Let's Go! Privacy Policy

The controller of your personal data is Let's Go!, based in Poland (hereinafter: Controller).

Contact for data protection matters: Email: support@letsgo.ski Platform: letsgo.ski/contact

The Controller processes personal data in accordance with Regulation (EU) 2016/679 (GDPR) and other applicable law.

We collect the following categories of personal data:

Registration data: name (or username), email address, hashed password, date of birth, gender.

Profile data (optional): profile photo, 'About me' description, languages spoken, phone number, social media links (Instagram, Facebook, Strava).

Trip data: trip listings you create (route, dates, seats, cost share), booking and trip participation history.

Communication data: messages exchanged with other Users via the Platform's internal chat.

Reviews: content and ratings you leave for other Users.

Technical data: IP address, browser type, operating system, cookie data, access logs, location data (only with your consent).

Analytical data: anonymous data about Platform usage (pages visited, time spent, clicks).

We process your personal data for the following purposes:

Service provision – account registration and management, trip creation and booking, communication between Users (Art. 6(1)(b) GDPR – performance of contract).

Security and moderation – identity verification, fraud detection and prevention, enforcement of Terms (Art. 6(1)(f) GDPR – legitimate interests).

Communication – trip-related email notifications (booking confirmations, cancellations, messages), responding to queries and complaints (Art. 6(1)(b) and (f) GDPR).

Optional data (profile photo, social links) – processed on the basis of your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time.

Legal obligations – data retention as required by law (Art. 6(1)(c) GDPR).

Platform analytics and improvement – anonymous statistical data (Art. 6(1)(f) GDPR).

Your data may be shared with:

Other Users: Your public profile (name, age, photo, description, ratings, declared social links) is visible to logged-in Users considering a shared Trip. Detailed contact data (phone number) is only shared after mutual booking confirmation.

Technical service providers: third-party providers acting on our behalf (hosting, Firebase/Google Cloud, email, analytics), bound by data processing agreements and our instructions.

Public authorities: where required by law or necessary to protect the rights, safety or property of the Controller, Users or third parties.

We do not sell your personal data to any third parties.

Some technical services (e.g., Google Firebase, Google Cloud) may involve transferring data outside the European Economic Area (EEA).

In such cases, transfers occur only to entities ensuring an adequate level of data protection, including through Standard Contractual Clauses approved by the European Commission.

Details of protection mechanisms used by service providers are available in their privacy policies (e.g., Google Privacy Policy: policies.google.com/privacy).

We retain personal data for the following periods:

Account data: for the duration of the Account, and for 30 days after deletion (to allow restoration in case of accidental deletion), unless law requires longer retention.

Trip and booking data: 3 years from the trip date, for potential claims.

Chat messages: 1 year from the date of the message.

Reviews: for the duration of the reviewed User's profile.

Technical data and logs: 12 months.

After these periods, data is permanently deleted or anonymised.

You have the following rights regarding your personal data:

Right of access: you may request information about what data we process and obtain a copy.

Right to rectification: you have the right to have inaccurate or incomplete data corrected.

Right to erasure ('right to be forgotten'): you may request deletion of your data when it is no longer necessary or when you withdraw consent.

Right to restriction: you have the right to request restriction of processing in certain circumstances.

Right to data portability: you have the right to receive your data in a structured, machine-readable format.

Right to object: you may object to processing based on legitimate interests.

Right to withdraw consent: you may withdraw consent at any time without affecting lawfulness of processing before withdrawal.

To exercise your rights, contact us at: support@letsgo.ski. We will respond within 30 days.

If you believe we are processing your data unlawfully, you have the right to lodge a complaint with your local data protection authority (in Poland: Prezes UODO, ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl).

We apply appropriate technical and organisational security measures to protect your data from unauthorised access, loss, disclosure or destruction, including:

• Encrypted communication (HTTPS/TLS),
• Secure password storage (hashing),
• Access limited to authorised personnel,
• Regular security audits and system updates,
• Use of certified cloud infrastructure (Google Firebase).

Despite these measures, no system is 100% secure. In the event of a data breach, we will notify you in accordance with applicable law.

The Platform uses cookies and similar tracking technologies.

Types of cookies:

Essential: required for the Platform to function properly (e.g., login sessions). Do not require consent.

Analytical: collect anonymous usage data (e.g., Google Analytics). Require consent.

Functional: remember your preferences (e.g., selected language). May require consent.

You can manage cookies through your browser settings. Disabling essential cookies may prevent proper Platform use.

The Let's Go! Platform is intended solely for adults (18+). We do not knowingly collect personal data from persons under 18. If you believe we have inadvertently collected a child's data, please contact us immediately at support@letsgo.ski – the data will be deleted.

The Controller reserves the right to amend this Privacy Policy. Users will be notified of material changes by email or in-Platform notification.

The date of the last update is always shown at the top of this document. We recommend reviewing the current version regularly.

For data protection matters:

Email: support@letsgo.ski Platform: letsgo.ski/contact

Our team responds to privacy queries within 30 days.