Grupa Biwakowa
🇬🇧
🇬🇧

Privacy Policy

Last updated: February 25, 2026

§.1 Personal Data Controller

The personal data controller is:
Patron
ul. Rodzinna 9/13 53-029 Wrocław
NIP: 577-167-37-39
REGON: 931989846
Email: biuro@grupabiwakowa.pl
The controller processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR)

§.2 Scope and Purpose of Data Processing

Personal data are processed for the purpose of:
  • creating and managing a user account,
  • enabling the use of application features,
  • enabling the publication of places, comments, photos and other content,
  • displaying maps and places near the user,
  • ensuring application security,
  • preventing abuse,
  • analyzing application performance,
  • displaying advertisements,
  • handling user reports.

§.3 Legal Basis for Data Processing

Personal data are processed on the basis of:
  • Art. 6(1)(b) GDPR – for the purpose of providing services,
  • Art. 6(1)(f) GDPR – for the purpose of ensuring the security and proper functioning of the application,
  • Art. 6(1)(a) GDPR – where consent has been given, in particular regarding advertisements or optional features.

§.4 Scope of Processed Data

The controller may process the following data:

Account Data

  • email address,
  • username,
  • user identifier,
  • external account identifier (Google, Facebook, Apple).
When logging in via external providers, the controller receives only the data necessary to identify the user.

Data Published by the User

The user may voluntarily publish:
  • camping spots,
  • comments,
  • photos,
  • descriptions,
  • locations of places.
This data may be publicly available to other users.

Location Data

The application may process the user's location data for the purpose of:
  • displaying the user's position on the map,
  • enabling the addition of a new place.
Location is saved on the server only when the user voluntarily adds a place. For premium users, session data may be saved, including:
  • approximate location,
  • IP address,
  • user-agent.
This data is stored for a maximum of 90 days.

Technical Data and Logs

The controller may process technical data such as:
  • IP address,
  • device identifier,
  • operating system,
  • application version,
  • user-agent,
  • error logs.
The IP address may be recorded in particular during:
  • logging in,
  • adding comments,
  • using the application.
Logs are stored for a maximum of 90 days. Backups are stored for a maximum of 14 days.

§.5 Cookies and Device Identifiers

The application and website may use:
  • cookies,
  • device identifiers,
  • advertising identifier (Android Advertising ID, Apple IDFA),
  • session tokens,
  • similar technologies.
These technologies are used for the purpose of:
  • ensuring the proper functioning of the application,
  • maintaining the user session,
  • analyzing application performance,
  • displaying advertisements,
  • preventing abuse.
The user may restrict or disable the advertising identifier in their device settings.

§.6 Push Notifications

The application may send push notifications to inform the user about new features, places, application activity and other relevant information related to the use of the Service.

For this purpose, a unique notification identifier assigned to the user's device may be processed (e.g. Firebase Cloud Messaging token or Apple Push Notification token).

Push notifications are sent only with the user's consent, which can be withdrawn at any time in the device or application settings.

The notification token may be stored until the user account is deleted, the application is uninstalled, or consent to receive notifications is withdrawn.

§.7 Advertisements

The application uses Google AdMob to display advertisements. Google may use:
  • advertising identifier,
  • IP address,
  • device information,
  • information about application usage.
Data is processed in accordance with Google's privacy policy.

§.8 Analytics

The application uses analytics tools:
  • Firebase Analytics,
  • Google Analytics.
These tools help analyze how the application is used and improve its performance.

§.9 Service Providers (Data Processors)

Data may be processed by the following entities: ADMIN.NET.PL S.C. – backend server hosting
Google LLC – Firebase Analytics, Google Analytics, Google AdMob
Mapbox Inc. – map services
OpenStreetMap Foundation – map data These entities process data in accordance with applicable law.

§.10 Transfer of Data Outside the European Economic Area

Data may be transferred outside the European Economic Area, in particular to Google LLC and Mapbox Inc. The transfer takes place in accordance with appropriate legal safeguards, in particular Standard Contractual Clauses.

§.11 Data Retention Period

Data is stored for the following periods:
  • account data – until account deletion,
  • logs – up to 90 days,
  • backups – up to 14 days,
  • session data of premium users – up to 90 days.

§.12 Account Deletion

The user may delete their account: Data is deleted immediately or within 14 days.

§.13 Voluntary Nature of Data Provision

Providing data is voluntary but necessary to use the application.

§.14 User Rights

The user has the right to:
  • access to data,
  • rectification of data,
  • erasure of data,
  • restriction of processing,
  • objection to processing,
  • data portability,
  • lodging a complaint with the President of the Personal Data Protection Office.

§.15 Login via External Providers

The application allows login via:
  • Google,
  • Facebook,
  • Apple.
During login, the controller receives basic user identification data, such as email address and user identifier.

§.16 Published Content

Content published by the user is voluntary and may be publicly available.

§.17 Data Security

The controller applies appropriate security measures, including:
  • SSL/TLS encryption,
  • server security,
  • access control,
  • minimization of processed data.

§.18 Automated Decision-Making

Data is not used for automated decision-making that produces legal effects concerning the user.

§.19 Changes to the Privacy Policy

The controller may update this privacy policy. The user may be informed of changes via the application or website.

§.20 Contact

For matters relating to personal data, you may contact us at: kontakt@grupabiwakowa.pl

Note! All photos and texts on the website www.grupabiwakowa.pl are protected by copyright. Any use for commercial purposes, posting on other websites, reprinting or other forms of reproduction require the consent of the editorial board and the author. © GRUPA BIWAKOWA PL 2017 - 2026. The editorial board is not responsible for the content of statements contained in comments and on the forum. These are private comments and opinions of users.

Partners