Privacy policy
Last updated: 16 October 2026
1. Data controller
The controller of your personal data is VENITY Tomasz Dąbrowski, ul. Zielone Zacisze 3/93, 03-294 Warszawa, Poland, Polish tax ID (NIP) 5631530460, e-mail: tomek@fernity.com, phone +48 501 300 287. The IceDrive brand and the icedrive.eu site belong to this business.
2. What data we collect
Through the sign-up form we collect: your first name and surname, e-mail address, optionally a phone number, the date and port you picked, the number of passengers, and anything you write in the notes. If you choose to buy through a company, invoice details follow: VAT ID, company name and address. When you submit the form, we also record your IP address and browser information. Data also reaches us when you write or call. Separately from the form, every time you open the site the server automatically logs your IP address, the date and time, the address requested, your browser name and the page you came from. That is how every web server works.
3. Purpose and legal basis
We answer your enquiry, prepare an offer and handle your sign-up, and once you book, we perform the contract (Art. 6(1)(b) GDPR). We issue invoices and keep accounts because the law requires it (point (c)). On the basis of our legitimate interest (point (f)), we contact you about our offer and the sale of our trips, protect the form against spam, keep the server secure (logs) and, if it comes to that, pursue or defend legal claims. Where we ask for your consent, that consent is the legal basis (point (a)). We do not send newsletters without your explicit consent, and we do not pass your data to anyone for marketing.
4. Do you have to provide your data?
Providing your data is voluntary, but without it we cannot accept a booking. To sign up for a trip, your first name, surname and e-mail address are required, and when buying through a company, the invoice details as well. We do not make decisions about you based solely on automated processing, and we do not profile you. The form itself only checks whether there are free places on the date you picked; whether you are accepted for the trip is our decision.
5. Cookies and analytics
This site sets no cookies and carries no analytics tools or advertising pixels. We embed no third-party scripts — fonts, photos and video are served from our own server, so opening this page does not connect you to Google, Meta or anyone else. We do not build a profile of you and do not track you across sites.
6. Where your data is stored and who we share it with
The site, the form handling (n8n) and the enquiry database run on our own server, which we rent from Hetzner Online GmbH in a data centre in the EU. We use no third-party form services. Enquiry notifications and e-mail correspondence go through Google mail (Gmail), so Google processes them as our processor; this may mean a transfer of data to the USA under the EU-U.S. Data Privacy Framework or standard contractual clauses. Running the trip means passing participant details to the parties that deliver parts of it: hotels in Sweden, the ferry operator and the partner running the ice tracks. We pass on only what a booking requires. Our accountants also see the data to the extent tax law requires.
7. How long we keep it
Data related to a booking, contract and invoice is kept for 5 years from the end of the year in which the tax obligation arose. Enquiries that did not lead to a booking are deleted after the season they concerned. Server logs are overwritten automatically, usually after a few weeks and at the latest after a few months. Data processed on the basis of consent is kept until you withdraw it.
8. Your rights
You have the right to access your data, to rectify or erase it, to restrict its processing and to data portability. You may also object to processing based on our legitimate interest. You can withdraw your consent at any time; this does not affect the lawfulness of processing carried out before the withdrawal. You have the right to lodge a complaint with a supervisory authority: in Poland this is the President of the Personal Data Protection Office (UODO), but you may also file it in the EU country where you live or work, or where the infringement took place (Art. 77 GDPR).
9. Contact
For anything concerning personal data, write to tomek@fernity.com — we answer every message.