Last updated: 30 April 2026
This Privacy Policy explains how Sonder Services collects, uses, and protects personal data when you visit travissonder.com or engage our services. We comply with the EU General Data Protection Regulation (GDPR) and Polish data protection law.
1. Who is the data controller
The data controller is Sonder Services, a sole proprietorship registered in Poland.
- Proprietor: Travis Sonder
- Address: Sliczna 30B, 31-444 Krakow, Poland
- NIP: PL94522917262
- Email: contact@travissonder.com
- Phone: +48 798 582 916
For any privacy question or to exercise your rights, contact us using the details above.
2. What data we collect and why
Contact form submissions
When you fill in a contact form on our Website, we collect the information you provide, typically your name, email address, phone number, and the contents of your message.
- Purpose: to respond to your enquiry and, if relevant, to discuss and provide our services.
- Legal basis: taking steps at your request prior to entering a contract (Article 6(1)(b) GDPR), and our legitimate interest in responding to business enquiries (Article 6(1)(f) GDPR).
- Retention: we keep enquiry data for up to 24 months after the last contact, unless you become a client (in which case it is retained for the duration of the engagement plus the periods stated below).
Client data
If you become a client, we process information necessary to deliver the services and meet legal obligations: business name, contact details, billing information, NIP/VAT number, communications, and access credentials to your advertising accounts.
- Purpose: performance of the contract, invoicing, and accounting.
- Legal basis: performance of a contract (Article 6(1)(b) GDPR) and compliance with legal obligations such as tax law (Article 6(1)(c) GDPR).
- Retention: for the duration of the engagement plus the period required by Polish tax and accounting law (currently 5 years from the end of the relevant tax year for invoices and accounting records).
Website usage data (analytics and advertising)
If you give consent through our cookie banner, we use Google Analytics and Google Ads conversion tracking to understand how the Website is used and to measure the performance of our advertising. This involves cookies and may include pseudonymous identifiers, IP address, device and browser information, pages visited, and referral source.
- Purpose: to analyse Website performance and measure advertising effectiveness.
- Legal basis: your consent (Article 6(1)(a) GDPR), which you can withdraw at any time.
- Retention: as set by Google Analytics (default 14 months) and your cookie preferences.
Server logs
Our hosting provider automatically logs basic technical data (IP address, request time, user agent) for security and infrastructure purposes.
- Legal basis: our legitimate interest in maintaining a secure, functioning website (Article 6(1)(f) GDPR).
- Retention: typically 30 to 90 days, depending on the hosting provider's policy.
3. Cookies
We use the following categories of cookies:
- Strictly necessary cookies: required for the Website to function. These do not require consent.
- Analytics cookies (Google Analytics): help us understand how visitors use the Website. Set only with your consent.
- Advertising cookies (Google Ads): measure conversions and the performance of our ad campaigns. Set only with your consent.
You can accept or reject non-essential cookies via the cookie banner shown on your first visit, and you can change your choice at any time using the cookie settings link in the Website footer. You can also block or delete cookies through your browser settings.
4. Who we share data with
We do not sell your personal data. We share it only with the following categories of recipients, and only as necessary:
- Hosting provider: Hostinger International Ltd, which hosts the Website and stores form submissions.
- Google (Google Ireland Ltd / Google LLC): for Google Analytics, Google Ads, and Google Search Console. Where data is transferred outside the EEA, transfers rely on the EU-US Data Privacy Framework or Standard Contractual Clauses.
- Accountant and tax authorities: for invoicing and statutory reporting.
- Professional advisors: for example, lawyers, where strictly necessary.
- Authorities: where required by law.
5. International data transfers
Some of our service providers (notably Google) process data outside the European Economic Area. Where this happens, we rely on appropriate safeguards under GDPR, including the EU-US Data Privacy Framework and Standard Contractual Clauses, to ensure your data receives an adequate level of protection.
6. Your rights
Under GDPR, you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Request deletion of your data ("right to be forgotten"), subject to legal retention obligations.
- Restrict or object to processing.
- Receive your data in a portable format.
- Withdraw consent at any time, where processing is based on consent.
- Lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), uodo.gov.pl.
To exercise any of these rights, email contact@travissonder.com. We will respond within one month.
7. Data security
We use appropriate technical and organisational measures to protect personal data, including secure hosting, HTTPS encryption in transit, access controls, and limiting access to those who need it. No system is completely secure, but we take reasonable steps to prevent unauthorised access, loss, or disclosure.
8. Children
Our services are aimed at businesses, not children. We do not knowingly collect personal data from anyone under 16.
9. Changes to this Policy
We may update this Privacy Policy from time to time. The current version is always published on this page with the "last updated" date at the top. Material changes will be highlighted on the Website.
10. Contact
Privacy questions or requests? Email contact@travissonder.com or write to Sonder Services, Sliczna 30B, 31-444 Krakow, Poland.