Skip to content

How it works. The planner estimates your budget; flights, hotels and cars are booked at our partners, under their prices and terms.

Holiday System

Privacy

Privacy policy

We collect what the plan needs and nothing more: no card data, no marketing without consent, export and deletion in one click.

Controller

The controller is the operator of holidaysystem.pl. Registration details will be added to the terms; please contact us through the request form.

What we collect and why

Planner interview answers (destination, dates, travellers, budget, preferences) — to build the variants and estimate the budget.

E-mail and first name — for the account: saving a plan, sharing it by link and opening it on another device.

Request content and e-mail address — to answer your question.

Usage events (e.g. planning started) — only with your consent, without marketing profiling.

Where the data lives

Account, saved plans and requests — in a PostgreSQL database (Neon) in the European Union region.

The working plan, your language and currency choice and your consent decision — in your browser. After sign-in the session is kept in an httpOnly cookie.

Planner with an AI model

When the planner uses a language model, we send only the interview answers (destination, dates, budget, preferences) to the model provider — never your contact details. The answer of the model is used only to build the variants.

What we never do

We take no payments, so we never hold card data. We do not sell data and we do not send marketing without separate, informed consent.

Your rights

Access, rectification, export, deletion of the account and data, objection, withdrawal of consent. Your account has Export data and Delete account buttons under Preferences and privacy.

Processors

Hosting and CDN (Vercel), database (Neon), e-mail delivery (Resend) — under data processing agreements. Search partners act as independent controllers.

Booking partners

When you use a partner search (Travelpayouts, Booking.com, EconomyBookings), your search parameters — route, dates, number of travellers — are processed by that partner as an independent controller, under their privacy policy.

Booking and payment happen entirely at the seller. We do not receive your booking or payment data; we may receive anonymous statistics and an affiliate commission.

Retention and security

We keep data no longer than necessary. Passwords are stored as hashes, secrets stay on the server, traffic is encrypted and the event log holds no personal data.

Updated: September 2026