Privacy policy

1. Who is the data controller

The data controller is Bili (Bilaali Awaadhi), licensed tourist guide, Kiwengwa, Zanzibar, Tanzania. Contact: kontakt@bilinazanzibarze.pl or WhatsApp +255 773 074 876.

The site is technically maintained on the controller's behalf by SILERS — Błaszczykowski Adrian, ul. Stefana Żeromskiego 29, 08-400 Garwolin, Polska (NIP 8261941094) as a data processor (hosting, backups, technical support). The server is located in the European Union.

2. What data we collect and why

Review form: name, e-mail address, city (optional), rating, review text, photo (optional), language, IP address and submission time. We publish the name, city, rating, text and photo — with your consent and after Bili's approval. Your e-mail and IP are never published; they are used to contact you about the review and to prevent abuse (spam, fake entries).

WhatsApp messages: the buttons and the contact form open WhatsApp with a pre-filled message. The site does not store these messages — they go directly to WhatsApp (Meta Platforms) and are subject to its privacy policy. The trip planner runs in your browser and sends nothing to our server.

Server logs: IP address, requested page, browser type and time — standard web server logs kept for up to 30 days for security and diagnostics.

We use no tracking cookies, analytics tools or advertising pixels. The tide table is calculated in your browser.

3. Legal bases

Publishing a review — your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time by writing to kontakt@bilinazanzibarze.pl; withdrawal does not affect processing carried out before it.

Review moderation, abuse prevention and server logs — the controller's legitimate interest (Art. 6(1)(f) GDPR): site security and the integrity of published content.

Replying to your message and arranging a tour — steps prior to a contract taken at your request (Art. 6(1)(b) GDPR).

4. Who receives the data

The hosting provider (SILERS — Błaszczykowski Adrian, ul. Stefana Żeromskiego 29, 08-400 Garwolin, Polska (NIP 8261941094)) — solely for hosting and technical support.

Meta Platforms (WhatsApp) — when you message us on WhatsApp. External services (Facebook, Instagram, TikTok, YouTube) — only when you click a link or play a video; post thumbnails are stored on our server, so merely viewing the site does not connect to those services.

We do not sell data and do not share it for marketing purposes.

5. Transfers outside the European Economic Area

The controller (Bili) operates in Tanzania, so the reviews and messages you send are read outside the EEA. The basis is the necessity for a contract concluded at your request and your consent (Art. 49(1)(a) and (b) GDPR). Data on the server remains in the EU.

6. How long we keep data

Reviews — until you withdraw consent or request deletion. Reviews rejected in moderation are deleted. Server logs — up to 30 days. Photos attached to reviews — as long as the review.

7. Your rights

You have the right to access, rectify, erase and port your data, to restrict processing, to object to processing based on legitimate interest, and to withdraw consent. Just e-mail kontakt@bilinazanzibarze.pl — we will remove a review or photo on request.

You also have the right to lodge a complaint with a supervisory authority — in Poland the President of the Personal Data Protection Office (uodo.gov.pl), or the authority in your EU country.

8. Children

The site is not aimed at children and does not knowingly collect data of persons under 16. Family reviews are submitted by an adult.

9. Changes

This policy may change as the site evolves (e.g. if visit statistics are added — a consent prompt will appear then). The current version is always at this address, with the update date at the top.