Personal Data Processing Policy
Last updated: 07/17/2026This document, called the “Personal Data Processing Policy”, serves as information documentation pursuant to Art. 13 GDPR, in which we would like to inform you about the processing of personal data that may take place in connection with visiting our website or using our services. In this document we inform you about how, in what manner, and for how long we process your personal data, and what rights you have in this respect.We are the company Find-bus.com, s.r.o., with its registered office at Holická 1173/49a, Hodolany, 779 00 Olomouc, registered under file no. C 93651 at the Regional Court in Ostrava, Company ID: 197 07 461, email: podpora@find-bus.com, tel.: +420 604 374 415, offering brokerage services in particular in the area of passenger transport and other related areas.As the controller, the GDPR requires us to inform you about how we will process your personal data, in particular for how long, for what purposes, etc.In this document you will therefore find more detailed information about the processing of personal data.Yes, we use cookies on our website, in particular necessary, analytical, and marketing cookies; however, we use analytical and marketing cookies only after you give us your consent in our cookie bar. In the cookie bar you can also select individual types of cookies. You can also change your decision to give or withhold consent at any time. Below we provide more details about the cookies used, including their purpose, recipients or providers, and storage period.Personal data is information that we process about you. It is information that you either provide to us yourself or that we obtain about you in some way (e.g. when you use our website). Personal data is divided into individual categories, which may be, for example:It is not the case that personal data is always processed to the extent described above. It always depends on the specific situation.Rest assured that we always process your personal data in accordance with the GDPR, and always on the basis of a valid legal ground. Pursuant to Art. 6 GDPR, we may process your personal data only if:You will find the basis on which we process your personal data in a specific case below.If you want to use our services, you need to register with us and agree to our general terms and conditions. In order to provide our service to you, we need your personal data.In such a case, we process your personal data for the following purposes:It is your free decision whether to entrust us with the personal data listed above. The truth is, however, that without it we cannot conclude a contract with you or provide our services. To activate the service, it is not mandatory to give us consent to receiving commercial communications – you can also exclude the customer exemption at any time.For our service to function, however, it is important to process certain statistical data about how our clients use our service. Without it, we would not be able to detect problems or provide support. Therefore, when you use our service, we process your personal data on the basis of our legitimate interest, which consists in collecting information about the use of the service in as anonymized a manner as possible. If you feel that in your case your right to privacy takes precedence over our legitimate interest, you have the right to object to this processing.We are glad to stay in touch with you and send you our news, information about upcoming services, and other information we think you might like. Therefore, if you give us your consent, we process your personal data as follows:All processing is entirely voluntary on your part; you have no obligation to give us consent, and conversely you have every right to withdraw any consent at any time, using the procedure described below.When sending commercial communications, we try not to send you information that may not necessarily interest you. For this purpose, we carry out profiling, which consists in analyzing what you like and, based on that, sending you information mainly from your area of interest.If you want to communicate with us, we are only too happy. In such cases we process your personal data for the following purposes:Providing the above data is not mandatory on your part; however, without it we are unable to communicate with you. Answering your query is therefore in our legitimate interest. If you feel that in your case we exceed our legitimate interest, you may object to this processing using the procedure described below.We process your personal data only for the necessary period, never longer than we really need. You will always find all processing periods next to the relevant purpose above.We disclose your personal data to third parties only where required by law or on the basis of a processing agreement. Below we list the categories of recipients; we will always be happy to give you specific information about specific recipients:In view of the fact that we process your personal data, you have various rights towards us, about the content, conditions of exercise, and limitations of which we would like to inform you.However, we cannot comply in all cases. Sometimes there are reasons for which we should keep your personal data where it is necessary:If you would like to exercise your rights, please write to us at podpora@find-bus.com, or through the settings in your user account, where this is possible for the given right.As a rule, we do not transfer personal data outside the European Union or the European Economic Area. Exceptionally, such a transfer may occur, but only in cases where an adequate level of personal data protection is ensured in accordance with the GDPR, in particular on the basis of a European Commission adequacy decision, standard contractual clauses, or other appropriate safeguards. Such a transfer may occur in particular in connection with the use of certain analytical or marketing tools, for example tools provided by Google, Microsoft, or Meta.No.
1
What is this document?
2
Who are we?
3
What will I find in this document?
4
Do you use cookies on your website?
Analytical
CLID
PurposeIdentifying the visitor and measuring website usage via the Microsoft Clarity tool.
Recipients and providersMicrosoft Clarity / Microsoft + website operator
Storage period1 year
MUID
PurposeIdentifying the browser and measuring website usage via Microsoft tools, in particular Microsoft Clarity.
Recipients and providersMicrosoft Clarity / Microsoft + website operator
Storage period2 years
_ga
PurposeDistinguishing individual users and measuring website traffic via Google Analytics.
Recipients and providersGoogle Analytics / Google + website operator
Storage period13 months
_ga_V704VD38DN
PurposeRetaining session state and measuring website usage via Google Analytics 4.
Recipients and providersGoogle Analytics / Google + website operator
Storage period13 months
Marketing
_fbp
PurposeIdentifying the browser for the purpose of measuring ad performance, remarketing, and ad personalization via the Meta Pixel.
Recipients and providersMeta Platforms / Meta Pixel + website operator
Storage period90 days
NID
PurposeStoring user preferences and supporting personalization of ads and content in Google services.
Recipients and providersGoogle + website operator
Storage period6 months
__Secure-3PAPISID
PurposeAd personalization and operation of Google services across websites.
Recipients and providersGoogle + website operator
Storage period13 months
__Secure-3PSID
PurposeAd personalization and operation of Google services across websites.
Recipients and providersGoogle + website operator
Storage period13 months
__Secure-3PSIDCC
PurposeSecuring Google services, protection against abuse, and support of advertising functions.
Recipients and providersGoogle + website operator
Storage period1 year
__Secure-3PSIDTS
PurposeSecuring Google services, protection against abuse, and support of advertising functions.
Recipients and providersGoogle + website operator
Storage period1 year
5
What is personal data?
Identification data
ExampleE.g. name or company name, surname, title, nickname, company ID…
Address data
ExampleE.g. municipality name, street, house or registration number, postal code.
Contact data
ExampleE.g. email, phone number, social media handle.
Payment data
ExampleE.g. billing details or account number.
Website usage information
ExampleE.g. logs and activity within the website.
Content of communication
ExampleE.g. the content of our communication or your messages.
6
What entitles you to process my personal data?
you give us your free and always revocable consent;
the processing is required by law and takes place in fulfilment of our legal obligation;
the processing is required by a contract we conclude together, or where such conclusion is imminent;
we have a legitimate interest in processing your personal data and such legitimate interest takes precedence over your privacy rights.
7
How do you process my personal data in the case of registration and use of the service?
Conclusion and performance of the contract, including setting up a user account and related communication
Scope
Identification dataContact dataAddress dataPayment data
Legal groundNecessity for the performance of the contract (or the controller's legitimate interest where you represent a legal entity)
Processing periodFor the duration of the contract and then 3 years after its termination (basic data on the contractual relationship for 10 years)
Verification of the identity and eligibility of website users and registered vehicles
Scope
Identification dataContact dataData about the user and vehiclesDocuments needed to verify eligibility to provide transport
Legal groundNecessity for the performance of the contract, the controller's legitimate interest in the secure operation of the website, and possibly compliance with a legal obligation
Processing periodFor the duration of the contract and then 3 years after its termination; accounting and statutory documents for the period stipulated by law
Submission, management, and evaluation of requests and offers within the website, including brokering the conclusion of a passenger transport contract
Scope
Identification dataContact dataData about offers, requests, and transportData about the customer, carrier, and vehiclesContent of communication
Legal groundNecessity for the performance of the contract and the controller's legitimate interest in the proper functioning of the website
Processing periodFor the duration of the contract and then 3 years after its termination; basic data on the contractual relationship for 10 years
Contacting you by email and phone regarding offers of services similar to those you have used
Scope
Identification dataContact dataInformation about the services used
Legal groundThe so-called customer exemption
Processing periodFor the duration of the contract and then 3 years after its termination
Sending offers, newsletters, and other information from the controller, including third-party offers, tailored to what you might like
Scope
Identification dataContact dataWebsite usage information
Legal groundConsent
Processing periodUntil consent is withdrawn
Analysis of service usage for the purpose of improving the website
Scope
Website usage information
Legal groundLegitimate interest
Processing periodFor the duration of the contract and then 3 years after its termination
8
How do you process my personal data in the case of the newsletter?
Sending offers, newsletters, and other information from the controller, including third-party offers, tailored to what you might like
Scope
Identification dataContact dataWebsite usage information
Legal groundConsent
Processing periodUntil consent is withdrawn
9
How do you process my personal data in the case of the contact form?
Answering your query and related communication
Scope
Identification dataContact dataContent of communication
Legal groundLegitimate interest
Processing periodFor the duration of our communication, but no longer than 1 year after it ends
10
For how long do you process personal data?
11
To whom do you disclose personal data?
Customers and carriers
Purpose of disclosureTo the extent necessary for the operation of the website, data may be disclosed to the other party of an intended or concluded passenger transport contract, in particular data stated in the request, the offer, vehicle data, and identification and contact data.
IT service providers
Purpose of disclosureAs part of our activities, we use third-party services that help us operate the technical part of our business, in particular the website, forms, email distribution, etc.
Providers of payment and escrow services
Purpose of disclosureIn the case of online payments, your personal data may be disclosed to payment service providers for the purpose of processing the payment, verifying the transaction, preventing fraud, recording payments, and possibly handling complaints or refunds.
Providers of monitoring applications
Purpose of disclosureIn justified cases, we also use third-party tools designed to monitor the course of service usage or related processes, including ensuring the smooth operation of service provision.
12
What rights do I have in connection with the processing of personal data?
Right of accessPractically anyone has the right to contact us and obtain confirmation from us as to whether or not we process their personal data. In addition, you have the right at any time to ask us for more detailed information about the processing of your personal data, such as the purposes of processing, the categories of data concerned, the recipients, the processing period, your rights, etc.
You also have the right to obtain from us a copy of all personal data we process about you. The only reason we would not comply is a situation where doing so would adversely affect the rights and freedoms of other persons or data subjects.Right to rectificationIf you find that we process your personal data inaccurately (e.g. we have an old address, contact details, etc.), you always have the right to ask us to correct the inaccurate data, or complete it on the basis of your supplementary declaration.
Right to erasure (right to be forgotten)We process your personal data only for the period we have determined, and then delete it immediately. In addition, you have the right to write to us to erase your personal data if one of the following reasons arises:
the personal data is no longer needed for the purposes stated above;
you withdraw your consent to the processing of personal data;
you object to the legitimate interest and we assess that this legitimate interest does not outweigh your rights (in the case of marketing purposes based on legitimate interest, we delete this data immediately);
the processing was unlawful;
erasure is required by the law of the Czech Republic or EU law.
for the exercise of the right to freedom of expression and information;
for compliance with a legal obligation;
for reasons of public interest in the area of public health;
for archiving purposes in the public interest, for scientific or historical research purposes, or for statistical purposes;
for the establishment, exercise, or defence of legal claims.
Right to restriction of processingIf you ask us to, we will stop processing your personal data, i.e. we will keep it stored but otherwise not process it. This right is called the “right to restriction of processing” and you can use it only in the following cases, where:
you contest the accuracy of the personal data, for the period needed to verify its accuracy;
the processing is unlawful, you refuse the erasure of the personal data, and instead request the restriction of its use;
we no longer need the personal data for processing purposes, but you require us to retain it for the establishment, exercise, or defence of legal claims;
you object to the legitimate interest, until the time its legitimacy is assessed.
Right to data portabilityWhere we process your personal data by automated means and the processing is based on consent or necessity for the performance of a contract, you have the right to so-called portability. The right to portability guarantees that the data you have provided to us will be handed over to you in a commonly used and machine-readable format, or that we will transfer this data to another controller you designate.
Right to object to processing based on legitimate interestWhere we process your personal data on the basis of legitimate interest, you have the right to file a reasoned objection to this processing. In the case of processing for direct marketing purposes, you do not have to justify the request, and in accordance with the GDPR we will immediately stop processing your personal data.
This is the case, for example, where we send you commercial communications about similar services you have used from us, i.e. on the basis of the so-called customer exemption. If you do not wish this, let us know at our email, or tell us at the appropriate place during registration, and we will not do so, or will stop. You can also use the unsubscribe link provided at the end of our commercial communications.In other cases, we have the right to review your objection and assess whether your rights take precedence over our legitimate interest.Right to withdraw consentIf we process your personal data on the basis of consent, you naturally have the right to refuse and withdraw consent at any time. In such a case, we will no longer continue further processing and, unless prevented by law, we will delete your personal data.
However, if we also process your personal data on the basis of another legal ground, we are not obliged (and sometimes not even permitted) to delete that personal data.Right to lodge a complaint with the Office for Personal Data ProtectionIf you believe that we process your personal data unlawfully, you naturally have the right to lodge a complaint with the supervisory authority, which is the Office for Personal Data Protection (www.uoou.cz).
13
How can I exercise the rights listed above?
14
Do you transfer personal data outside the EU?
15