Privacy Policy
Version effective as of 10 September 2026
no previous version of the Privacy Policy has been issued yet
WHAT IS THIS PRIVACY POLICY?
We would like to walk you through the details of how we process your personal data, so that you have full knowledge and feel comfortable using our website.
Because we work in the internet industry ourselves, we know how important the protection of your personal data is. That is why we take particular care to protect your privacy and the information you share with us.
We carefully select and apply appropriate technical measures, in particular those of a programming and organisational nature, ensuring the protection of the personal data we process. Our website uses encrypted data transmission (SSL), which protects the data that identifies you.
In our Privacy Policy you will find all the key information about how we process your personal data. Please read it – we promise it will take you no more than a few minutes.
Who is the operator of the www.flyconcept.pl website?
The website is operated by Flypark spółka z ograniczoną odpowiedzialnością (a Polish limited liability company) with its registered office in Rzeszów, at Ciasna 3, 35-232 Rzeszów, entered into the register of entrepreneurs by the District Court in Rzeszów, 12th Commercial Division of the National Court Register, KRS 0000974996, NIP 5170386018, REGON 369081610, with a share capital of PLN 10,000.00 (that is: us).
PERSONAL DATA
Which legal act governs the processing of your personal data?
Your personal data is collected and processed by us in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ EU L 119, p. 1), commonly referred to as the GDPR. To the extent not governed by the GDPR, the processing of personal data is governed by the Polish Personal Data Protection Act of 10 May 2018.
Who is the controller of your personal data?
The controller of your personal data is Flypark spółka z ograniczoną odpowiedzialnością (a Polish limited liability company) with its registered office in Rzeszów, at Ciasna 3, 35-232 Rzeszów, entered into the register of entrepreneurs by the District Court in Rzeszów, 12th Commercial Division of the National Court Register, KRS 0000974996, NIP 5170386018, REGON 369081610, with a share capital of PLN 10,000.00, email: franczyza@fly-park.eu, phone: +48 530 471 057.
In matters concerning your personal data you can contact us through:
- email: franczyza@fly-park.eu,
- post: Ciasna 3, 35-232 Rzeszów,
- contact phone number: +48 530 471 057.
HOW DO WE PROCESS THE PERSONAL DATA YOU GIVE US?
What personal data do we process and for what purposes?
On our website we offer you a range of different services; for their purposes we process different personal data on different legal bases.
| Purpose | Personal data | Legal basis for processing |
|---|---|---|
| contact form | first name, surname, email address, phone number | art. 6(1)(f) GDPR, i.e. processing to pursue our legitimate interest consisting in maintaining continuity of communication and enabling contact with us in matters relating to the business we run |
| Handling franchise model enquiries / commercial contact | first name, surname; email; phone; (optionally: funds, region, city) | art. 6(1)(f) GDPR (legitimate interest – handling enquiries and B2C/B2B sales) |
| Registration for an online presentation / franchise webinar | first name, surname, email; phone number; | art. 6(1)(b) GDPR (necessity to conclude/perform a contract – booking a place) or (f) (organisation of the event) |
| newsletter | email address, first name, surname | art. 6(1)(a) GDPR, i.e. processing on the basis of the consent you have given to the processing of your personal data |
| website traffic analysis | browser data, location data, IP address | art. 6(1)(f) GDPR, i.e. processing to pursue our legitimate interest consisting in analysing user traffic on the website |
| direct marketing of our own goods and services, including remarketing | browser data, location data, IP address | art. 6(1)(f) GDPR, i.e. processing to pursue our legitimate interest consisting in direct marketing of our own services, including remarketing |
| Remarketing and online advertising | cookie/pixel identifiers | art. 6(1)(a) GDPR (consent to marketing in cookies/pixels) |
| Establishing, pursuing or defending claims, archiving | selected contact and transaction data | art. 6(1)(f) GDPR (legitimate interest of the Controller) and/or (c) (legal obligation) |
How long do we keep the data?
The period for which the Controller processes data depends on the type of service provided and on the purpose of processing. As a rule, data is processed for the duration of the service or of the fulfilment of an order, until consent is withdrawn or an effective objection is raised against the processing in cases where the legal basis for processing is the legitimate interest of the Controller.
The processing period may be extended where processing is necessary to establish and pursue possible claims or to defend against claims, and after that time only in the cases and to the extent required by law.
Once the processing period has elapsed, the data is irreversibly deleted or anonymised.
Is providing personal data voluntary?
Providing the personal data we ask for is voluntary, but it is a condition of us providing services to you (for example sending the newsletter, registering you for a webinar, or sending you materials and getting back to you).
Recipients of personal data
The current list of entities to which we disclose your personal data:
| Entity | Purpose |
|---|---|
| Google Ireland Ltd. (Google Cloud, Google Analytics, Google Analytics 360, Fabric Software), based in Ireland | Measuring website traffic, reporting application errors, producing statistics |
| Google Ireland Ltd., based in Ireland | Analysing customer activity |
| Google Ireland Ltd. (Google Adwords, Double Click Manager, Double Click Search, Remarketing Service, Firebase), based in Ireland | Measuring the effectiveness of advertising campaigns, managing advertising campaigns |
| Meta Platforms Ireland Limited | Promoting the website through the Facebook.com social network |
| LinkedIn Ireland Ltd., based in Ireland | Promoting the website through the LinkedIn.com social network |
| Meta Platforms Ireland Limited | Promoting the website through the Instagram.com social network |
Automated decision-making (including profiling)
We use tools through which we direct personalised advertising to you. On the basis of the actions you take on the website, in particular the content you choose to view and the time you spend on subpages, we adjust and display marketing content matched to you. Thanks to such profiling we can direct a marketing message that is more relevant to you, which benefits both us and you, because it limits marketing about goods and services that fall outside your interests.
Will we transfer your personal data outside the EEA or to an international organisation?
In order to use Google tools, your personal data may be transferred to the United States, where the servers of Google LLC are located.
Google LLC appears on the list of entities participating in the Data Privacy Framework programme (link: https://www.dataprivacyframework.gov/s/participant-search), and therefore the protection of personal data is adequate in relation to the regulations in force in the European Union, in accordance with Commission Implementing Decision (EU) C(2023) 4745 of 10 July 2023 on the adequate level of protection of personal data under the EU-US Data Privacy Framework (link: https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32023D1795&qid=1710923455391).
In order to use Facebook tools, your personal data may be transferred to the United States, where the servers of Meta Platforms Inc. are located.
Meta Platforms Inc. appears on the list of entities participating in the Data Privacy Framework programme (link: https://www.dataprivacyframework.gov/s/participant-search), and therefore the protection of personal data is adequate in relation to the regulations in force in the European Union, in accordance with Commission Implementing Decision (EU) C(2023) 4745 of 10 July 2023 on the adequate level of protection of personal data under the EU-US Data Privacy Framework (link: https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32023D1795&qid=1710923455391).
In order to use LinkedIn tools, your personal data may be transferred to the United States, where LinkedIn stores and processes personal data.
LinkedIn participates in the EU-U.S. Data Privacy Framework programme and, where personal data is transferred outside the European Economic Area, it also applies other lawful data transfer mechanisms, including the Standard Contractual Clauses (SCC) approved by the European Commission. LinkedIn indicates that personal data may be transferred from the European Union, the European Economic Area, the United Kingdom and Switzerland to the United States.
WHAT RIGHTS DO YOU HAVE IN CONNECTION WITH OUR PROCESSING OF YOUR PERSONAL DATA?
Under the GDPR you have the right to:
- request access to your personal data,
- request rectification of your personal data,
- request erasure of your personal data,
- request restriction of the processing of personal data,
- object to the processing of personal data,
- request portability of personal data.
If you submit any of the requests listed above, without undue delay – and in any case within one month of receiving the request – we will inform you of the action taken in response to it.
Where necessary, we may extend the one-month deadline by a further two months, given the complex nature of the request or the number of requests.
In every case we will inform you within one month of receiving the request that the deadline has been extended, and give you the reasons for the delay.
The right of access to personal data (art. 15 GDPR)
You have the right to obtain information as to whether we process your personal data. If we do process your personal data, you have the right to:
- access the personal data,
- obtain information about the purposes of processing, the categories of personal data processed, the recipients or categories of recipients of that data, the envisaged period for which your data will be stored or the criteria used to determine that period, the rights available to you under the GDPR and the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), the source of that data, automated decision-making, including profiling, and the safeguards applied in connection with the transfer of that data outside the European Union;
- obtain a copy of your personal data.
If you want to request access to your personal data, send your request to: franczyza@fly-park.eu.
The right to rectification of personal data (art. 16 GDPR)
If your personal data is inaccurate, you have the right to request that we rectify it without undue delay. You also have the right to request that we complete your personal data. If you want to request rectification or completion of your personal data, send your request to: franczyza@fly-park.eu.
The right to erasure of personal data, the so-called “right to be forgotten” (art. 17 GDPR)
You have the right to request erasure of your personal data where:
- your personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
- you have withdrawn a given consent, to the extent that the personal data was processed on the basis of your consent;
- your personal data was processed unlawfully;
- you have objected to the processing of your personal data for the purposes of direct marketing, including profiling, to the extent that the processing of personal data is connected with direct marketing;
- you have objected to the processing of your personal data in connection with processing necessary for the performance of a task carried out in the public interest, or processing necessary for the purposes of the legitimate interests pursued by us or by a third party.
Despite a request for erasure of personal data, we may continue to process your data for the purpose of establishing, pursuing or defending claims, of which you will be informed.
If you want to request erasure of your personal data, send your request to: franczyza@fly-park.eu.
The right to request restriction of the processing of personal data (art. 18 GDPR)
You have the right to request restriction of the processing of your personal data where:
- you contest the accuracy of your personal data – in that case we will restrict the processing of your personal data for a period enabling us to verify its accuracy;
- the processing of your data is unlawful and, instead of erasure of the personal data, you request restriction of its processing;
- your personal data is no longer needed for the purposes of processing, but it is needed for the establishment, exercise or defence of your claims;
- you have objected to the processing of your personal data – until it is established whether our legitimate interests override the grounds set out in your objection.
If you want to request restriction of the processing of your personal data, send your request to: franczyza@fly-park.eu.
The right to object to the processing of personal data (art. 21 GDPR)
You have the right to object at any time to the processing of your personal data, including profiling, in connection with:
- processing necessary for the performance of a task carried out in the public interest, or processing necessary for the purposes of the legitimate interests pursued by the controller of personal data or by a third party;
- processing for the purposes of direct marketing.
If you want to object to the processing of your personal data, send your request to: franczyza@fly-park.eu.
Can you withdraw the consent you have given to the processing of personal data?
You can withdraw the consent you have given to the processing of your personal data at any time. Withdrawing consent to the processing of personal data does not affect the lawfulness of the processing carried out by us on the basis of your consent before it was withdrawn.
If you want to withdraw your consent to the processing of your personal data, send your request to: franczyza@fly-park.eu.
Complaint to the supervisory authority
If you believe that the processing of your personal data infringes personal data protection law, you have the right to lodge a complaint with the supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.
In Poland the supervisory authority within the meaning of the GDPR is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), which on 25 May 2018 replaced GIODO.
You will find more information here.