In connection with the General Data Protection Regulation (GDPR), which has been in effect since May 25, 2018, under Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, we inform you about our Privacy Policy.
This document constitutes the implementation of the information policy for users of the application used to order transport services and to conclude contracts for taxi transport of persons or goods (hereinafter referred to as the “Application”) by individuals ordering transport services through the website at https://www.itaxi.pl/ (the “Website”) and through the nationwide telephone hotline 737737737 (the “Hotline”), or by any other means, as well as individuals contacting the data controller, iTaxi.pl S.A., in all aspects of personal data processing and protection. We place great emphasis on protecting, collecting, processing, and utilizing your personal data in accordance with applicable regulations.
The administrator makes every effort to ensure that your information remains private. Therefore, we are publishing a document explaining the principles and methods of collecting, processing, and using information about users of the Application and Website, as well as other individuals whose personal data we process. Please read the document carefully to understand our privacy policy and how we use your personal data. We want to inform you that iTaxi.pl S.A. adheres to all relevant legal provisions concerning data protection. We respect and protect your privacy, and we assure you that we will promptly respond to any inquiries regarding data protection and ensure the implementation of your rights. We kindly ask you to carefully review the following information.
Your personal data is processed in accordance with applicable legal regulations, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the “Regulation”), as well as the Act of 10 May 2018 on the protection of personal data (hereinafter referred to as the “Act”).
The data controller of personal data is iTaxi.pl S.A. with its registered office in Warsaw, at ul. Przasnyska 6B, 01-756 Warsaw, entered into the entrepreneurs’ register of the National Court Register kept by the District Court for the capital city of Warsaw in Warsaw, 14th Economic Division of the National Court Register under KRS number: 0000922228, NIP (Tax Identification Number): 1182053355, REGON (National Official Business Register): 142717162 (hereinafter referred to as the “Administrator,” “iTaxi,” or “iTaxi.pl S.A.”).
You can contact the Administrator by email at: [email protected] or by traditional mail at the Administrator’s registered office address.
To ensure the highest standards of personal data protection, the Administrator has appointed a Data Protection Officer (referred to as “DPO”).
You can contact the Data Protection Officer (DPO) via email at: [email protected] or by traditional mail at the Administrator’s registered office address.
If you contact us through any contact form, your personal data will be processed for the purpose for which you are writing (subject of the message), based on the legitimate interest of the administrator (Art. 6(1)(f) of the GDPR), which involves handling correspondence. Depending on the subject of the correspondence, the data may be processed for further, different purposes.
Providing personal data is voluntary. Failure to provide data may result in the inability to process correspondence and receive a response.
Personal data will be processed until an objection is raised. Depending on the subject of the correspondence, if the data are processed for further purposes, the retention period may depend on those purposes.
Our trusted partners supporting our administrative processes, including IT providers, may have access to the data.
If you subscribe to our newsletter, your personal data will be processed for direct marketing purposes based on the legitimate interest of the data controller (Art. 6(1)(f) of the GDPR), which involves sending the newsletter according to the consent expressed based on other legal acts.
Providing personal data is voluntary. Failure to provide data may result in the inability to subscribe to the newsletter.
Personal data will be processed until an objection is raised or consent is withdrawn based on other legal acts.
Our trusted partners supporting our marketing processes, such as IT solution providers for newsletter distribution, may have access to the data.
If you contact us, as a potential client or contractor, through any quotation form, your personal data will be processed for the purpose of sending you an offer. The processing is necessary to take steps at your request prior to entering into a contract (Art. 6(1)(b) of the GDPR).
If you contact us as a representative of a potential client or contractor (e.g., as an employee) through any quotation form, your personal data will be processed for the purpose of sending you an offer based on the legitimate interest of the data controller (Art. 6(1)(f) of the GDPR), which involves sending quotations.
Personal data will be processed until the conclusion of negotiations/discussions regarding the conclusion of a contract or until an objection is raised. In the event of entering into a contract or establishing a business relationship, personal data may be processed for further purposes, and the retention period may depend on those purposes.
Our trusted partners supporting our administrative processes, including IT providers, may have access to the data.
If you provide consent under other legal acts apart from GDPR (e.g., telecommunications law, law on providing electronic services) to iTaxi.pl S.A. for marketing purposes, your personal data will be processed for direct marketing based on the legitimate interest of the data controller (Art. 6(1)(f) of the GDPR). This includes delivering marketing materials through email, push notifications, SMS, or phone calls.
iTaxi.pl S.A. may process personal data for marketing purposes based on the legitimate interest of the data controller (Art. 6(1)(f) of the GDPR) without obtaining consent under other legal acts, particularly if the interest involves delivering marketing materials via traditional mail, including couriers.
Providing personal data is voluntary. Failure to provide data may result in not receiving marketing materials, including those containing discounts.
Personal data will be processed until an objection is raised or consent is withdrawn under other legal acts.
Our trusted partners supporting our marketing processes, such as IT solution providers for newsletter distribution, couriers and postal services, and other entities supporting marketing activities, may have access to the data.
If you are a potential driver who has submitted an online application, please be informed that we process your personal data for the purpose of establishing cooperation. The legal basis for processing personal data is:
We process personal data until the establishment of cooperation. In the case of establishing cooperation, we continue to process the data for new purposes. If cooperation is not established, we store the data for a period of 12 months. In the event of claims from your side or iTaxi, personal data will be processed until the matter is finally resolved.
Entities that may have access to personal data include our partners with whom we cooperate or entities that may have such access by law, including:
Providing personal data is a requirement for concluding a contract and a legal requirement for verification purposes. Providing the data is voluntary, but failure to do so will result in the inability to conclude the contract, create an account in the application, and use its functionalities.
The processing of drivers’ personal data (once we have established cooperation) is described in the document “Privacy Policy of the iTaxi.pl S.A. Mobile Application.” This document is Appendix No. 1 to the Privacy Policy.
If you order rides without the iTaxi app (e.g., through the Call Center) as a consumer, we process your personal data:
We process personal data until the completion of service provision and after the contract termination until the expiration of civil law claims. In case of claims on your part or iTaxi, personal data will be processed until the final resolution of the matter. Information processed for sharing purposes (e.g., authorities) will be processed until they are shared. Personal data processed for accounting purposes will be processed for the period stipulated by tax regulations.
Entities that may have access to personal data include our partners with whom we cooperate or entities authorized by law, including:
The provision of personal data is a contractual requirement and is voluntary, but failure to provide the data will result in the inability to place an order. If we receive a request from state authorities, we may obtain additional information about you.
If you are a representative of a client, we process personal data based on the legitimate interests of the data controller (Art. 6(1)(f) GDPR), which involves fulfilling the above purposes in connection with the relationship we have with the entity you represent.
If you are ordering transport of documents or other shipments without the iTaxi application (e.g., through the Call Center), we process your personal data as follows:
We process personal data until the completion of service provision and after the termination of the contract until the expiry of civil law claims. In case of claims on your side or iTaxi’s, personal data will be processed until the final resolution of the matter. Information processed for sharing purposes (e.g., with authorities) will be processed until they are shared. Personal data processed for accounting purposes will be processed for the period stipulated by tax regulations.
Access to personal data may be granted to entities that are our partners with whom we collaborate, or entities that may have such access by legal obligation, including:
Providing personal data is a contractual requirement and is voluntary, but failure to provide the data will result in the inability to place an order. If we receive a request from government authorities, we may obtain additional information about you.
If you are a person representing a client, we process personal data based on the legitimate interest of the administrator (Article 6(1)(f) of the GDPR) to achieve the above purposes in connection with the relationship we have with the entity you represent.
If you are the person to whom the documents or package are to be delivered or who is to use the ride but did not place the order yourself, we process personal data as follows:
We process personal data until the completion of the order and then until the expiration of civil law claims. In the event of claims on your part or iTaxi’s part, personal data will be processed until the final resolution of the matter. Conversely, information processed for the purpose of disclosure (e.g., to authorities) is processed until it is disclosed.
Access to personal data may be granted to entities that are our partners, with whom we cooperate, or entities that may have such access by law, including:
We obtain personal data, including name, surname, email address, and phone number, or location information, from the person ordering/arranging the transport.
In the event that we receive a request from government authorities, we may obtain basic identification or location data.
If you make a request based on GDPR regulations to iTaxi, personal data will be processed for the purpose of:
Providing personal data is voluntary. Failure to provide the data may result in the inability to provide a response due to the inability to clearly identify the requester. Additionally, failure to provide the data may result in the inability to submit the request.
Personal data will be processed until the expiration of claims.
If you contact our Call Center, whether you are a driver, passenger, etc., and regardless of whether you connect by dialing the phone number or using the iTaxi mobile app functionality, the conversation may be recorded and the recording will be used for the purpose of:
If you use the intermediary transport service through the Call Center, we will store information about your last locations to improve our cooperation and be able to suggest them to you during the next conversation. Information about the last 3 locations along with the phone number will be stored for 180 days.
We may also process personal data provided during the conversation. The purpose and legal basis for processing depend on the subject of the conversation, the request made, etc.
Recordings are stored for a period of 110 days.
Providing personal data is voluntary.
The processing of personal data through the iTaxi mobile application is described in the document “Privacy Policy of the iTaxi.pl S.A. Mobile Application.” This document constitutes Annex No. 1 to the Privacy Policy.
If you are a user of the website itaxi.pl and you consent to analytical cookies or similar technologies as per other legal acts, your personal data will be processed for analytical purposes and to utilize various functions, as well as to analyze user origin and ad performance. This constitutes the legitimate interest of the administrator (Article 6(1)(f) of the GDPR) in studying statistics, improving functionality, and enhancing the quality of the website.
Additionally, we use cookies to ensure security. Your personal data will be processed for security purposes, to monitor whether the application is used as intended and to prevent abuses or crimes. This is based on the legitimate interest of the administrator (Article 6(1)(f) of the GDPR) in ensuring security.
Providing personal data and giving consent is voluntary. You can withdraw your consent at any time by deleting cookies on your device. Withdrawal of consent does not operate retroactively.
Personal data will be processed until an objection is raised or consent is withdrawn, given according to other legal acts.
Access to personal data may be granted to entities providing us with IT tools and systems, particularly cookie providers, consulting firms, and marketing companies.
Below are details regarding cooperation with a provider for conducting analytical and marketing activities based on tools provided by Google:
Disabling cookies and withdrawing consent
You can withdraw your consent by writing to [email protected] and adjusting your device settings accordingly. Additionally, you can independently delete cookies and similar technical solutions by selecting the appropriate settings on your device.
In connection with conducting analytical activities based on cookies or similar technologies, data may be transferred to the USA. This is related to the use of tools provided by Google. More information on data transfers and the rules for transferring data can be found below.
Data transfers to third countries by Google Ireland Limited in connection with the cooperation and the tools used:
https://policies.google.com/privacy/frameworks?hl=en
In connection with the use of cookies or similar technologies by third parties, profiling may occur to tailor advertising. More information about this can be found on Google’s websites and privacy policies.
https://policies.google.com/privacy?hl=en
In connection with the processing of personal data, every person whose data is processed has the right to request access to their data, rectification, deletion, or restriction of processing, as well as the right to object to processing, and the right to data portability.
At any time, consent to the processing of personal data, if given, can also be withdrawn. Withdrawal of consent does not operate retroactively.
You have the right to lodge a complaint with the supervisory authority, i.e., the President of the Office for Personal Data Protection. However, as indicated by the authority, before lodging a complaint, you should first exercise your rights as a data subject. You can do this by writing to [email protected]
The privacy policy is effective as of April 24, 2024.
