Privacy Policy — Mobilna Karta Miejska Szczecin

This document explains what data we collect in the Mobilna Karta Miejska Szczecin app and on the gopay24.eu website, why we process it, and what rights you have.

1. Who is responsible for your data

The controller of your personal data is GoPay Sp. z o.o., with its registered office at ul. Promienna 10, 03-672 Warsaw, Poland, tax identification number (NIP) 5272717938 — the provider and operator of the Mobilna Karta Miejska Szczecin app.

For any matters concerning personal data, you can write to biuro@gopay24.eu. We have also appointed a Data Protection Officer — the role is held by Rafał Mazurek, contact: iod@gopay24.eu.

2. What data we collect

In the app:

account data — email address, phone number and, if you provide them, your first and last name,
data about purchased tickets and payment transactions,
data confirming your entitlement to reduced fares, if you use them,
technical device data — model, operating system version, and identifiers assigned by the operating system for analytics and advertising purposes,
push notification identifier — if you agree to receive notifications, we use it solely to send notifications to your device.

The app does not collect data about your location.

On the website: IP address, information about your browser and device, the address of the page you came from, and data stored in cookies.

3. Why we process it and on what legal basis

Ticket sales and service — because it is necessary to perform the contract you enter into with us.
Accounting and tax obligations — because the law requires it.
Verification of entitlement to reduced fares — because it is necessary to perform the contract and follows from public transport regulations.
Security and fraud prevention — because we have a legitimate interest in it.
Analytics and advertising — based on your consent, given in the consent dialog shown when you first launch the app.
Push notifications — we send them based on your consent given in your device's system settings; you can turn them off at any time in your phone settings.
Email and SMS marketing — based on your consent, which you can withdraw at any time.

4. Google — analytics and advertising

In the app we use Google services: Google Analytics for Firebase, which helps us analyse how the app is used, and Google Ads, which we use to measure the effectiveness of our advertising campaigns and to show you our ads on other services. As part of these services, your data may be transferred to Google and processed by Google in accordance with its own policies.

Detailed information about how Google uses data originating from apps and sites that use its services is available at:

You give your consent to the processing of data for advertising and analytics purposes in the consent dialog shown when you first launch the app.

5. Who we share data with

Payment providers — to the extent necessary to settle transactions.
The public transport authority — to verify entitlement to reduced fares and for statistical purposes.
Technical service providers, including Google, as described in section 4.
Public authorities — where we are required to do so by law, upon their explicit and lawful request.

We share with each recipient only the data necessary to carry out the specific task.

6. Transfers outside the European Economic Area

Some of our providers, including Google, process data outside the European Economic Area. In such cases, the transfer takes place on the basis of standard contractual clauses approved by the European Commission or another mechanism provided for by data protection law.

7. How long we keep data

Data on transactions, tickets and settlements — at least 5 years, counted from the end of the year in which the tax payment deadline fell, in accordance with tax and accounting regulations.
Account data — for as long as you have an account in the app and, after its deletion, for the period necessary to establish, pursue or defend claims.
Data processed on the basis of consent, including analytics and advertising data — until consent is withdrawn.
Technical logs — for the period necessary to ensure the security and proper operation of the service.

8. Your rights

You have the right to access your data, to rectify it, to erase it, to restrict its processing, to data portability, and to object to processing based on our legitimate interest. Where we process data on the basis of consent, you can withdraw it at any time — this does not affect the lawfulness of processing carried out before the withdrawal.

To exercise these rights, write to biuro@gopay24.eu or iod@gopay24.eu.

You also have the right to lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland.

9. Cookies on the website

Cookies are small text files stored on your device by the websites you visit. They contain, among other things, the name of the site they come from, their storage period, and a unique session identifier.

We use cookies that are necessary for the site to work, as well as functional, analytics and advertising cookies. We use cookies other than the necessary ones only if you consent to them. You can withdraw or change your consent at any time, and you can also manage cookies yourself in your browser settings. Blocking some cookies may limit certain functions of the site.

10. Security

Data submitted through forms is encrypted using the TLS protocol. We apply technical and organisational measures to protect data against access by unauthorised persons.

11. Changes to this policy

We may update this policy. The current version is always available on this page. Last updated: 17 August 2026.

12. Language versions

This policy is published in Polish and English. In the event of any discrepancy between the language versions, the Polish version prevails.