Practical tips for your Madeira holiday – a personal guide to the island
Trail status
Planning

Before you go

Getting there and around

Accommodation and travel

When to go

Things to do

Highlights

Towns

Islands

Trails and levadas

Before you set off

Trails

Levadas

Food and drink

Dishes

Sweets

Drinks

Live

Weather and views

Flights and trails

Trail status
Wersja polska
Practical tips for your Madeira holiday. A personal guide to the island.

Privacy policy

This page explains what data the Madeira-Planner.com website collects, why I process it, on what legal basis, and what rights you have as a result. Twelve points, no small print.

Last updated: 11 October 2026

1. General information

The controller of your personal data is Ms. Fox Ewelina Podrez-Siama, Polish tax ID (NIP) 8951886757 (“I”, “me”). This policy covers the madeira-planner.com website (the “Website”) and the data you give me through the contact form, comments or e-mail.

For anything to do with personal data, write to kontakt@ms-fox.pl.

I process data in accordance with the GDPR, i.e. Regulation (EU) 2016/679 of the European Parliament and of the Council, and other applicable laws, in particular Polish law on data protection and electronic communications.

2. What data I collect

The data I collect depends on how you use the Website.

  • Contact form and e-mail – your name or signature, e-mail address and whatever you include in your message.
  • Comments – the name you sign with, your e-mail address (not published), optionally a website address, the content of the comment, the date it was posted, and your IP address and browser information, which are stored to protect against spam.
  • Technical data and server logs – including IP address, date and time of the connection, the address of the page visited, information about your browser, device or operating system, and other data needed to run and secure the Website.
  • Analytics data – information about how you use the Website, collected through Google Analytics 4 in line with your cookie choices.
  • Data related to affiliate links – when you click an affiliate link, e.g. to GetYourGuide (tours and tickets) or Travelpayouts (including accommodation, car hire, transfers and AirHelp), the affiliate programme provider may record that you came from the Website in order to calculate the commission.
  • Privacy preferences – a record of whether you gave, refused or withdrew consent to cookies.
  • Data related to third-party content – if you load embedded third-party content (e.g. a live webcam, a map, a video or a tours widget), its provider may receive, among other things, your IP address, information about your device and browser, and data about your interaction with that content.

Providing data is voluntary, but some of it is necessary for me to reply to your message or publish your comment.

  • replying to messages and handling correspondence, including about partnerships – on the basis of my legitimate interest in communicating (Art. 6(1)(f) GDPR), and where the correspondence concerns entering into a contract – Art. 6(1)(b) GDPR;
  • entering into and performing a contract, e.g. an advertising partnership – Art. 6(1)(b) GDPR;
  • publishing and moderating comments and protecting against spam – my legitimate interest in hosting discussion under posts and keeping the Website secure (Art. 6(1)(f) GDPR);
  • keeping Website statistics with Google Analytics 4 – on the basis of your consent (Art. 6(1)(a) GDPR and Art. 399 of the Polish Electronic Communications Law);
  • settling commission from affiliate programmes – my legitimate interest in funding the Website (Art. 6(1)(f) GDPR); the click data itself is collected and processed by the programme provider;
  • managing cookie preferences – compliance with legal obligations (Art. 6(1)(c) GDPR) and my legitimate interest in being able to demonstrate compliance with the law (Art. 6(1)(f) GDPR);
  • keeping the Website secure, detecting errors and abuse, and analysing technical logs – my legitimate interest (Art. 6(1)(f) GDPR);
  • accounting and tax settlements and other legal obligations – Art. 6(1)(c) GDPR;
  • establishing, pursuing or defending against claims – my legitimate interest (Art. 6(1)(f) GDPR).

Where processing is based on consent, you can withdraw it at any time. Withdrawing consent does not affect the lawfulness of processing carried out before it was withdrawn.

4. How long I keep data

I don’t keep data for longer than is needed for the purpose for which it was collected.

  • Correspondence – for as long as needed to handle the correspondence or partnership, and then for a period justified by the need to show how the communication went or to defend against claims, no longer than the relevant limitation periods.
  • Comments – until the comment is deleted (you can ask me to do this) or the Website closes.
  • Contract-related data – for the duration of the contract, and then for as long as the law requires or as needed to secure any possible claims.
  • Accounting and tax records – for the period required by law.
  • Server logs and security-related data – as a rule no longer than 12 months, unless longer storage is necessary, e.g. because of a security incident.
  • Cookies and analytics data – for the lifetime of the mechanism in question, in line with the tool’s settings and your choices.

5. Who receives the data

I don’t sell data. I may share it with providers to the extent needed to run the Website, keep it secure and keep statistics, in particular:

  • the hosting and IT infrastructure provider,
  • e-mail and cloud service providers, including Google Ireland Ltd.,
  • Google Ireland Ltd. in connection with Google Analytics 4 (the Google tag added by the Site Kit by Google plugin), Google Fonts, Google Maps and YouTube videos,
  • Automattic Inc. in connection with the Gravatar service (displaying avatars next to comments based on a hash of the e-mail address),
  • the provider of the Cookie Notice plugin in connection with managing cookie consent,
  • affiliate programme and widget providers: GetYourGuide Deutschland GmbH and Travelpayouts (Go Travel Un Limited), together with the partners their links lead to (e.g. Booking.com, DiscoverCars, Kiwitaxi, AirHelp) – limited to data about your visit coming from the Website,
  • Windy.com (Windyty SE) in connection with webcams and weather maps, and Open-Meteo in connection with the forecast in the flight disruption risk calculator,
  • providers of accounting and invoicing systems, and my accounting office,
  • professional advisers and providers of IT or technical services.

Where a provider processes data on my behalf, I entrust it with data only to the extent necessary. Some recipients, e.g. affiliate programme providers or professional advisers, act as separate controllers. Data may also be disclosed to public authorities or courts where required by law.

6. Transfers outside the EEA

Some service providers – in particular Google, Automattic, Windy and Travelpayouts – use infrastructure located outside the European Economic Area, in particular in the United States. Data is transferred outside the EEA only where there is an appropriate legal basis under the GDPR, in particular a European Commission decision finding an adequate level of protection (including the EU–US Data Privacy Framework) or standard contractual clauses approved by the European Commission. You can find out more about the safeguards used by writing to kontakt@ms-fox.pl.

7. Cookies

Cookies and similar technologies, such as your browser’s local storage, make it possible to store information on your device or to access information already stored on it. The Website may use the following cookies:

  • essential – needed for the Website to work properly and securely, to remember your privacy settings and to handle comments; in the cases set out in Art. 399(3) of the Polish Electronic Communications Law they do not require consent;
  • analytics – help me understand how readers use the Website and produce statistics;
  • affiliate – stored by affiliate programme providers after you click an affiliate link, so that the commission can be attributed;
  • third-party content – may be stored by the providers of embedded webcams, maps, videos and widgets when that content loads on the page.

On your first visit you can accept or reject optional cookies in the banner. You can change your decision later by clicking the cookie icon in the corner of the page, and you can also delete or block cookies in your browser settings. Restricting essential cookies may stop some features of the Website from working properly.

Google Analytics 4

I use Google Analytics 4, which for users in the EEA is provided by Google Ireland Ltd. The Google tag is added by the Site Kit by Google plugin and is used to produce visit statistics. Until you click “Accept”, the tag runs in no-consent mode (Google Consent Mode) and does not store analytics cookies. Once you consent, Google Analytics may use pseudonymous identifiers stored, among other places, in the _ga and _ga_* cookies to tell devices and visits apart. According to Google, the IP address may be used to determine approximate location, but it is not logged or stored by Google Analytics. Google offers a browser add-on that blocks Google Analytics.

Some of the guides contain partner links and widgets: GetYourGuide (tours and tickets) and Travelpayouts (including accommodation, car hire, transfers and AirHelp). These are affiliate links – if you book something after clicking one, I may earn a commission, and the price you pay stays the same. After you click, the programme provider records that you came from here (e.g. in cookies or link parameters) and processes the data in line with its own privacy policy. Partner widgets load from the provider’s servers, and the provider may receive technical data about your device.

Webcams, maps, weather and video

The Website embeds third-party content: Windy.com webcams and weather maps, YouTube videos (in privacy-enhanced mode, youtube-nocookie.com), Google Maps and GetYourGuide tour widgets. These load from their providers’ servers, which then receive, among other things, your IP address and browser information, and some of them may store their own cookies. They process this data in line with their own privacy policies.

The flight disruption risk calculator and the page about Madeira’s airport in Funchal fetch the weather forecast from Open-Meteo directly from your browser, so the Open-Meteo server receives your IP address and browser information. I don’t pass any other data to it.

Comments and Gravatar

Everyone’s first comment waits for my approval, and comments with several links go to moderation. An avatar from the Gravatar service (Automattic Inc.) may appear next to a comment; for this, a hash of the e-mail address is sent to the service.

Website security

To protect the Website against attacks and unauthorised log-ins, I use security tools that analyse, among other things, IP addresses and information about requests sent to the server.

9. Security

I use technical and organisational measures appropriate to the nature of the data processed and the risks involved, in particular an encrypted HTTPS connection, access control to the admin panel and backups. That said, no method of transmitting or storing data can guarantee absolute security.

If you receive a message claiming to be from Madeira Planner with an unusual request for a password, payment card details or other confidential information, contact me through a different channel before doing anything.

10. Social media and external websites

The Website links to my profiles on Facebook, Instagram, YouTube, LinkedIn and Flickr. If you visit these profiles or interact with them, the operator of the platform processes your data under its own rules. For some of the statistics made available to profile owners, I may act as a joint controller together with the platform operator.

The Website contains links to external websites, including my other websites. Once you go to such a site, its operator’s privacy policy applies.

11. Your rights

Depending on the legal basis and circumstances of the processing, you may have the right to:

  • access your data and receive a copy of it,
  • have inaccurate data corrected,
  • have your data erased, including your comment,
  • restrict processing,
  • data portability – where processing is carried out by automated means on the basis of consent or a contract,
  • object to processing based on my legitimate interest,
  • withdraw consent at any time, where processing is based on consent.

To exercise your rights, write to kontakt@ms-fox.pl. I’ll reply without undue delay and, as a rule, within one month. If a request is complex, the GDPR allows this period to be extended by a further two months – in that case I’ll let you know, with the reasons. If I have reasonable doubts about the identity of the person making the request, I may ask for additional information.

You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stanisława Moniuszki 1A, 00-014 Warsaw, Poland.

I don’t make decisions about you based solely on automated processing that would produce legal effects concerning you or similarly significantly affect you.

12. Changes to this policy

I may update this policy if the tools I use, the way data is processed or the law change. The current version is published on this page, and you’ll find the date of the last update at the top.

Questions, or requests for access to, correction or erasure of your data? Write to kontakt@ms-fox.pl.

Comments are closed