PRIVACY AND COOKIES POLICY
PRIVACY AND COOKIES POLICY
of the vipdrivers.pl website
Last updated: 17 September 2026
1. General provisions
This Privacy and Cookies Policy sets out the rules governing the processing of personal data of users of the website available at https://vipdrivers.pl/, as well as the rules governing the use of cookies and similar technologies.
This document has been drawn up with particular reference to:
- Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (‘GDPR’);
- the applicable provisions of Polish law concerning the protection of personal data and privacy;
- the regulations governing the provision of electronic services and the use of information stored on users’ devices.
The Controller takes particular care to ensure that personal data is processed lawfully, transparently, securely and in a manner appropriate to the purposes for which it is processed.
2. Data Controller
The controller of personal data processed in connection with the use of the vipdrivers.pl website, contact with VIP Drivers and the use of the services offered is:
VIP Drivers sp. z o.o.
ul. Franciszka Klimczaka 5/71
02-797 Warsaw, Poland
registered in the Register of Entrepreneurs of the National Court Register under number:
KRS: 0001103228
NIP: 9512595426
REGON: 528495151
Email: biuro@vipdrivers.pl
Telephone: +48 508 117 392
hereinafter referred to as the ‘Controller’, ‘VIP Drivers’, ‘the Company’ or ‘the Service Provider’.
For all matters relating to the protection of personal data, please contact the Controller at:
3. Scope of Application of the Privacy Policy
This Privacy Policy applies to users of the vipdrivers.pl website, in particular those who:
- visit the website;
- use its features;
- contact VIP Drivers;
- submit enquiries;
- use the forms available on the website;
- use VIP Drivers’ services;
- enter into contracts with VIP Drivers;
- take steps to enter into a contract;
- contact the Controller by telephone or email;
- submit complaints or other requests;
- use the materials and content available on the website.
This Policy also applies to the data of contact persons representing business customers, to the extent that such data is processed by VIP Drivers.
4. What personal data may we process?
Depending on how the website and VIP Drivers’ services are used, the Controller may process, in particular:
Identification data
- first name and surname;
- company name;
- position or role – where necessary to fulfil a specific purpose;
- business details.
Contact details
- email address;
- telephone number;
- postal address;
- other contact details provided voluntarily by the user.
Data relating to enquiries or services
- message content;
- information contained in the contact form;
- information relating to a request for quotation;
- information relating to the service ordered or being provided;
- data necessary to prepare a quotation or perform a contract.
Technical data
In connection with the use of the website, technical data may also be processed, such as:
- IP address;
- online identifiers;
- device information;
- browser type and version;
- operating system;
- information on the time and manner of use of the website;
- information regarding the subpages visited;
- information stored or accessed via cookies and similar technologies.
The Controller applies the principle of data minimisation and processes only personal data that is adequate, relevant and necessary for the specified purposes.
5. Data received from customers and business partners
In connection with the provision of its services, VIP Drivers may receive personal data concerning passengers or other persons involved in the organisation of a journey not directly from those persons, but from entities ordering or organising the service, in particular from business clients, travel agencies, event agencies, hotels, event organisers, partner companies or other entities acting on behalf of the passenger.
This data may include, in particular, first name and surname, telephone number, details of the pick-up location and time, destination, flight number and other organisational information necessary for the proper provision of the service.
This data is processed to the extent necessary to organise and provide the booked service, to contact the passenger or the person responsible for organising the service, and to ensure the journey proceeds smoothly.
6. Purposes and legal basis for data processing
Personal data may be processed by VIP Drivers for the following purposes.
6.1. Handling enquiries and contacting users
Data provided via the contact form, email, telephone or other communication channels may be processed for the purpose of:
- providing a response;
- handling enquiries;
- preparing a quotation;
- maintaining correspondence;
- taking action at the request of an individual prior to entering into a contract.
The legal basis for processing may be Article 6(1)(b) of the GDPR, if the processing is necessary to take steps at the request of an individual prior to entering into a contract, or Article 6(1)(f) of the GDPR, if the basis is the Controller’s legitimate interest.
6.2. Conclusion and performance of a contract
Data may be processed for the purpose of:
- concluding a contract;
- providing services;
- contacting the customer;
- organising and managing the provision of the service;
- handling payments and settlements;
- issuing accounting documents;
- handling complaints.
The legal basis is Article 6(1)(b) of the GDPR.
6.3. Compliance with legal obligations
Data may be processed for the purpose of fulfilling the legal obligations incumbent on the Controller, in particular tax, accounting and record-keeping obligations.
The legal basis is Article 6(1)(c) of the GDPR.
6.4. Pursuing and defending against claims
Data may be processed for the purpose of establishing, pursuing, securing or defending against claims.
The legal basis is Article 6(1)(f) of the GDPR, i.e. the Controller’s legitimate interest in protecting its rights and interests.
6.5. Ensuring the security of the website
Technical data, including the IP address and information about the device and how the website is used, may be processed for the following purposes:
- ensuring the security of the website;
- detecting misuse and abuse;
- preventing unauthorised access;
- protecting the IT infrastructure;
- ensuring the website functions correctly.
The legal basis is Article 6(1)(f) of the GDPR.
6.6. Marketing of VIP Drivers’ own services
VIP Drivers may process data for the purpose of marketing its own services.
If, in a particular case, consent is required for marketing communications, the Controller will only carry out such communications after obtaining the relevant consent.
The user has the right to object at any time to the processing of their data for direct marketing purposes.
6.7. Analytics and statistics
VIP Drivers uses analytics tools, in particular Google Analytics 4, to analyse how the website is used, compile statistics, improve its functionality and assess the effectiveness of activities carried out on the website.
To the extent that the use of certain technologies requires the user’s consent, the relevant technologies are activated in accordance with the user’s cookie preferences.
7. Google Tag Manager
This website uses Google Tag Manager, a service provided by Google Ireland Limited.
Google Tag Manager is used to manage and deploy specific tags and scripts on the website.
Google Tag Manager itself is a script management tool. The individual tools activated through it, in particular analytics and marketing tools, are subject to the rules set out in the relevant sections of this Policy.
8. Google Analytics 4
The website uses Google Analytics 4, an analytics tool provided by Google Ireland Limited.
Google Analytics may collect information about how the website is used, including information about the pages visited, the traffic source, the device and browser used, and the user’s activity on the website.
This data is used in particular for:
- compiling statistics;
- analysing traffic;
- improving the website’s functionality;
- analysing interest in services;
- assessing the effectiveness of marketing activities.
Analytical technologies that require the user’s consent are activated in accordance with the user’s stated cookie preferences.
9. Google Ads and remarketing
VIP Drivers uses Google Ads services, including features related to measuring ad performance and remarketing.
These technologies may enable:
- measuring the effectiveness of advertising campaigns;
- analysing traffic sources;
- creating audience groups;
- displaying adverts to users who have previously visited the website;
- tailoring advertising to a user’s previous activity.
Depending on the configuration used, Google may combine this information with other information held in its systems.
Marketing technologies that require user consent are only activated once the relevant consent has been obtained via the cookie management mechanism.
10. Meta Pixel
The website uses Meta Pixel, a tool provided by Meta Platforms Ireland Limited.
Meta Pixel may be used in particular for:
- measuring the effectiveness of advertising campaigns;
- analysing actions taken by users on the website;
- creating advertising audiences;
- carrying out remarketing;
- optimising advertising campaigns.
To the extent that the use of Meta Pixel requires the user’s consent, the tool is activated in accordance with the user’s selected cookie preferences.
11. Google Maps
This website uses Google Maps, a service provided by Google Ireland Limited.
Google Maps may use information relating to the user’s device and how they use the map.
Depending on how the service is integrated into the website, Google may also process the IP address and other technical data.
If the use of certain Google Maps features requires the user’s consent, those features may only be activated once consent has been obtained.
12. Google reCAPTCHA
The website uses Google reCAPTCHA, a service provided by Google Ireland Limited.
reCAPTCHA is primarily used to protect forms and the website against spam, automated queries and other forms of abuse.
As part of the operation of the service, Google may process technical information relating to the user, including information about the user’s device, browser, IP address and use of the website.
The service is used to ensure the security of the website and to protect its functionality.
13. Cookies and similar technologies
The vipdrivers.pl website uses cookies and similar technologies.
Cookies are small files stored on the user’s device whilst using the website.
Depending on their purpose, cookies may be used to:
- ensure the website functions correctly;
- ensure security;
- remember settings;
- analyse traffic;
- compile statistics;
- measure the effectiveness of advertising;
- carry out remarketing;
- personalise content and advertising.
14. Categories of cookies
14.1. Essential cookies
Essential cookies are necessary for the website to function properly and for its basic features to work, and may be used without the user’s consent. With regard to the other categories, the user may consent to all or selected categories, refuse consent, or change their preferences at a later date.
Essential cookies may be used, among other things, to:
- ensure security;
- maintain the proper functioning of the website;
- support the website’s basic functions;
- store basic settings relating to the operation of the website.
14.2. Analytical cookies
Analytical cookies are used to analyse traffic and how the website is used.
Technologies such as Google Analytics 4 may be used in this category.
14.3. Marketing cookies
Marketing cookies are used to measure the effectiveness of advertising campaigns, carry out remarketing and create advertising audiences.
This category may include, among others:
- Google Ads;
- Google remarketing technologies;
- Meta Pixel;
- other marketing tools implemented on the website.
14.4. Functional cookies
Functional cookies may be used to provide additional website features and to remember the user’s selected settings.
15. Managing cookie consent
On the first visit to the website, the user may be asked to make a choice regarding the use of cookies and similar technologies.
In particular, the user may:
- accept all categories of cookies;
- accept selected categories;
- withhold consent to non-essential cookies;
- change their preferences at a later date.
Analytical and marketing cookies, where they require the user’s consent, should not be used until such consent has been obtained.
Consent to the use of cookies should be voluntary, informed and unambiguous. It should be as easy to withdraw consent as it is to give it.
16. Google and data processing
In connection with the use of Google services, data may be processed by entities within the Google group, in particular Google Ireland Limited and, to the extent arising from the way individual services operate, other entities within the Google group.
Google may process information in accordance with its data protection and privacy policies.
The scope of data transferred to Google depends on the specific service, its configuration and the user’s consent settings.
17. Meta and data processing
In connection with the use of Meta Pixel, data may be processed by Meta Platforms Ireland Limited.
The scope of processing depends on the tool’s configuration and the user’s consent settings.
Meta may use information collected via its technologies in accordance with its data protection policies.
18. Server logs
Using the website involves the automatic recording of certain technical information in server logs.
Logs may include, in particular:
- IP address;
- the date and time of the connection;
- browser information;
- operating system;
- the page visited;
- information regarding technical errors.
Logs are used primarily to ensure security, the proper functioning of the website and for technical diagnostics.
The legal basis is Article 6(1)(f) of the GDPR.
19. Recipients of personal data
Personal data may also be disclosed to drivers, carriers, subcontractors and other entities involved in organising or providing the booked transport service – solely to the extent necessary for its proper performance.
The data disclosed may include, in particular, the passenger’s first name and surname, telephone number, pick-up location and time, destination, flight number and other organisational information necessary for the performance of the service.
Personal data may be disclosed to entities that support VIP Drivers in its business operations, to the extent necessary to achieve specific purposes.
These may include, in particular:
- hosting providers;
- IT infrastructure providers;
- email service providers;
- IT system providers;
- analytics tool providers;
- marketing tool providers;
- Google Ireland Limited;
- Meta Platforms Ireland Limited;
- security system providers;
- accountancy service providers;
- law firms;
- IT service providers;
- security service providers;
- public authorities authorised by law.
Where an entity processes personal data on behalf of the Controller, VIP Drivers enters into an appropriate data processing agreement with that entity where required under the GDPR.
20. Transfer of data outside the European Economic Area
In connection with the use of services provided by technology providers, in particular Google, Meta or other international providers, data may be transferred to countries outside the European Economic Area.
In the event of such a transfer, the Controller ensures that an appropriate transfer mechanism provided for under the GDPR is used, in particular:
- an adequacy decision of the European Commission;
- standard contractual clauses;
- other appropriate safeguards provided for in the GDPR.
21. Data retention period
Personal data is retained for no longer than is necessary to fulfil the purpose for which it was collected.
Data relating to enquiries is retained for as long as necessary to handle the enquiry, continue correspondence and safeguard against potential claims.
Data relating to the performance of a contract is retained for the duration of the contract, and thereafter for the period required by law or necessary to safeguard against any potential claims.
Data contained in accounting records is retained for the period required by applicable law.
Data processed on the basis of consent is retained until such consent is withdrawn, unless there is another legal basis for further processing.
Data used by analytics and marketing tools is retained in accordance with the configuration of the individual services and the retention settings applied by the providers of those services.
22. Rights of data subjects
The data subject is entitled to the rights set out in the GDPR, in particular:
- the right of access to data;
- the right to rectification;
- the right to erasure;
- the right to restrict processing;
- the right to data portability;
- the right to object to processing;
- the right to withdraw consent, where processing is based on consent.
The scope and manner of exercising these rights depend on the legal basis and the circumstances of the specific processing.
23. Right to object
Where personal data is processed on the basis of Article 6(1)(e) or (f) of the GDPR, the data subject may – on grounds relating to their particular situation – object to such processing.
Where data is processed for the purposes of direct marketing, the data subject has the right to object to such processing at any time.
Once a valid objection has been lodged, the data will no longer be processed for direct marketing purposes.
24. Right to withdraw consent
If data processing is based on consent, the user may withdraw their consent at any time.
Withdrawal of consent does not affect the lawfulness of processing carried out prior to its withdrawal.
In the case of cookies, the user may withdraw their consent or change their preferences via the consent management mechanism available on the website.
It should be as easy to withdraw consent as it is to give it.
25. Right to lodge a complaint
If a data subject considers that the processing of their personal data infringes the GDPR, they have the right to lodge a complaint with a supervisory authority.
In Poland, the supervisory authority is:
President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych)
26. Is the provision of personal data mandatory?
Providing personal data is voluntary; however, in certain situations it may be necessary in order to:
- process an enquiry;
- prepare a quotation;
- enter into a contract;
- provide a service;
- contact the customer;
- issue accounting documents;
- comply with obligations arising from applicable law.
Failure to provide data necessary for a specific purpose may make it impossible to fulfil that purpose.
27. Contact forms
If a user uses the contact form available on the website, the data provided in the form is used, in particular, to handle the enquiry, contact the user and, if the user is interested in receiving a quotation, prepare one.
Data provided via the form should not be used for purposes other than those disclosed to the user, unless the Controller has another legal basis for processing it.
Information regarding data processing should be made available to the user before the form is submitted.
28. Electronic marketing
Where VIP Drivers conducts marketing communications via email, telephone, SMS or other electronic communication channels, such communications will be carried out in accordance with the applicable regulations on electronic communications and direct marketing.
Where prior consent is required for a particular form of communication, the Controller will obtain such consent before commencing that communication.
The user may opt out of receiving marketing communications at any time.
29. Automated decision-making and profiling
VIP Drivers may use analytical and marketing tools to create audience groups or analyse users’ activity for marketing purposes.
The use of such tools does not involve automated decision-making that produces legal effects concerning the user or similarly significantly affects them.
Should the Controller implement solutions subject to Article 22 of the GDPR in the future, the user will be informed of such processing to the extent required by law.
30. Children’s data
The vipdrivers.pl website is not aimed at children, and the Controller does not intend knowingly to collect children’s personal data in breach of applicable law.
If the Controller becomes aware that data has been collected in circumstances requiring action, it will take appropriate steps in accordance with applicable law.
31. Data security
The Controller employs appropriate technical and organisational measures to protect personal data against:
- accidental or unlawful destruction;
- loss;
- modification;
- unauthorised disclosure;
- unauthorised access;
- other forms of unlawful processing.
The security measures applied are tailored to the nature, scope, context and purpose of the processing, as well as the risk to the rights and freedoms of natural persons.
32. Links to other websites
The website may contain links to third-party websites, in particular VIP Drivers’ profiles on social media platforms.
Upon accessing an external website, the user is subject to the privacy policy of the operator of that website.
VIP Drivers is not responsible for the data processing practices of third-party websites.
33. Social media
VIP Drivers maintains, or may maintain, profiles on social media platforms, in particular on Facebook, Instagram and LinkedIn.
The use of these platforms may involve the processing of personal data by the operators of the respective platforms in accordance with their own privacy policies.
If a user uses the social media features available on the vipdrivers.pl website, information regarding their activity may be processed in accordance with the policies set out by the operator of the relevant platform.
34. External service providers
VIP Drivers uses the services of external technology providers who may assist the Controller with hosting, security, analytics, marketing, communication and the operation of the website.
The Controller endeavours to select service providers that ensure an appropriate level of security and data protection and to enter into data processing agreements where required by law.
35. Changes to the Privacy Policy
The Controller may update this Privacy Policy, in particular in the event of:
- changes to legislation;
- changes to the way the website operates;
- the introduction of new features;
- the use of new technology services;
- changes in service providers;
- changes to data processing methods;
- changes to the cookie technologies used.
The current version of the Privacy Policy is published on the vipdrivers.pl website. Changes come into effect on the date specified in the updated version of the document.
36. Contact regarding personal data protection
Any questions, requests or enquiries regarding the processing of personal data may be addressed to:
VIP Drivers sp. z o.o.
ul. Franciszka Klimczaka 5/71 02-797 Warsaw, Poland
Email: biuro@vipdrivers.pl Telephone: +48 508 117 392
To facilitate efficient handling of a request, the user should, where possible, specify which processing activity or data the request concerns.
The Controller handles requests from data subjects within the time limits and in accordance with the rules set out in the GDPR.
37. Final provisions
This Privacy and Cookies Policy fulfils the Controller’s information obligations arising, in particular, from the GDPR and the regulations concerning privacy and the use of technologies that store or access information on the user’s device.
The Controller endeavours to ensure that information concerning the processing of personal data is presented in a clear, transparent, comprehensible and easily accessible manner.
Last updated: 17 September 2026.