sessionStorage connects events within one session. These data are pseudonymous: the absence of a name does not make them fully anonymous. Analytics do not contain IP addresses, form contents or search terms.

Retention and recipients

Our backend stores analytics in Cloudflare KV and automatically deletes them after 30 days. Cloudflare provides the infrastructure. Consent or refusal is stored in browser localStorage for up to 180 days; the sessionStorage identifier lasts for the tab session.

Changing your choice

Choose “Analytics settings” in the footer and then “Decline” to withdraw consent. This stops further collection and removes the local session identifier. Existing records expire after 30 days; you can also exercise the rights in this policy. Withdrawal does not affect the lawfulness of earlier processing.

Language / Currency / TourRadar / TUI

Cloudflare estimates the country from the connection to suggest a language. This suggestion alone does not store your country in our database. If you accept analytics, the approximate country is recorded with events as described in the analytics section. Your manual language and currency preferences are stored in browser localStorage; use “Reset preferences” in the footer to remove them. TourRadar offers load only after you enable them. The partner then receives technical connection data; affiliate links may attribute commission. Widget permission is not saved for subsequent visits. Partner details: TourRadar.

We import TUI offers on our server from the Tradedoubler feed. Images load from TUI servers or their content delivery network (CDN) only after you enable TUI offers; those providers then receive technical connection data. Offer links lead to TUI through a Tradedoubler affiliate redirect. This may attribute commission and involve third-party cookies under those providers’ policies. Check the current price and availability with TUI. Details: TUI privacy policy.

Contact form messages

We process the email address and message you provide, and optionally your name or company. We use this information to respond and handle your enquiry under Article 6(1)(f) GDPR — our interest in conducting correspondence. If your enquiry concerns steps before entering into a contract at your request, the basis is Article 6(1)(b) GDPR.

Providing data is voluntary. An email address and message are needed to send and handle an enquiry; your name or company is optional. Do not send identity documents, payment details or booking documentation.

We retain correspondence for as long as needed to handle the matter. Where it documents a contract, legal obligation or dispute, we retain necessary data for the legally required period or as needed to establish, exercise or defend legal claims. We determine the period according to the subject of the correspondence and applicable time limits.

Web3Forms (Web3Creative) processes the form and forwards messages to our mailbox. The provider processes form content and technical data and may share IP and email addresses with CleanTalk or Akismet for spam protection. We have set automatic deletion after 7 days for new submissions in Web3Forms. Copies in our mailbox follow the correspondence retention rules above. The provider operates from India and uses infrastructure in different regions. It provides for standard contractual clauses for EEA transfers. More information: Web3Forms privacy policy and the data processing agreement referenced there.

Recipients and processing abroad

Infrastructure, form and email providers may receive data as needed to deliver their services, as may competent authorities where required by law. Correspondence is delivered to a mailbox operated by Wirtualna Polska.

Cloudflare uses global infrastructure, which may involve processing outside the European Economic Area. Information on transfer safeguards is available in the Cloudflare data processing agreement. You can also ask the controller about safeguards for your data through the contact form.

Cookies and external links

Optional first-party analytics are described in the visitor analytics section. Provider security infrastructure may use technical mechanisms needed for security. External websites have their own privacy policies. We do not carry out profiling or automated decisions with legal or similarly significant effects.

Your rights

Subject to the GDPR, you have rights of access, rectification, erasure and restriction of processing. You may object to processing based on legitimate interests. Data portability applies to automated processing based on consent or a contract. Where processing relies on consent, you may withdraw it without affecting the lawfulness of earlier processing.

You may lodge a complaint with the President of the Polish Personal Data Protection Office. Please address requests about your data to the controller using the contact form.

Policy changes

When our processing practices change, we will update this policy and its date. Where a new purpose or data scope requires consent, we will ask before starting that processing.