Privacy policy

STB SA respects the user’s privacy and is committed to protecting it through its compliance with this privacy policy. This policy describes the types of information that STB SA may collect from the user or that the user may provide in the Info Transport București mobile application and any of its related products and services, and STB SA’s practices for collecting, using, maintaining, protecting, and disclosing that personal information. It also describes the choices available to the user regarding STB SA’s use of the user’s personal information and how the user can access and update it.

This policy is a legally binding agreement between the user and STB SA. If the user is entering into this agreement on behalf of a business or other legal entity, it represent that the user has the authority to bind such entity to this agreement. If the user does not have such authority, or if the user does not agree with the terms of this agreement, the user must not accept this agreement and may not access and use the Info Transport București mobile application. By accessing and using the Info Transport București mobile application, the user acknowledges that they have read, understood, and agree to be bound by the terms of this privacy policy. This policy does not apply to the practices of companies that STB SA does not own or control, or to individuals that it does not employ or manage.

Automatic collection of information

When the traveler uses the mobile application, the developer’s servers automatically record information that the device sends. This data may include information such as the device’s IP address and location, the device’s name and version, the operating system type and version, language preferences, information that the user searches for in the mobile application, access times and dates, and other statistics.

Information collected automatically is used only to identify potential cases of abuse and establish statistical information regarding the usage of the Info Transport București mobile application. This statistical information is not otherwise aggregated in such a way that would identify any particular user of the system.

Collection of location data

The application provides the traveler with the means to find the optimal route between the starting point A and arrival point B, using the locations of the vehicles on the route.

The user can start the journey from the current location or from another location on the map and can choose their destination by looking for an address, a point of interest, the desired station or even placing a pin on the map. They can also choose a location they have previously searched for or added to favorites. The background location permissions are needed for displaying notifications while the application is not in the main focus, so that the user is notified about their current trip information.

Collection of personal information

The user can access and use the Info Transport București mobile application without telling who they are or revealing any information by which someone could identify them as a specific, identifiable individual. If, however, they wish to use some of the features offered in the mobile application, they may be asked to provide certain personal information (for example, their name and e-mail address).

Any information that the user knowingly provides when creating an account or filling any forms in the mobile application is received and stored. When required, this information may include the following:

• Account details (such as username, unique user ID, password, etc)
• Contact information (such as e-mail address, phone number, etc)
• Basic personal information (such as name, country of residence, etc)
• Geolocation data of your device (such as latitude and longitude)
• Certain features on the mobile device (such as gallery, etc)

The user can choose not to provide their personal information, but then they may not be able to take advantage of some of the features in the mobile application. Users who are uncertain about what information is mandatory are welcome to contact STB SA.

Privacy of children

Any personal information from children under the age of 13 are not knowingly collected. If a user is under the age of 13, they are asked to not submit any personal information through the Info Transport București mobile application. If the user has reasons to believe that a child under the age of 13 has provided personal information through the Info Transport București mobile application, please contact STB SA to request the deletion of that child’s personal information from the entity’s services.

Parents and legal guardians are encouraged to monitor their children’s Internet usage and to help enforce this privacy policy by instructing their children never to provide personal information through the Info Transport București mobile application without their permission. Moreover, all parents and legal guardians overseeing the care of children are asked to take the necessary precautions to ensure that their children are instructed to never give out personal information when online without their permission.

Use and processing of collected information

STB SA acts as a data controller and processor when handling personal information, unless it has entered into a data processing agreement with the user in which case the user would be the data controller and STB SA the data processor.

STB SA’s role may also differ depending on the specific situation involving personal information. STB SA acts in the capacity of data controller when it asks the user to submit the personal information that is necessary to ensure their access and use of the Info Transport București mobile application. In such instances, STB SA is a data controller because it determines the purposes and means of personal information processing.

STB SA acts in the capacity of a data processor in situations when the user submits personal information through the Info Transport București mobile application. STB SA does not own, control, or make decisions about the submitted personal information, and such personal information is processed only in accordance with the user’s instructions. In such instances, the user providing personal information acts as a data controller.

In order to make the Info Transport București mobile application available to the user, or to meet a legal obligation, STB SA may need to collect and use certain personal information. If the user does not provide the information requested, STB SA may not be able to provide them with the requested products or services. Any of the information collected from the user may be used for the following purposes:

• Create and manage user accounts
• Send product and service updates
• Enforce terms and conditions and policies
• Protect from abuse and malicious users
• Respond to legal requests and prevent harm
• Run and operate the Info Transport București mobile application

Processing the user’s personal information depends on how they interact with the Info Transport București mobile application, where they are located in the world and if one of the following applies: (i) the user has given the consent for one or more specific purposes; (ii) provision of information is necessary for the performance of an agreement with the user and/or for any pre-contractual obligations thereof; (iii) processing is necessary for compliance with a legal obligation to which the user is subject; (iv) processing is related to a task that is carried out in the public interest or in the exercise of official authority vested in STB SA; (v) processing is necessary for the purposes of the legitimate interests pursued by STB SA or by a third party.

The user must note that under some legislations STB SA may be allowed to process information until the user objects to such processing by opting out, without having to rely on consent or any other of the legal bases. In any case, STB SA will be able to clarify the specific legal basis that applies to the processing, and in particular whether the provision of personal information is a statutory or contractual requirement, or a requirement necessary to enter into a contract.

Disclosure of information

Depending on the requested services or the necessity to complete any transaction or provide any service the user has requested, STB SA may share the user’s information with affiliates, contracted companies, and service providers that STB SA relies upon to assist in the operation of the Info Transport București mobile application available to the user and whose privacy policies are consistent with those of STB SA or who agree to abide by STB SA’s policies with respect to personal information. STB SA will not share any personally identifiable information with third parties and will not share any information with unaffiliated third parties.

Service providers are not authorized to use or disclose the user’s information except if necessary to perform services on behalf of STB SA or comply with legal requirements. Service providers are given the information they need only in order to perform their designated functions, and STB SA does not authorize them to use or disclose any of the provided information for their own marketing or other purposes.

Retention of information

STB SA will retain and use the user’s personal information for the period necessary to comply with its legal obligations, to enforce its agreements, resolve disputes, unless a longer retention period is required or permitted by law.

STB SA may use any aggregated data derived from or incorporating the user’s personal information after they update or delete it, but not in a manner that would identify them personally. Once the retention period expires, personal information shall be deleted. Therefore, the right to access, the right to erasure, the right to rectification, and the right to data portability cannot be enforced after the expiration of the retention period.

Data analytics

Info Transport București mobile application may use third-party analytics tools that use cookies, web beacons, or other similar information-gathering technologies to collect standard Internet activity and usage information. The information gathered is used to compile statistical reports on user activity such as how often users visit Info Transport București mobile application, what pages they visit and for how long etc. STB SA uses the information obtained from these analytics tools to monitor the performance and improve Info Transport București mobile application. STB SA does not use third-party analytics tools to track or to collect any personally identifiable information of its users and will not associate any information gathered from the statistical reports with any individual user.

Account deletion

The user can request the account deletion from the platform at any time. By deleting the account, the user will no longer be able to log in to the portal. Cards attached to their account will no longer be associated to that account, their favorite locations and line subscription settings will be deleted, and they will no longer receive e-mail or device notifications.

Deleting the account has no impact on the cards managed by that account. They will be able to operate independently of the deleted account.

Later, if the user wants, they can re-create their account with the same e-mail address, but the settings associated with that account will need to be redone.

Before submitting the request to delete the account, it is recommended that the user downloads and saves their documents related to orders or transactions made through the travel portal.

The deletion of the account is done in two stages: the request from the portal and the subsequent confirmation by e-mail for STB SA to be sure that the request is a valid one. If this request has not been confirmed within the timeframe indicated in the informative e-mail, no further action will be taken.

Data deletion

Personal data may be deleted at user’s request only if it is no longer necessary for the purposes for which it was collected.

The data collected is used for the traceability of financial transactions and to justify the allocation of subsidies and is subject to legal obligations.

The user has the right to request information regarding their personal data that STB SA stores.

E-mail notifications

STB SA offers electronic messages to which the user may voluntarily subscribe at any time. STB SA is committed to keeping the user’s e-mail address confidential and will not disclose their e-mail address to any third parties except if allowed in the information use and processing section. STB SA will maintain the information sent via e-mail in accordance with applicable laws and regulations.

In compliance with the CAN-SPAM Act, all e-mails sent from STB SA will clearly state who the e-mail is from and provide clear information on how to contact the sender. The user may choose to stop receiving e-mails from STB SA by following the unsubscribe instructions included in these e-mails or by contacting the entity. However, they will continue to receive essential transactional e-mails from the payment processor.

Push notifications

STB SA offers push notifications to which the user may also voluntarily subscribe at any time. To make sure push notifications reach the correct devices, STB SA relies on a device token unique to the user’s device which is issued by the device’s operating system. STB SA will maintain the information sent via e-mail in accordance with applicable laws and regulations. If, at any time, the user wants to stop receiving push notifications, they must simply adjust their device settings accordingly.

Links to other resources

The Info Transport București mobile application contains links to other resources that are not owned or controlled by STB SA. The user is asked to be aware that STB SA is not responsible for the privacy practices of such other resources or third parties. The user is encouraged to be aware when they leave the Info Transport București mobile application and to read the privacy statements of each and every resource that may collect personal information.

Information security

STB SA secures information that the user provides on computer servers in a controlled, secure environment, protected from unauthorized access, use, or disclosure. STB SA maintains reasonable administrative, technical, and physical safeguards in an effort to protect against unauthorized access, use, modification, and disclosure of personal information in the entity’s control and custody. However, no data transmission over the Internet or wireless network can be guaranteed.

Therefore, while STB SA strives to protect the user’s personal information, they must acknowledge that: (i) there are security and privacy limitations of the Internet which are beyond STB SA’s control; (ii) the security, integrity, and privacy of any and all information and data exchanged between the user and the Info Transport București mobile application cannot be guaranteed; and (iii) any such information and data may be viewed or tampered with in transit by a third party, despite best efforts.

As the security of personal information depends in part on the security of the device that the user uses to communicate with STB SA and the security the user uses to protect their credentials, the user is asked to take appropriate measures to protect this information.

Data breach

In the event STB SA becomes aware that the security of the Info Transport București mobile application has been compromised or users’ personal information has been disclosed to unrelated third parties as a result of external activity, including, but not limited to, security attacks or fraud, STB SA reserves the right to take reasonably appropriate measures, including, but not limited to, investigation and reporting, as well as notification to and cooperation with law enforcement authorities. In the event of a data breach, STB SA will make reasonable efforts to notify affected individuals if it believes that there is a reasonable risk of harm to the user as a result of the breach or if notice is otherwise required by law. When it does, it will post a notice in the mobile application and/or send an e-mail regarding this issue.

Changes and updates

STB SA reserves the right to modify this privacy policy or its terms related to the Info Transport București mobile application. When it does, it will send an e-mail to notify the user. It may also provide notice to the user in other ways, such as through notifications in the Info Transport București mobile application.

An updated version of this privacy policy will be effective immediately upon the posting of the revised policy unless otherwise specified. The user’s continued use of the Info Transport București mobile application after the effective date of the revised policy (or any other act specified at that time) will constitute the user’s consent to those changes. However, STB SA will not, without the user’s consent, use their personal information in a manner materially different than what was stated at the time their personal information was collected.

Acceptance of this policy

The user acknowledges that they have read this privacy policy and agree to all its terms and conditions. By accessing and using the Info Transport București mobile application and submitting their information the user agrees to be bound by this policy. If they do not agree to abide by the terms of this policy, they are not authorized to access or use the Info Transport București mobile application.

Contacting us

If the user has any questions, concerns, or complaints regarding this policy, the information that STB SA holds about them, or if they want to exercise their rights, they are encouraged to contact the entity using the e-mail address below:

STB SA will attempt to resolve complaints and disputes and make every reasonable effort to honor the user’s wish to exercise their rights as quickly as possible and in any event, within the timescales provided by applicable data protection laws.

This document was last updated on October 31, 2023.