Privacy policy

The controller of personal data is LUX TRANSFERS Sp. z o.o. w organizacji, with its registered office in Bydgoszcz. Company registration in progress — registration details (VAT ID, REGON, KRS, address) will be published once completed.

Contact for data protection matters: rodo@lux-transfers.com.

Personal data is processed for the following purposes:

• Performance of the transport contract (Art. 6(1)(b) GDPR) — booking a ride, contacting the driver, processing payment.
• Tax and accounting obligations (Art. 6(1)(c) GDPR) — issuing invoices, archiving for 5 years.
• Marketing of our own services (Art. 6(1)(f) GDPR) — informing about promotions, based on legitimate interest.
• Establishing and pursuing claims (Art. 6(1)(f) GDPR).
• Handling contact form enquiries (Art. 6(1)(f) GDPR) — responding to the message you send us.

• First name, last name, phone number, email address,
• Pickup address, destination address, location data during the ride,
• Payment data (tokens; we do not store card numbers),
• Ride history, ratings, messages with drivers.

• Personal data related to a ride: 30 days after completion (PII),
• Location data (live tracking): 30 days,
• Chat messages: 90 days,
• Accounting data (invoices): 5 years (statutory requirement),
• Account data after deletion: 30-day grace period.

Data may be shared with:

• Drivers performing your ride (name, phone, addresses),
• Payment service providers (Stripe, Tpay, BLIK),
• Google Cloud (hosting, maps, Firebase),
• Resend (email delivery provider — we share contact form data with it: name, email address, phone number and message content),
• State authorities under a legal obligation.

Data may be transferred to the USA within Google Cloud Platform (Firebase) on the basis of standard contractual clauses approved by the European Commission and the Data Privacy Framework mechanism.

Contact form data may also be transferred to the USA within the Resend service (email delivery) — on the basis of standard contractual clauses (SCC).

You have the following rights:

• Right of access to your data (Art. 15 GDPR),
• Right to rectification (Art. 16 GDPR),
• Right to erasure (Art. 17 GDPR),
• Right to restriction of processing (Art. 18 GDPR),
• Right to data portability (Art. 20 GDPR),
• Right to object (Art. 21 GDPR),
• Right to lodge a complaint with the PUODO (ul. Stawki 2, 00-193 Warsaw).

The www.lux-transfers.com website does not use analytics or marketing cookies and does not profile its users.

• Essential technical mechanisms — the Google Maps service (address suggestions in the calculator) may store its own cookies or browser storage data required for it to work. These do not require consent.

Should we introduce analytics tools in the future, we will first update this policy and add a consent mechanism (cookie banner).

The operator reserves the right to amend this policy. We will notify you of material changes 14 days in advance at the email address provided or in the app.