Privacy Policy

1. Data Controller

The controller of your personal data is Driven Sp. z o.o., ul. Emilii Plater 47 lok. 93, 00-118 Warsaw, Poland, e-mail: warsaw@city-sightseeing.pl, tel. +48 793 795 733.

2. Data We Collect

• Contact data: name, e-mail address, phone number – provided voluntarily via the contact form.
• Transaction data: purchased ticket details, travel dates and times.
• Technical data: IP address, browser type, OS, pages visited – collected automatically via cookies and analytics tools.

3. Purposes and Legal Bases

• Service execution: to perform the transport contract (Art. 6(1)(b) GDPR).
• Marketing: with your consent (Art. 6(1)(a) GDPR). You may withdraw consent at any time.
• Legitimate interests: website analytics, fraud prevention (Art. 6(1)(f) GDPR).
• Legal obligations: accounting and tax records (Art. 6(1)(c) GDPR).

4. Cookies

• Essential: required for site functionality. No consent needed.
• Analytics: Google Analytics – helps us understand site usage. Can be disabled in browser settings.
• Maps: Google Maps – used to display interactive route maps.

Anonymous usage statistics

We collect anonymous statistics on how our website is used (e.g. pages visited and where you came from, links and buttons clicked, and on the live map – the selected route, opened attractions and use of navigation). If you share your location on the map, we store it only approximately (an area of about 1 km and the distance to the nearest stop), never your exact position. We do not use cookies for this and we do not store your IP address or any identifier that could recognise you. We also never store anything you type into forms.

5. Data Recipients

Your data may be shared with payment processors (e.g. Stripe, PayU), hosting providers, Google LLC (Analytics, Maps – data transferred under Standard Contractual Clauses), and public authorities where required by law.

6. Retention Periods

• Transaction data: 5 years (tax obligations).
• Contact form data: 12 months from last contact.
• Marketing data: until consent is withdrawn.
• Analytics cookies: up to 14 months (Google Analytics policy).

7. Your Rights

You have the right to: access, rectification, erasure ("right to be forgotten"), restriction of processing, data portability, objection, and to lodge a complaint with the supervisory authority (UODO, ul. Stawki 2, Warsaw).

Submit requests to: warsaw@city-sightseeing.pl

8. Changes to This Policy

We may update this policy from time to time. The current version is always available at https://hoponhopoff.pl/privacy/