Privacy policy and personal data protection

for users of the mobile application "Transport GZM"

Definitions:

1. ZTM – Zarząd Transportu Metropolitalnego, ul. Barbary 21a, 40-053 Katowice, telephone number: +48 32 743 84 37; e-mail kancelaria@metropoliaztm.pl.
2. „Transport GZM" application – a mobile application smartphone users.
3. GDPR - Charter of the European Parliament and of the Council (EU) 2016/679 of 27/04/2016 on the protection of personal data, with regard to the processing of personal data and on the free movement of such data, and repealing the directive 95/46/EC.

Detailed provisions:

1. Who is the data controller of your personal data?

The data controller of the personal data, within the meaning of art. 4 point 7 of the GDPR, for services provided by the "Transport GZM" application is ZTM.

2. Contact to the data protection officer:

You can contact the data protection officer by e-mail at the following address: iod@metropoliaztm.pl or by traditional mail to the address of ZTM.

3. For what purpose do we process your data:

1. so that you can use the functionality of the "Transport GZM" application, such reporting a complaint, viewing the history of „Transport GZM" operations, purchase of an electronic ticket, blocking the application „Transport GZM",
2. to defend against any claims or pursue any claims,
3. so that you can take advantage of the facilieties in the functionalities „Podróż Start /  Stop",
4. requesting an invoice,
5. refund when account is closed.

4. On what legal basis do we process your data?
   1. on the basis of the concluded contract for the use of a „Transport GZM" (Article 6 1. (b) of the GDPR),
   2. on the basis of the legitimate interest of ZTM, which is the defense against possible claims or the pursuit of possible claims (Article 6 1.(f) of GDPR),
   3. on the basis of the consent for obtaining location data of the user in case of optional information about actual position shown on the map and optional information about current stop shown during „Podróż Start/ Stop".

5. Who can we disclose your personal data to?
   1. entities to which ZTM contracts services related to data processing, in particular entities providing IT services to ZTM necessary for the operation of the "Transport GZM" application or in the field of electronic correspondence,
   2. authorized persons, in particular ZTM employees,
   3. payment processors,
   4. the postal operator or courier in the field of paper correspondence.

6. When and what data do you need to provide?

1. to log in you must enter e-mail adres and password for „Transport GZM" application,
2. to make a complaint, depending on your expectations, you must provide address or bank account number and Your identification and contact details,
3. when requesting an invoice you must provide name, surename, company name and address data, NIP number,
4. when account is closed you must to provide bank account for refund.

7. Requirements to provide data and consequences of failure to provide data:

1. in the event of a complaint, logging, providing the data indicated on the forms is a contractual requirement, if you do not provide them, the complaint will not be considered,
2. to use full functionality of "Podróż Start / Stop" or localization on map, you need to provide data about your location, without providing it, you will only be able to use the basic functionality.

8.  Your rights:

1. access to data (insight, getting acquainted with the data, obtain a copy of the data),
2. demand rectification (correcting/updating them),
3. erasure requests,
4. withdrawal of consent in the event it was given (reporting malfunction or "Podróż Start /  Stop" functionality), at any time without affecting the lawfulness of processing based on consent before its withdrawal,
5. requests to limit processing of your personal data (e.g. limitations only to storage),
6. object to processing of your personal data in the scope of reporting malfunction or defense or pursuing claims,
7. bring a complaint to supervisory authorithy which is Prezes Urzędu Ochrony Danych (The President of the Personal Data Protection Office).

9. How long will we process your personal data:

1. the data provided in the complaint will be stored for a period of at least 5 years from the end of the contract or for the period of establishing, investigating or defending claims or for expressing effective objection,
2. the data provided in the malfunction report will be stored in accordance with the requirements of the law or for the duration of the determination, investigation or defense of claims or until effective objection,
3. location data provided in the scope of the "Podróż Start / Stop" functionality will be processed for the duration of the request and will not be stored.