Privacy Policy
Last updated: January 2026
This Privacy Policy explains how YOLK Sp. z o.o., ul. Józefa Sarego 5/4, 31-047 Kraków, NIP 6762575400 (“Yolk”, “we”, “us”), processes your personal data when you use our website, sign up for our newsletter, book a tour, or purchase memberships and passes (including Hotdesk and 10-Day memberships).
You can contact us at admin@yolkfolk.pl.
1. What Personal Data We Process
We process the following categories of personal data provided through the website:
- Identification & Billing Data: Name, surname, company name, Tax Identification Number (NIP), and billing address (required for purchases and invoices).
- Contact Details: Email address and phone number.
- Transaction Data: Details of the memberships or passes purchased; however, we do not store full credit card numbers (these are handled by secure third-party payment processors).
- Usage Data: Pages visited, interactions, and cookie identifiers (if you consent).
2. Purpose and Legal Basis
We process your personal data for the following purposes:
- Processing Purchases (Memberships/Passes): To fulfill your order, provide access codes, and issue legal invoices.
- Legal basis: Performance of a contract (Art. 6(1)(b) GDPR).
- Sending Newsletters and Marketing: * Legal basis: Your consent (Art. 6(1)(a) GDPR).
- Handling Tour Bookings or Contact Requests: * Legal basis: Taking steps at your request (Art. 6(1)(b) GDPR) or consent.
- Legal Compliance: To maintain accounting records and comply with Polish tax law.
- Legal basis: Legal obligation (Art. 6(1)(c) GDPR).
- Website Analytics: To improve our site performance.
- Legal basis: Legitimate interest or consent for cookies (Art. 6(1)(f) and (a)).
3. Is Providing Data Mandatory?
Providing personal data is voluntary, but it is a requirement to:
- Purchase a membership or pass (we need billing data for the invoice).
- Receive newsletters or book a tour.
4. How Long We Keep Your Data
- Purchase & Invoice Data: Stored for 5 years from the end of the tax year in which the purchase was made, as required by Polish Tax Law.
- Newsletters: Until you withdraw your consent (unsubscribe).
- Form Submissions: Until the request is resolved, or for a maximum of 12 months (unless you become a member).
5. Who We Share Your Data With
We share data with trusted service providers:
- Payment Processors: Secure gateways (e.g., PayPal, Stripe, or banks) to process your transactions.
- IT & CRM: Hosting providers and platforms like HubSpot for communication.
- Accounting: To process business settlements and tax filings.
- Analytics: Google Analytics (only if you consent to cookies).
Because tools like HubSpot or Google may store data outside the EEA, we ensure Standard Contractual Clauses (SCCs) are in place to protect your data.
6. How We Protect Your Data
We apply technical and organisational measures, including:
- SSL/TLS encryption for all website data transmission.
- Secure access controls for our internal systems.
- PCI-compliant payment processing via third parties.
7. Your Rights
Under GDPR, you have the right to:
- Access, rectify, or erase your data (“Right to be forgotten”).
- Restrict or object to processing.
- Withdraw consent at any time (e.g., via the “unsubscribe” link).
- Data portability (receive a copy of your data).
- Lodge a complaint with the Prezes Urzędu Ochrony Danych Osobowych (UODO) in Poland.
Cookie Policy
Our website uses cookies to improve performance and analyze traffic.
- Necessary Cookies: Required for the shop and login functions to work.
- Analytics Cookies: Used by Google Analytics (only with your consent).
- Embedded Content: YouTube videos may set cookies if you play them.
You can manage preferences in your browser or our cookie banner.
Third-Party Tools
- HubSpot: Used for newsletter sign-ups and tour bookings.
- YouTube/Google: Used for video content and Web Fonts. Your IP address may be visible to Google when these assets load.
Copyright Notice All content on yolkfolk.pl (text, images, layout) is owned by YOLK Sp. z o.o. and protected by intellectual property laws.