PRIVACY POLICY AND COOKIE POLICY
Effective from 29.09.2021
Busbus sp. z o. o. respects the right to privacy of its users and is committed to protecting their personal data by implementing appropriate organizational and technical solutions to prevent third parties from interfering with user privacy. Our actions are aimed at guaranteeing users a complete sense of security at a level appropriate to applicable law, including:
- Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation);
- The Act of 18 July 2002 on the provision of services electronically;
- The Act of 16 July 2004 – Telecommunications Law.
Below we present a detailed Privacy Policy and Cookie Policy for the Busbus service.
Privacy Policy and Cookie Policy for the Busbus service
This document concerns the processing and protection of personal data relating to Users of the service: www.busbus.pl, www.busbus.eu and location.busbus.eu (hereinafter "Service").
We inform you that within the Service, external links may be placed enabling Users to directly access other websites. Cookies from other entities may also be placed on the device, in particular from providers such as: Facebook, Google+, to enable the use of Service functionalities integrated with these services. Each provider determines the rules for using cookies in its privacy policy, therefore we have no control over the privacy policy and cookie use conducted by providers. We recommend that each User review the document concerning the privacy policy and cookie use on individual services.
Cooperation with and use of the Service may require the provision of personal data. We keep the collected data in strict confidence and use it only for the purposes we have informed you about.
Data Controller and Data Protection Officer
The controller of data concerning Users collected using the Service is: Busbus Sp. z o.o. based in Lesko, address ul. Mickiewicza 17, 38-600 Lesko registered in the business register of the National Court Register by the District Court in Rzeszów, XII Commercial Department of the National Court Register under number 0000810903, holding NIP: 5170402786.
Registration and login
Using the service requires registration. During registration, we ask you to provide personal data necessary to use the Service. After registering in the Service, we will process the data provided during registration in order to provide the services described in the Service Terms and Conditions.
After expressing consent, we will also process the provided data for marketing purposes of our own and our Partners or other cooperating entities.
Registration and login via Facebook and Google
Registration and login to the Service is also possible via Facebook and Google accounts. Authentication takes place on the Facebook and Google page. Information appears there about what data is being transferred to us – this is data from the public profile, primarily the email address. This is data that is necessary and sufficient to identify and securely create an account in Busbus.
We do not have access to Facebook and Google accounts, in particular to publish any content on them. Information about how Facebook and Google use data is available in Facebook's and Google's Privacy Policy.
After deleting your Facebook and Google account, we are not notified. Data provided during registration using this service remains in our databases.
Automatically collected data
When using Busbus and applications connected with the Service, data will be collected automatically. These include:
- IP address,
- URL of the request,
- domain name,
- device identifier
- browser type,
- browser language,
- number of clicks,
- time spent on individual pages,
- date and time of using the Service,
- type and version of operating system,
- screen resolution,
- data collected in server logs
as well as other similar information.
Purposes of processing automatically collected data
We will use the above data to transmit messages in the Service, as well as to provide the service.
Independently of the above, we will use automatically collected data to personalize content and offers on our service, which will take place within our Service and as part of remarketing.
Automatically collected data will also be used to analyze traffic on our pages, measure advertising effectiveness and measure the popularity of the Service, its individual sections and individual materials posted on them. This data will also be used for market research and opinion research.
Location information
Depending on the privacy settings of the device, we automatically collect and process information about its current location. To determine location, we use various technologies, including IP address, GPS, Wi-Fi access points and mobile phone base stations. Location data allows displaying and viewing nearby offers and remarketing activities.
Other data
Data provided for the purpose of concluding a contract will be processed for the purpose of concluding the contract and then for its performance, if the contract is concluded.
However, it may happen that during contact with the Service due to the specifics of the request or inquiry, we will need to collect additional data. Providing the above data is not mandatory, but is necessary to perform the action or obtain information. The data mentioned above will be processed for the purpose of performing the requested actions or transmitting information.
ON WHAT BASIS DO WE PROCESS DATA?
All data we collect is processed in accordance with the purpose for which it was collected and on the basis of appropriate legal provisions. The legal basis authorizing us to process personal data may be:
- Processing data based on consent
Whenever we ask for consent to process personal data, the legal basis authorizing us to process data will be the User's consent.
We will ask for consent to process, including profiling by us and our Partners, personal data stored in cookies and similar technologies used by us and our Partners for marketing purposes, including analytics for marketing purposes and displaying personalized offers, advertisements and other services in the Service and on the Internet. Consent will apply to the actions we are taking on behalf of our advertisers and will relate to the marketing activities of our Partners.
After expressing consent, we will also send/provide via mail, telephone or electronically commercial information about our services or services of our Partners or cooperating entities.
Processing data based on contract
We will process User data when it is necessary to conclude a contract to which they are a party or when it is necessary to take action at their request before concluding the contract.
Using the services offered through the Service is equivalent to concluding an agreement for the provision of services electronically. In cases where we collect data that is necessary to provide the services indicated in the Service Terms and Conditions, such data will be processed by us on the basis of the contract.
- Legal obligation;
In certain special situations, we must process data due to the need to fulfill our legal obligations. These will be situations where we must retain data, for example, data resulting from issued invoices for tax and accounting reasons.
- Legitimate interests pursued by us or a third party
User data will be processed by us when necessary for purposes resulting from legitimate interests pursued by us or third parties.
However, we will not process personal data in a situation where it becomes apparent that the paramount character over our interests and the interests of third parties will be the interests, rights and freedoms of the User.
We inform you that on the basis of our legitimate interest, we will process data for marketing purposes consisting of matching content and advertisements in our Service and on the Internet, for analytical purposes for marketing purposes, as well as for pursuing claims and defending against claims, for evidentiary and archival purposes.
We will process personal data automatically collected in the Service to ensure session security, ensure session quality and provide all functions of our Service.
On the basis of legitimate interest, we will process personal data for analytical purposes, which will consist of researching and analyzing traffic in the Service, conducting market research and opinion research. We perform these studies in-house or commission external entities. The results of the research are in aggregated and generally anonymized form.
IS PROVIDING DATA MANDATORY?
In the case of concluding and performing a contract, we collect only the data without which the contract cannot be performed. Failure to provide data necessary to conclude and perform the contract will mean that it cannot be concluded.
In a situation where we obtain consent to process personal data, it is completely voluntary. If the User does not express consent, which we are asking for, we will not take the actions to which this consent applies. This may result in the inability to use the full functionality of the Service. The User may withdraw the expressed consent at any time. Withdrawal of consent does not, however, affect the lawfulness of personal data processing that we carried out on the basis of consent before it was withdrawn.
WHO WILL WE SHARE YOUR PERSONAL DATA WITH?
Recipients of your data are:
- our employees and associates;
- entities to which we entrust the performance of services related to personal data processing (processors), such as entities providing analytical services and opinion research on the Internet, entities performing mailing campaigns, advertising agencies;
- our Partners;
- other users;
- other data recipients – e.g. our subcontractors, banks, tax advisors, law firms;
- public authorities, including the Police, customs office, law enforcement, in connection with their proceedings.
DATA RETENTION PERIOD
The data retention period is linked to the purposes and bases of processing.
If in connection with the performance of a contract concluded with us or in connection with the use of our Service we will process data for a period of 6 years due to tax law provisions. After this period, data will be retained only for the purpose of deletion or anonymization, which will always take place in January of the calendar year following the calendar year in which the above 6-year period expires.
In the remaining scope, with the exception of data from cookie files, we will process data until consent is withdrawn, objection is expressed or until data deletion is requested, but not longer than 3 years from the time of last activity in the Service (subject to the following sentence). However, after this period, data will be retained only for the purpose of deletion or anonymization, which will always take place in January of the calendar year following the calendar year in which the above 3-year period expires.
Information from cookie files can be deleted at any time independently by using the settings of your web browser.
YOUR RIGHTS
In connection with our processing of data, Users have a range of rights. The User may contact the Data Controller by email: kontakt@busbus.pl or by mail: at the company's address.
The User has the right to:
- request access to personal data and the right to correct or delete it ("right to be forgotten");
- lodge an objection to the processing of personal data for the purposes of direct marketing, which results in us ceasing to process your data for direct marketing purposes;
- lodge an objection for reasons related to their particular situation, if we process personal data on the basis of legitimate interest. However, we will continue to process personal data to the extent necessary if we have a justified reason on our side;
- data portability of data processed in connection with contract performance or based on consent and the right to restrict data processing;
- if the basis for processing personal data is consent, the User has the right to withdraw this consent at any time. However, withdrawal of consent does not affect the lawfulness of personal data processing that we carried out on the basis of consent before it was withdrawn.
To exercise your right to withdraw consent, you can use the contact details provided at the beginning of this section.
The User may withdraw consent to accept the Service Terms and Conditions by deleting the account, which will be equivalent to resigning from the services provided in the Service. However, this does not apply to situations where we are authorized to retain such data on another legal basis, e.g., we concluded a contract concerning concluded contracts – in such a situation we will continue to retain data on the basis of the contract concluded with us by the User and on the basis of legitimate interest.
After withdrawing consent by email, we will promptly send confirmation of receipt of the statement of withdrawal of consent. However, we inform you that due to the complexity of our IT systems, processing the statement of withdrawal of consent may take us up to 30 business days from receipt of the statement.
The User has the right to lodge a complaint with the President of the Personal Data Protection Office.
WHAT DO WE USE COOKIES AND OTHER TECHNOLOGIES FOR?
Cookies are short pieces of information that the Service or Partner saves on the device in the form of text files, allowing us to calculate how successful this Service is. Additionally, cookies are used by our Service to maintain session and user settings (after logging in), thanks to which the user does not have to re-enter the login and password on each subpage of the Service, as well as to create statistics, research and analysis.
Cookies in no way damage or destroy the system on the device and files saved on it, nor do they intentionally negatively affect its performance or functionality. Identification takes place impersonally, anonymously and concerns only the manner and form of using the Services.
Due to the retention period, two main types of cookie files are used in the Service: "session" cookies and "persistent" cookies. "Session" cookies are temporary files that are stored on the end device until logout, leaving the website or closing the software (web browser). "Persistent" cookies are stored on the end device for a period specified in the cookie parameters or until they are deleted.
Due to their function, we use the following types of cookie files in the Service:
- essential cookies, enabling the use of services available in the Service, e.g., authentication cookies used for services requiring authentication in the Service;
- cookies for security purposes, e.g., used to detect abuse in authentication within the Service;
- performance cookies, enabling the collection of information about how websites of the Service are used;
- functional cookies, enabling the remembering of settings selected by the User and customization of the interface, e.g., in terms of selected language or region, font size, website appearance, etc.;
- advertising cookies, enabling the delivery of advertising content tailored to the User's interests.
Cookies may also be used and placed on the end device by advertisers cooperating with the Service and partner services.
The data we obtain through cookie files and mobile device identifiers (ID) – as a general rule – do not allow User identification. In certain cases, however, especially for registered Users, there is a possibility of linking specific information resulting from cookies and mobile device identifiers (ID).
Accepting cookies is not mandatory to use the Service. However, failing to accept certain cookies will prevent the Service from operating fully.
The collected data will be used by us to personalize content, advertisements and other services that are visible in our Service and on the Internet.
At any time, you can determine the ability to store or access cookies through the settings of software installed on your device.
In order for us to permanently remember the decision not to consent to our use of cookies for the purposes described above, we are forced to save a cookie on the device containing such information. If device settings do not allow this, the natural behavior will be to request consent each time.
To avoid receiving cookies, you should use the option in the web browser used to connect to the Service and select the option to automatically reject them. These settings typically also allow you to manage cookies.
The Service is not responsible for the content of cookies sent by other websites to which links are placed on the Service pages.
THIRD-PARTY PARTNER TOOLS
In order to provide our services and improve and analyze them, we also use services and tools of other entities. These entities pursue specific goals set by us, and in certain cases, may also pursue their own goals and the goals of their cooperating entities using data obtained in our Service.
Below we present selected information on the services and tools we use:
Google Analytics
We use the Google Analytics tool provided by Google Inc. ("Google") based in the USA. This is a web analytics service performed by Google on our behalf using cookies. Information generated by cookies about the use of the Service (description here) is transmitted and stored on Google's servers in the USA. IP address anonymization has been activated in the service, which causes Google to shorten user IP addresses in EU member states or other countries that are parties to the European Economic Area Agreement before processing. Only in exceptional cases will the full IP address be transmitted to Google's servers in the USA where it will be shortened. Anonymization takes place immediately upon receipt of data, before it is stored. At our request, Google will use the obtained information to verify your use of our services, create reports on their functionality and provide additional services on our behalf related to the use of digital services or the Internet, in particular Google Analytics reports regarding provided services according to demographic criteria and interests. The IP address transmitted by the browser as part of Google Analytics will not be combined with other Google data.
We inform you that you can prevent the recording of data obtained through cookies and data (including IP address) related to your use of the website by Google, as well as prevent Google from processing such data by downloading and installing a browser extension available at the following link: click here
Facebook Pixel
To measure the effectiveness of advertising our Services through the Facebook platform and optimize the advertisements that appear there, we use the Facebook Pixel. This is a tool that helps us measure the effectiveness of advertisements by analyzing actions taken by users on our Services. We use pixel data in the following scope:
- delivering advertisements to the right audience,
- creating advertising audience groups,
- analyzing what happened as a result of clicking on an advertisement,
- using other Facebook advertising tools.
Information about data collected by Facebook: click here
Google AdWords conversion tracking and remarketing tag
To measure the effectiveness of advertising our Services through the Google AdWords platform and optimize the advertisements that appear there, we use conversion tracking and remarketing. These are tools through which we learn what happened after a Customer's interaction with an advertisement – whether they completed an action that we defined as valuable. This allows us to optimize the promotional activities we conduct within the Google AdWords platform. Using these tools:
- we see which keywords, ads, ad groups and campaigns most effectively attract valuable customer actions,
- we know our return on investment (ROI) in advertising and make informed decisions about advertising spending,
- we automatically optimize our campaigns for our business goals,
- we see how many customers interact with our ads on one device or browser and convert on another,
- we can display AdWords ads to people who have visited our websites.
Information about data processed by Google: click here and here
DoubleClick for Publishers
To display advertisements and manage advertising campaigns in the Service, we use the DoubleClick for Publishers tool provided by Google Inc. ("Google") based in the USA. This is a platform that enables us to conduct advertising campaigns commissioned by our customers (advertisers), including their planning, display, performance measurement and reporting. We use cookies and profiling processes described above. Google also collects and processes data to better match advertisements across all websites that are Google partners and use Google advertising tools: DoubleClick for Publishers, DoubleClick Bid Manager, Google AdX, as well as AdWords and AdSense programs.
We inform you that you can prevent the recording of data obtained through cookies and data (including IP address) related to your use of the website by Google, as well as prevent Google from processing such data by changing settings available at the following link: click here
Social media plugins
Certain content in the Service uses so-called social media plugins for social media such as Facebook, Google+ and Twitter. Using these functions, you can share individual content with friends from these social media portals or recommend it to them.
When using these social media plugins, such as the Facebook "Like" button or Google+ button, personal data may be collected by these social media portals in the manner described below.
The social media service receives, among other things, information that the User visited us from a given IP address or device ID regardless of whether they are currently logged in or registered with the given social media portal at all.
If the user is simultaneously logged into the given social media service, the social media service automatically associates the visits on the page with the profile. Also, when the User uses social media plugins and, for example, recommends an article or other content, the social media service can assign this information to the profile.
We point out that data collected in connection with social media plugins may only be exchanged between the search engine and the social media portal operator. We have no knowledge of the content of the data collected and transmitted.
SECURITY
No method of transmitting data over the Internet and no method of electronic or physical storage is completely secure. We make every effort to protect data against unauthorized disclosure and access, against accidental or unlawful destruction and loss.
Our offer will expand over time. Technologies, standards and requirements related to conducting business on the Internet will also change. This means we will introduce modifications to the Privacy Policy. With each change, a new version of the Privacy Policy will appear on the Service pages along with an appropriate notification and will be effective from the day of notification of the change by posting it on the given Service.
For these reasons, we recommend periodic review of the Privacy Policy, and you can find out about changes to the Privacy Policy since your last review by checking the information about the date on which it becomes effective, which is at the beginning of this document.