Zdążę app privacy policy
This is an English translation provided for convenience. In case of any discrepancy, the Polish version prevails.
§1. Data controller
The data controller is Aleksander Kowalski, running a business under the name Byte Solutions, tax ID (NIP): 6112831525, REGON: 527536920, e-mail: [email protected] (“the Controller”, “we”).
This privacy policy applies to the Zdążę mobile application (“the App”), available for iOS and Android.
§2. Scope of data processed
The Zdążę App does not collect, store or process any personal data of its users on its own infrastructure. We use no analytics, statistics or advertising tools and no tracking or profiling mechanisms of any kind. The App requires no account and no sign-in.
§3. Connections to external servers
To show passenger information and the map, the App connects directly from the user’s device, without going through our servers, to the following external services.
3.1 Timetables and vehicle positions
The App downloads data in the GTFS/GTFS-Realtime format from gtfs.legnica.eu, run by the Municipality of Legnica (Gmina Legnica). This means your IP address and the time of the request are visible to the operator of that service every time the App refreshes its data. We have no access to or control over this information; the privacy policy of the Municipality of Legnica applies.
3.2 Map
To display the map, the App downloads map tiles directly from tile.openstreetmap.org, run by the OpenStreetMap Foundation, based on OpenStreetMap data (© OpenStreetMap contributors), and map label fonts from fonts.openmaptiles.org (the OpenMapTiles project). Downloading tiles and fonts sends your IP address to these servers. We have no influence on how their operators process this data; the OpenStreetMap Foundation privacy policy applies.
3.3 Address search
When you type an address or place name in the App, the text you enter and your IP address are sent to the nominatim.openstreetmap.org search service, run by the OpenStreetMap Foundation. We do not store these queries; the OpenStreetMap Foundation privacy policy applies.
§4. Device permissions
- Location (GPS). The App detects your location automatically to show the nearest stops and plan your route. Location data is processed only locally on your device; it is neither sent to nor stored by us.
- Notifications. The App may send local push notifications (for example, a get-off reminder). These notifications are generated locally on the device and do not require sending any data to our servers.
You can revoke these permissions at any time in your device’s system settings; this may, however, limit the App’s functionality.
§5. Legal basis and purpose of processing
To the extent that we might process any personal data (for example, in e-mail correspondence about a report or a question), the legal basis is Article 6(1)(f) GDPR: our legitimate interest in handling reports and ensuring the proper operation and development of the App.
§6. Retention period
We do not store personal data of App users. We keep e-mail correspondence for as long as needed to handle the report, and no longer than the limitation period for any claims (3 years).
§7. Recipients of data
Apart from the parties listed in §3 (the Municipality of Legnica, the OpenStreetMap Foundation and the OpenMapTiles font server), we do not share any data with other recipients.
§8. Your rights
In connection with any processing of personal data, you have the following rights under the GDPR:
- the right of access: you can obtain information about the data processed,
- the right to rectification: you can request correction of inaccurate data,
- the right to erasure: you can request deletion of data,
- the right to restriction of processing,
- the right to data portability,
- the right to object to processing based on legitimate interest.
To exercise these rights, contact us at [email protected].
You also have the right to lodge a complaint with the supervisory authority: the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland.
§9. Security
Because the App does not collect personal data on its own infrastructure, the risk related to storing such data is kept to a minimum. Communication with the servers listed in §3 uses encrypted connections (HTTPS) wherever the provider’s servers support them.
§10. Changes to this privacy policy
We reserve the right to change this privacy policy. We will announce significant changes by publishing a new version of this document, with its update date, on zdaze.pl and in the App’s descriptions in the App Store and Google Play.
§11. Contact
For any questions about this privacy policy, please contact us at [email protected].