Privacy Policy

This document sets out the privacy rules applicable to the entryhop.com website — https://entryhop.com/ — regarding the collection, processing and use of personal data obtained by the Data Controller.

Personal data is processed in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, "GDPR").

Pursuant to Article 4(7) GDPR, the Data Controller is ENTRIO spółka z ograniczoną odpowiedzialnością, ul. Zagórna 28, 37-420 Kopki, woj. podkarpackie, Polska, support@entryhop.com.

The Data Controller makes every effort to protect the privacy and data of the website's users.

Personal data is processed in accordance with Article 5 GDPR. It will be:

• processed lawfully, fairly and in a transparent manner ("lawfulness, fairness and transparency");
• collected for specified, explicit and legitimate purposes ("purpose limitation");
• adequate, relevant and limited to what is necessary ("data minimisation");
• accurate and, where necessary, kept up to date ("accuracy");
• kept in a form that permits identification of data subjects for no longer than necessary ("storage limitation");
• processed in a manner that ensures appropriate security ("integrity and confidentiality").

We use your personal data only when one of the following grounds applies: you have given consent; it is necessary to perform a contract; we must comply with a legal obligation; we must protect vital interests; it is necessary in the public interest; or we have a legitimate interest.

Categories of personal data:

• Identification data: first name, last name, date of birth, sex — necessary to identify the traveler.
• Contact data: email address, phone number — to deliver documents and contact you.
• Passport data: passport number, issuing country, expiry date — to complete the application correctly.
• Travel information: arrival date, planned stay, purpose of visit, destination country.
• Device information: device type, operating system, browser type, IP address, advertising identifier.
• Payment data (we do not store this information).

The legal basis derives from the GDPR:

• Article 6(1)(a) — processing based on consent.
• Article 6(1)(b) — processing necessary to perform a contract or to take steps prior to entering into one.
• Article 6(1)(c) — processing necessary to comply with a legal obligation.
• Article 6(1)(f) — processing necessary for the purposes of legitimate interests.

The primary basis for processing customer data is the necessity to perform a contract (Article 6(1)(b) GDPR).

Data is processed only for as long as necessary to achieve the stated purpose. It is then irreversibly deleted or destroyed.

Data processed on the basis of consent is processed until consent is withdrawn.

We process data for the duration of the contract and for the limitation period for claims under the Polish Civil Code.

Your personal data, including passport data, is used solely to submit your travel document application to the relevant government authorities.

Our commitments regarding your data:

• We do NOT sell your personal data.
• We do NOT share your data for advertising purposes.
• We transfer data only to the official government systems of the destination country.
• No unnecessary retention — we keep data only as long as needed to provide our services and meet legal obligations.

Specific use of sensitive data:

• Passport number and passport data — transmitted over secure, encrypted connections directly to official government portals.
• Date of birth and identity data — transmitted only to government systems for identity verification.
• Travel dates and itinerary — shared only with immigration authorities where required.
• Email address — used to deliver approved travel documents and essential communications; never shared with third parties for marketing.

We take the security of your personal data seriously and have implemented comprehensive technical and organizational measures:

• SSL/TLS encryption: data between your browser and our servers is encrypted using industry-standard 256-bit SSL/TLS encryption.
• Secure payment processing: handled by PCI DSS compliant PayPal systems; we never store credit card data.
• Access control: access is restricted to authorized personnel only.
• Secure data transmission: encrypted API connections when submitting applications to government systems.
• Regular security audits: systems are reviewed regularly to identify and remediate vulnerabilities.
• Data minimization: we collect only the data necessary to deliver the service.

Important: no method of transmitting data over the internet is 100% secure. We apply widely accepted data protection measures and continuously improve our practices.

Recipients of data may include entities performing tasks on behalf of the Data Controller: employees, contractors, accounting firms, IT service providers, payment operators, banks, marketing service providers, telecommunications operators, law firms and authorized state bodies.

Administrative authorities of destination countries (e.g. Thailand, Singapore, Aruba) receive data in order to process digital arrival card applications.

Where data is transferred outside the EEA, the Data Controller applies the safeguards required by Chapter V GDPR, including standard contractual clauses adopted by the European Commission.

You have the right to:

• access your personal data (Article 15 GDPR);
• rectify your personal data (Article 16 GDPR);
• erasure of your personal data — the "right to be forgotten" (Article 17 GDPR);
• restrict processing (Article 18 GDPR);
• data portability (Article 20 GDPR);
• object to processing (Article 21 GDPR).

If you believe that processing violates the GDPR, you may lodge a complaint with the President of the Polish Personal Data Protection Office (UODO).

Consent may be withdrawn at any time; withdrawal does not affect the lawfulness of processing carried out before it was withdrawn.

Cookies are small text files sent by a server and stored on the user's device in connection with the use of the website.

Cookies are used to ensure the website works properly and to improve the user experience. They are safe for users' devices.

Types of cookies:

• Session cookies — stored until the browser session ends.
• Persistent cookies — stored until they are deleted.

Cookies by purpose:

• Essential — required for the website to function properly.
• Statistical — allow us to analyze traffic and user preferences.
• Marketing — allow us to tailor content and advertising.

Users may change their cookie settings at any time. Restricting cookies may affect some functionality.

We use: Google Analytics, Google Ads, PayPal.

We reserve the right to change or modify the Privacy Policy and Cookie Policy. Changes will be published on the home page.

This version is effective as of February 4, 2026.