Privacy Policy
How we collect, use and protect your personal information
Data Controller
FIRMA USŁUGOWA GRZEGORZ ROBOK
NIP: 9542532442 | REGON: 363748757
ul. Graniczna 29, Katowice, Poland
Email: [email protected]
Last updated: August 3, 2026
1. Introduction
At TravelToCanada.net, we are committed to protecting the privacy and personal data of our visitors and clients. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services. Please read this policy carefully.
2. Information We Collect
We may collect the following categories of personal information:
2.1 Information You Provide Directly
- Full name and contact details (email address, phone number)
- Postal address
- Passport information (when processing travel applications)
- Date of birth and nationality
- Payment information (processed securely through third-party providers)
- Travel preferences and special requirements
2.2 Information Collected Automatically
- IP address and browser type
- Pages visited and time spent on the Website
- Referring website addresses
- Cookie data (see Section 7 below)
- Device information (screen resolution, operating system)
3. How We Use Your Information
We use your personal information for the following purposes:
- Processing and managing your travel bookings
- Assisting with visa and eTA applications
- Communicating with you about your enquiries and bookings
- Sending relevant travel information and updates (with your consent)
- Improving our website and services
- Complying with legal obligations under Polish and EU law
- Preventing fraud and ensuring website security
4. Legal Basis for Processing (GDPR)
As a company based in the European Union (Poland), we process your personal data in accordance with the General Data Protection Regulation (GDPR). Our legal bases for processing are:
| Purpose | Legal Basis |
|---|---|
| Processing bookings and applications | Contract performance (Art. 6(1)(b) GDPR) |
| Marketing communications | Consent (Art. 6(1)(a) GDPR) |
| Legal obligations | Legal obligation (Art. 6(1)(c) GDPR) |
| Fraud prevention, security | Legitimate interests (Art. 6(1)(f) GDPR) |
5. Data Sharing and Third Parties
We may share your personal information with:
- Canadian tour operators and hotels — to fulfill your bookings
- Government immigration authorities — when processing visa/eTA applications
- Payment processors — to handle secure transactions
- IT service providers — for website hosting and technical support
We do not sell your personal data to third parties. All data processors are bound by appropriate data protection agreements.
6. International Data Transfers
When we process travel applications to Canada, your data may be transferred to Canada. Canada is recognised by the European Commission as providing an adequate level of data protection for commercial organisations. Any additional transfers to other countries are protected by appropriate safeguards.
7. Cookies
Our Website uses cookies to enhance your experience. We use:
- Essential cookies — required for the Website to function properly
- Analytics cookies — to understand how visitors interact with our site (anonymised)
- Preference cookies — to remember your cookie consent preference
You can manage cookie preferences through your browser settings. Disabling certain cookies may affect Website functionality.
8. Data Retention
We retain your personal data for as long as necessary to fulfill the purposes outlined in this policy:
- Booking records: 5 years after the travel date (for accounting purposes)
- Application data: 3 years after submission
- Marketing consent records: until withdrawn
- Website logs: 12 months
9. Your Rights Under GDPR
As a data subject, you have the following rights:
- Right of access — request a copy of the data we hold about you
- Right to rectification — request correction of inaccurate data
- Right to erasure — request deletion of your data ("right to be forgotten")
- Right to restriction — request restriction of processing
- Right to data portability — receive your data in a structured format
- Right to object — object to processing based on legitimate interests
- Right to withdraw consent — at any time, for consent-based processing
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Polish Data Protection Authority (UODO).
10. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These include SSL encryption, access controls, and regular security assessments. However, no internet transmission is 100% secure.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this page. We encourage you to review this policy periodically.
12. Contact Us
FIRMA USŁUGOWA GRZEGORZ ROBOKul. Graniczna 29, 40-018 Katowice, Poland
Email: [email protected]
Phone: +48 666 626 704