Informativa sulla Privacy
1. General Information
This Privacy Policy sets out the rules for processing personal data of Users of the Waby application (Return from Trail) and website waby.pl.
Controller: Waby Sp. z o.o., ul. Przykładowa 1, 00-001 Warsaw, Poland
Contact: privacy@waby.pl
2. Data Collected
2.1. User-provided data
- Email – for account creation
- Name – displayed in logistics plans
- Phone (optional)
- Profile photo (optional)
- Password – encrypted with Argon2id
2.2. Automatic data
- IP address, device ID
- System type/version
- Access date/time, activity logs
2.3. Location data
Collected only with consent, within active plan. Not archived after completion.
3. Processing Purposes
Art. 6(1)(b) GDPR – Contract
- Account, logistics plans, chat, ratings, complaints
Art. 6(1)(f) GDPR – Legitimate interest
- Security, analytics, claims
Art. 6(1)(a) GDPR – Consent
- Location, push notifications, newsletter
4. Retention Period
- Account: duration + 90 days
- Plans: 90 days after completion
- Location: 7 days after plan ends
- Messages: 90 days
- Unverified accounts: 30 days
5. Data Recipients
- Other users (within plans)
- IT providers (hosting)
- Authorities (under law)
We do not sell personal data.
6. User Rights (GDPR)
- Access (Art. 15), rectification (Art. 16), erasure (Art. 17)
- Restriction (Art. 18), portability (Art. 20), objection (Art. 21)
- Withdraw consent, complaint to supervisory authority
Contact: privacy@waby.pl
7. Security
- HTTPS/TLS 1.2+, Argon2id, JWT RS256
- Rate limiting, backups, RBAC
8. Children
Service for 16+. We don't knowingly collect children's data.
9. Cookies
See Cookie Policy.
10. Changes
We notify via app or email with 14 days notice.
11. Contact
Email: privacy@waby.pl
Address: Waby Sp. z o.o., ul. Przykładowa 1, 00-001 Warsaw, Poland