Privacy policy

1. Data controller

The controller of your personal data is ANMAR (“ANMAR”).

Contact for data protection matters: phone +48 504 113 807, e-mail firmabustransfer@gmail.com.

2. What data we process and where it comes from

We process the data you enter in the website form (full name, phone number, e-mail address, travel date and time, pick-up and destination locations, number of passengers, message content) and data you provide by phone, WhatsApp or e-mail.

When the form is submitted, the sender's IP address is also recorded, solely to protect against abuse.

3. Purposes and legal bases

• responding to your enquiry and preparing a quote – Art. 6(1)(b) GDPR (steps prior to entering into a contract) and Art. 6(1)(a) GDPR (consent given in the form);
• providing the transport service – Art. 6(1)(b) GDPR (performance of a contract);
• issuing invoices and keeping accounts – Art. 6(1)(c) GDPR (legal obligation);
• establishing, exercising or defending legal claims and keeping the website secure – Art. 6(1)(f) GDPR (legitimate interest).

4. Recipients of data

Data may be shared with providers that support our business: the website hosting provider, the e-mail provider (Google), the WhatsApp operator (Meta) if you contact us that way, and our accounting office for bookkeeping documents.

Using Google and Meta services may involve transferring data outside the European Economic Area. Such transfers rely on Standard Contractual Clauses approved by the European Commission or an adequacy decision (EU-US Data Privacy Framework).

5. Retention period

• enquiries that did not lead to a contract – up to 12 months after the last contact;
• data related to a completed service and accounting documents – 5 years from the end of the tax year in which the document was issued;
• data needed to defend legal claims – until the limitation period expires.

6. Your rights

You have the right to access your data, rectify it, erase it, restrict its processing, receive it in a portable format, object to processing based on legitimate interest, and withdraw consent at any time (without affecting the lawfulness of processing before withdrawal).

To exercise these rights, contact us by e-mail or phone. You also have the right to lodge a complaint with the President of the Personal Data Protection Office in Poland (ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl) or with the supervisory authority in your country of residence.

7. Is providing data mandatory?

Providing your data is voluntary but necessary to respond to your enquiry and provide the service.

8. Cookies and analytics

This website does not use cookies or analytics or marketing tools. The hosting server may keep standard logs (IP address, request time, browser type) for security and diagnostics.

9. Automated decision-making

We do not make automated decisions and do not profile users.

10. Changes to this policy

The current version of this policy is always available on this page. Significant changes will be reflected in the date at the top of the document.