Privacy policy
1. Who is the controller
The controller of your personal data is One Lifetime Sp z o.o., Powązkowska 10, 01-500 Warszawa, Poland, tax ID (NIP) 73939825557 (“Lifetime Atelier”). Contact for data protection matters: office@lifetime-atelier.com.
2. What data we collect and why
- Party or VIP journey enquiry forms: first name, email, phone (optional), type and date of the event or trip, number of people, budget, selected experiences, travel preferences, your message and the language of the page from which the form was sent. We use this data to respond to your enquiry and prepare a proposal.
- “Remember me” form: email, first name (optional), whether your events will be private or corporate, and the page language. We use this data to send you inspiration and information about our services.
3. Legal bases
- Responding to your enquiry and preparing a proposal: Art. 6(1)(b) GDPR (steps taken at your request prior to entering into a contract).
- Newsletter: Art. 6(1)(a) GDPR (your consent), which you may withdraw at any time.
- Spam protection, choosing the language version, and establishing or defending legal claims: Art. 6(1)(f) GDPR (legitimate interests).
4. How long we keep your data
Enquiry data is kept until your enquiry has been handled and, if we work together, for as long as required by law (including tax law). Newsletter data is kept until you withdraw your consent. On request we will delete your data earlier, unless the law prevents us from doing so.
5. Who we share data with
Data is stored on the servers of our hosting provider (Hetzner Online GmbH, Germany) and is never sold. It may be shared with partners who help us deliver the service (e.g. artists, venues, transport providers), only to the extent necessary to prepare your event and after agreeing this with you. Data is transferred outside the European Economic Area only for the reCAPTCHA service (see section 6) and where agreed with you for an event or trip abroad.
6. Cookies, language version and spam protection
This site does not use analytics or advertising cookies. We only set a functional lang cookie (valid for 12 months) set once you choose a language version.
On your first visit we suggest a language version based on your browser settings and, where that is not sufficient, on the country derived from your IP address. The country is determined on our own server, without sharing or storing your IP address, using the IP Geolocation by DB-IP database (licensed under CC BY 4.0).
Our forms are protected by Google reCAPTCHA v3 (Google Ireland Limited / Google LLC), which runs in the background to assess whether a submission comes from a human. For this purpose Google may receive device and usage data (such as IP address, browser data and mouse movements) and set cookies. The legal basis is our legitimate interest in protecting the site against spam and abuse (Art. 6(1)(f) GDPR). Data may be transferred to the USA under GDPR-compliant safeguards. See Google’s Privacy Policy and Terms of Service.
7. Your rights
You have the right to access, rectify and erase your data, to restrict processing, to data portability, to object, and to withdraw your consent. Details are set out in our GDPR notice.
8. Changes to this policy
We will announce any material changes on this page. The current version is always available at this address.