Sindbad.pl

This policy applies to the protection of users' privacy and it is implemented on the basis of the principles contained in the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27/04/2016 (known as the Regulation or GDPR), which have been in force since May 25, 2018. The administrator of personal data, collected on the website www.sindbad.pl and its subpages, is Sindbad Sp. z o.o. with its registered office in Opole (45-144), ul. Działkowa 4, with the exception of the purchase of transport services of other carriers, for which the personal data administrators are these carriers.

The privacy and security of Users' data is one of our most important priorities. The Sindbad company takes particular care to protect the personal data of users. We apply appropriate technological and organizational solutions to prevent third party interference in the privacy of users and affect data security.

The purpose and the basis of personal data processing

We process your personal data for the following purposes:

conclusion and performance of the agreement (legal base: Article 6 act 1 b) of GDPR), including:
- start of the purchase process of the offered service and its purchase,
- service implementation,
- ensuring the quality of the service,
- the need to provide relevant information about the service.
our legal obligations (legal base: Article 6 act 1 (c) of the GDPR), among others:
- issuing and storing invoices and accounting documents,
- replying to complaints in the time and in the form provided for by law,
- providing information to which we are directly obliged by law.
performance of activities arising from the legitimate interests of the administrator (legal base: art. 6 act 1 (f) of GDPR), including:
- defense or investigation of possible claims,
- detection and prevention of misuse,
- direct marketing of own products,
- creating statements, analyses and statistics for our internal needs, which includes in particular reporting, marketing research, service development planning, development work in IT systems,
- service support, including satisfaction research after completing the service and adjusting the service based on previously purchased services or submitted complaints.
- performance of activities resulting from your consents (legal base: Article 6 act 1 a) of GDPR).

If you consent to the use of your data, the content of this consent will determine the purpose for which we will process this data. Each consent you give may be withdrawn by you at any time. Withdrawal of consent does not affect the lawfulness of the processing of your data on the basis of consent before its withdrawal.

Term of personal data storage

If the basis for processing your personal data is the performance of the service, we will also store data for service and for a period of time after the service corresponds to the period of expiration of claims. If consent is the basis for processing, personal data will be processed by us until the consent is canceled and the consent is revoked for the period of time corresponding to the period of expiration of claims. In the case of data processing in connection with our legal obligations, data will be processed to the extent and for the time required by law, including accounting regulations. In the range that the data will be processed to direct marketing content to you, the data will be processed until the consent is withdrawn or the objection raised against such processing.

Data to be provided to us

Ticket purchase: To purchase a coach ticket for international transport it is necessary to give the name and surname of the passenger - this is a statutory requirement. Providing the date of birth is a condition for the conclusion of the agreement with a discount resulting from age. The refusal of the date of birth does not entitle to purchase tickets in the tariffs: Child, Youth or Senior. Providing a phone number is a contractual requirement and it is necessary for the proper performance of the agreement. Refusal to provide phone number when buying a ticket exposes the passenger to a failure to inform him about significant, possible conditions for his travel, e.g. about delays, timetable changes, busstop changes, about luggage left. Some information requires immediate contact from our side with the passenger, which is not usually possible using the e-mail address provided to us for this reason. For the convenience and necessary situations (e.g. when one phone is only available in the country and the other only abroad) the possibility of providing a second telephone number is also made available, however a second number is not necessary provided that the first number is relatively available all the time
Buy a ticket policy: Giving your name and surname and date of birth is a prerequisite for concluding agreement for the purchase of an insurance policy resulting from the terms of the insurer.
Invoice issuance: The necessary data to issue an invoice for a private person are: Name, surname and address - this is a statutory requirement. Providing additional contact details (phone number, e-mail address) is voluntary and can only be used for possible contact regarding the invoice issued.
Regular Customer Card: To establish Regular Customer Card it is necessary to provide the customer with the name and surname, telephone number and correspondence address, thanks to which we can correspond with the customer (e.g. sending the issued card) and we can clearly identify it. Providing these data is a prerequisite for joining the program. Providing date of birth, e-mail address and second phone number and it is voluntary but recommended. If you do not give your date of birth, you will not be able to get a discount for the Regular Customer Card without remembering its number. We communicate electronically on a regular basis by sending various information such as: information about the card, the terms of participation in the program, changes in regulations, etc. Lack of additional phone number will cause that if it is significant, it will not automatically register from the KSK file, but you will have to remember to enter it.
Client profile: To establish a customer account, only the e-mail address must be provided as the user's ID, at the same time as the verification address of the e-mail account owner . Providing all other personal data (including name and surname) is voluntary. However, it should be remembered that not providing personal data will make it difficult to use the available functions resulting from having a profile. In the Help tab you will find more info, after logging in to the profile.

Recipients of personal data

Your data may be transferred to entities that process data on our behalf, including agents intermediating in the sales of our services, marketing agencies, IT service providers, companies intermediating in customer service, insurance companies that insure you, other carriers if they provide transport in your travel, payment service providers, companies providing pilots service on board of coaches, which you travel by, entities providing advisory and consulting services, audits or legal assistance as well as courier and postal services companies. These entities process data on the basis of agreements concluded with us and to the extent that it will be defined or independently by us, they may become administrators of your personal data, defining their own goals and means of processing, but then such entities are required to comply with the Regulation as an administrator, including the obligation to provide you with independent information on the purposes and rules of processing your personal data by these entities.

Sign-In with External Accounts (Google, Facebook, Apple)

Our website and mobile applications allow you to log in using your existing accounts with external service providers such as Google, Facebook, or Apple. When you choose to log in via one of these external providers, we will receive certain personal information from the provider you select, which is required to create and manage your account in our system. The information we collect may include:

Email address
Username (if available)
First name
Last name
Profile picture URL

We use this information solely to enable you to log in to our services and to identify you within our system. This data is not shared with any other parties and is stored securely in accordance with applicable data protection laws.

The personal data collected during login with external providers is stored as long as it is necessary to provide you with access to our services. If you delete your account with us, this data is permanently and physically deleted from our systems.

For more information about how each external provider processes your personal data, please refer to the respective privacy policies of:

Your rights are

You have the right to:

access to data content and information about data such as this;
correcting data (correcting them);
deletion of data processed unreasonably;
limitations of data processing (e.g., non-performance of certain data operations or non-deletion of data);
data transfer (export to file)
and the right to object to the processing of data.

To use these rights an application should be submitted to an agent offering our services or via the form on the website www.sindbad.pl or by calling our Helpline. The extent to which you will be able to make use of the above rights will depend on the legal basis of your use of your data and the purpose of the processing. To submit an application, we may ask you for additional information enabling us to authenticate you. Regardless, if you believe that the processing of your personal data violates the law, you have the right to lodge a complaint to the President of the Personal Data Protection Office.

Profiling

Your personal data will not be be subject to decisions that are based on automated processing (such as profiling) and which could cause legal effect on you or which could have other effect.

Cookies

We use cookies on our website. Cookies are IT data, in particular text files, which are stored on the User's end device. Cookies usually contain the domain name of the website they come from, the time they are stored on the end device and a unique number. Cookies are not used to identify the user and no user identity is determined on their basis.

Cookies of external services

The Administrator on the Website uses web components and javascript scripts of partners who may place their own cookies on the user's device. The settings of your web browser give you the opportunity to decide for yourself on the permitted cookies used by individual websites. Below is a list of the partners or their services implemented on our website that may place cookies:

keeping statistics:
- Google Analytics
- Google Tag Manager
- Facebook

The Administrator has no control over the services provided by third parties, who may at any time change the terms and conditions of their services, their privacy policies, the purpose of data processing as well as the use of cookies.

You can find out more about how Google uses data from websites HERE

Local Storage

For the convenience of using our services, we use Local Storage (LS), a similar operating principle to cookies, but having slightly different properties.

LS is a separate part of the browser's memory used to store data saved by the websites. Access to it can only be obtained from a website operating on the same website from which the data was saved, but unlike cookies, they are not sent by the browser every time you refer to the server. The data in the LS are stored by the browser for a long time and are not deleted after the browser is closed or have a certain validity period.

We use cookies and Local Storage for the purposes:

providing services;
to customize the content of services and applications to the User's preferences and optimizing the use of websites; e.g. cookies allow in particular to identify the User's device and properly display a website adjusted to their individual needs;
to create statistics that help to understand how Users use the services and applications, which allows improving their structure and content;
to maintain the User's session (after logging in), so that the User does not have to re-enter the login and password on each website subpage of the site and application;
to advertise presentation, among others, in a way that interests of the User or his place of residence are taken into account (individualising the advertising message) and the guarantee of excluding the possibility of presenting the same advertisement multiple times to the User;
to conduct surveys - in particular to avoid multiple presentations of the same questionnaire to the same Recipient and to present surveys in a way that takes into account the interests of the recipients.

Managing browser settings

In many cases, software used for browsing websites (web browser) allows for storing information in the form of cookies by default User's end device. However, the user can change these settings at any time. Failure to change means that the above information can be posted and stored in its end device, and thus, it means that we will store information on the user's end device and access this information.

As for the web browser, which the User uses, for example, self-management of cookies is possible. The most popular browsers include the possibility of:

accepting cookies, which allows the User to fully use the options offered by websites;
managing cookies at the level of individual sites selected by the User;
defining settings for different types of cookies;
blocking or deleting cookies.

Comprehensive information on cookie files management is available in the software settings (web browsers). Details for people using individual web browsers, among others:

Please note that restrictions or exclusions of the use of cookies or local storage may affect some of the functionalities available in our services.

Contact information

Our contact details: Sindbad Sp. z o.o., ul. Działkowa 4, 45-144 Opole. Helpline: tel. +48 77 443 44 44 or 801 22 33 44 (information about numbers in countries outside Poland is available on the website www.sindbad.pl in the Contact section).

Contact details of the Data Protection Officer in Sindbad Sp. z o.o. regarding the processing of your personal data: Piotr Guzera, dpo@sindbad.pl

Privacy policy