Effective from 28 October 2026.
Controller and contact
WingSail Sp. z o.o. · ul. Willowa 26, 55-330 Brzezina · KRS 0001185942 · NIP 9131642494 · REGON 542313469 · Share capital: PLN 100,000.00 · Registration court: Sąd Rejonowy dla Wrocławia-Fabrycznej we Wrocławiu, IX Wydział Gospodarczy Krajowego Rejestru Sądowego.
WINGSAIL spółka z ograniczoną odpowiedzialnością is the controller of personal data. For personal-data matters, contact wingsail@wingsail.pl.
What data we process and why
When you submit an enquiry form, we process the name, email address, optional telephone number and voyage information you provide. We need these data to reply and prepare a tailored proposal. Providing a name and email is voluntary, but necessary to handle the enquiry. Please do not send identity documents or special-category data in the form.
We process form data to take steps before entering into an agreement at your request (Article 6(1)(b) GDPR). We process correspondence, abuse prevention and the establishment, exercise or defence of claims under our legitimate interests (Article 6(1)(f) GDPR): safe, efficient contact handling and protection of the controller’s rights.
Recipients, logs and retention
Your enquiry is sent by email to WingSail. Authorised people and providers of hosting, email and technical support may access the data only as needed to provide their services. The form does not store its content in the WordPress database.
NauSYS search
The description above of WingSail’s own form, including the statement that its content is not stored in the WordPress database, does not apply to the form within the NauSYS search tool. When you use the search tool, your browser loads scripts from widget.nausys.com and code.jquery.com; this establishes connections to those domains and may provide their operators with technical data such as your IP address and browser information. Information entered in the search form is used to handle your request for an offer. After submission, the tool sends an email to WingSail and a copy to the email address entered in the form. The tool provider and email and technical-infrastructure providers may be involved in delivering the enquiry; loading the scripts alone does not establish the full route taken by the form data. The remaining sections of this policy explain how to contact WingSail, the basis for handling an enquiry, retention of our correspondence and your rights.
The server may keep technical logs needed to operate and secure the service. The form uses protection against automated submissions and a short-lived sending limit based on a hash of the IP address. We retain correspondence for the time needed to handle an enquiry. If it leads to an agreement, we retain it for performance and any period required by law or needed to defend claims.
Google reviews
On the home page and on the “About us” and “O nas” pages, we display public reviews of WingSail through GRWidget.com (operated by EXTHUS LTD). When these pages open, your browser loads a script from grwidget.com and widget data from that service. In connection with this request, the provider may receive technical data, including your IP address, browser information and the referring site’s hostname. Reviews are synchronized by GRWidget.com and are not stored in the WordPress database. Links to reviews on Google open Google only after you click them. For details, see the GRWidget.com privacy policy.
Your rights
You may request access to, rectification, erasure or restriction of your data, and where the law provides, data portability. You may object to processing based on legitimate interests. Contact wingsail@wingsail.pl. You may also lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office.
Cookies, analytics and advertising
On your first visit, we ask for consent in a banner. You can accept all categories, reject all, or choose them individually under “Settings”. You can change or withdraw your choice at any time through the “Cookie settings” link in the footer. Withdrawal does not affect the lawfulness of processing before it.
Necessary. Without consent, we store only cookies needed for the website to work: ws_consent (your choice and the banner text version), ws_consent_id (a random choice identifier) and ws_consent_analytics (technical compatibility), each for 12 months, plus technical cookies of forms, bookings and payments. The legal basis is Article 399(2) of the Polish Electronic Communications Law and our legitimate interests (Article 6(1)(f) GDPR).
Analytics (with consent). We use Google Analytics 4 for aggregated measurement of visits, traffic sources, page views and actions on the website. Google Analytics may set _ga and _ga_* cookies, usually for up to 2 years. Google Signals is disabled.
Marketing (with consent). We use Google Ads to measure whether our ads lead to enquiries and bookings (conversions) and to show WingSail ads to people who have visited our website (remarketing) on Google services and Google partner websites. Google Ads may set _gcl_* cookies and its own advertising cookies, usually for up to 13 months.
The legal basis for analytics and marketing is your consent (Article 6(1)(a) GDPR and Article 399(1) of the Polish Electronic Communications Law). Google tools do not start without consent. If you consent to some categories only, we send Google the matching Consent Mode signals and Google does not set cookies for categories you declined.
The recipient is Google Ireland Limited. Google may receive technical data such as IP address, cookie identifiers, browser data, pages viewed and website events. Data may be transferred to Google LLC in the USA under the European Commission adequacy decision (EU-US Data Privacy Framework) and standard contractual clauses. Google’s practices are described in the Google Privacy Policy.
Consent records. To demonstrate that consent was given (Article 7(1) GDPR), we record the date of the choice, the banner text version, the categories chosen, the page language and a random choice identifier. We do not record your IP address. We keep these records for 3 years and then delete them. The legal basis is our legitimate interest in demonstrating compliance (Article 6(1)(f) GDPR).
WordPress technical cookies are used only when an administrator signs in to the administration panel. Facebook and Instagram links lead to external services; their rules apply after you visit them. We do not embed their trackers on wingsail.pl.
Profiling
We do not make automated decisions about you that produce legal effects or similarly significantly affect you. If you consent to marketing, Google may add you, based on your visit to wingsail.pl, to an audience for our ads (remarketing). This is profiling for marketing purposes; it takes place only with your consent and stops when you withdraw it. The form does not subscribe you to a newsletter; further marketing contact requires a separate legal basis.
