Privacy Policy

How we collect, use and protect your personal information

Data Controller

FIRMA USŁUGOWA GRZEGORZ ROBOK
NIP: 9542532442 | REGON: 363748757
ul. Graniczna 29, Katowice, Poland
Email: [email protected]

Last updated: August 3, 2026

1. Introduction

At TravelToCanada.net, we are committed to protecting the privacy and personal data of our visitors and clients. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services. Please read this policy carefully.

2. Information We Collect

We may collect the following categories of personal information:

2.1 Information You Provide Directly

  • Full name and contact details (email address, phone number)
  • Postal address
  • Passport information (when processing travel applications)
  • Date of birth and nationality
  • Payment information (processed securely through third-party providers)
  • Travel preferences and special requirements

2.2 Information Collected Automatically

  • IP address and browser type
  • Pages visited and time spent on the Website
  • Referring website addresses
  • Cookie data (see Section 7 below)
  • Device information (screen resolution, operating system)

3. How We Use Your Information

We use your personal information for the following purposes:

  • Processing and managing your travel bookings
  • Assisting with visa and eTA applications
  • Communicating with you about your enquiries and bookings
  • Sending relevant travel information and updates (with your consent)
  • Improving our website and services
  • Complying with legal obligations under Polish and EU law
  • Preventing fraud and ensuring website security

4. Legal Basis for Processing (GDPR)

As a company based in the European Union (Poland), we process your personal data in accordance with the General Data Protection Regulation (GDPR). Our legal bases for processing are:

PurposeLegal Basis
Processing bookings and applicationsContract performance (Art. 6(1)(b) GDPR)
Marketing communicationsConsent (Art. 6(1)(a) GDPR)
Legal obligationsLegal obligation (Art. 6(1)(c) GDPR)
Fraud prevention, securityLegitimate interests (Art. 6(1)(f) GDPR)

5. Data Sharing and Third Parties

We may share your personal information with:

  • Canadian tour operators and hotels — to fulfill your bookings
  • Government immigration authorities — when processing visa/eTA applications
  • Payment processors — to handle secure transactions
  • IT service providers — for website hosting and technical support

We do not sell your personal data to third parties. All data processors are bound by appropriate data protection agreements.

6. International Data Transfers

When we process travel applications to Canada, your data may be transferred to Canada. Canada is recognised by the European Commission as providing an adequate level of data protection for commercial organisations. Any additional transfers to other countries are protected by appropriate safeguards.

7. Cookies

Our Website uses cookies to enhance your experience. We use:

  • Essential cookies — required for the Website to function properly
  • Analytics cookies — to understand how visitors interact with our site (anonymised)
  • Preference cookies — to remember your cookie consent preference

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect Website functionality.

8. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined in this policy:

  • Booking records: 5 years after the travel date (for accounting purposes)
  • Application data: 3 years after submission
  • Marketing consent records: until withdrawn
  • Website logs: 12 months

9. Your Rights Under GDPR

As a data subject, you have the following rights:

  • Right of access — request a copy of the data we hold about you
  • Right to rectification — request correction of inaccurate data
  • Right to erasure — request deletion of your data ("right to be forgotten")
  • Right to restriction — request restriction of processing
  • Right to data portability — receive your data in a structured format
  • Right to object — object to processing based on legitimate interests
  • Right to withdraw consent — at any time, for consent-based processing

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Polish Data Protection Authority (UODO).

10. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These include SSL encryption, access controls, and regular security assessments. However, no internet transmission is 100% secure.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

12. Contact Us

FIRMA USŁUGOWA GRZEGORZ ROBOK
ul. Graniczna 29, 40-018 Katowice, Poland
Email: [email protected]
Phone: +48 666 626 704