Privacy Policy

Limited Liability Company «Hrinbas» », EDRPOU code – 45389964, represented by Director Anastasiia Valeriivna Suzdalieva, provides access to the mobile application «Zelenyi Slon 7». The privacy of the mobile application’s users is of great importance to us, and we make every effort to ensure its protection. These rules explain how we use your personal information.

1. Data we collect:

Personal data provided by the Client:

We process the personal data that you provide to us: name, email address, phone number, city—both when filling out the registration form in the Mobile application and when completing your profile.
To create a client account in the mobile application, you are required to provide the following information: email address, first and last name, and a password created by you.
We use the specified data to manage the client account and issue invoices.
You may also, if you wish, indicate in your account your mobile phone number so that we can contact you in the event of a delay or a change of route.
In your password-protected account, you can manage bookings or save your data for future trips.
At any time, using your account features, you can update or delete your account and, therefore, all personal data you have specified.
If you wish, you may also store the following additional information in your client account: form of address, date of birth, address (postal code, city, and country), payment methods.
We also process your data in cases where you need to contact our Care Team or reach out to us through other channels (for example, through social networks).
You may participate in promotions or raffles—in such cases, you will also provide us with your personal data. In addition, you may send us feedback in the Mobile application, share your opinion, or seek assistance regarding the use of the Mobile application.
When ordering tickets for passenger transportation services, we collect, store, and process the following categories of personal data: email address, first and last name, connection data, payment data, date of birth (to provide transport services with separate child fares), consent to the relevant terms of service, seat reservation information, baggage information, booking domain language, booking channel (application).
We transfer the above data to the relevant carrier or carriers and, in the case of certain obligations/orders, to state authorities and institutions.
The necessary payment data will be transferred to the payment service provider for the secure processing of your payments.

Personal data collected automatically:

We may automatically process certain data, including your IP address, the date and time when you used our services, information about hardware and software, information about your mobile device’s operating system, such as app versions and language settings. We may also collect information about clicks and the pages we have shown you.
When you use a mobile device, we may also receive data that identifies this device, its settings and characteristics, location data, application crashes, other system operations, and your advertising identifiers. When you place an order through the Mobile application, our system records by what means and through which websites it was placed or from which websites you navigated to the Mobile application.
The Mobile application may access various services and data of your mobile device: the address book (contacts), location, and external data storage devices (memory cards). In any case, such access is not granted without your consent.

2. Use of your personal information:

We collect and use your personal information in order to provide you with services, fulfill legal obligations (including the provision of transportation services), and to improve services and service quality.

We may use your personal information for the following purposes:

• processing your financial transactions (in terms of receiving from the payment system confirmation of payment);
• sending you the tickets and other services you purchased/booked;
• servicing you, as a user or passenger, in the process of handling your requests and claims by the Care Team;
• managing your account data;
• sending you the requested information about the terms of purchasing a ticket or transportation service, etc.;
• informing you about the Company’s special offers;
• notifying you about the results of considering claims and/or taking measures regarding actions that violate the terms of service;
• that violate the terms of service;

We may also use your personal information for the following purposes:

• sending you notices, invoices, and payment reminders, and receiving payments from you;
• sending you non-marketing commercial communications;
• sending you by email messages you have specifically requested;
• sending you an email newsletter if you have subscribed to it (you may inform us at any time that you no longer wish to receive email newsletters from us);
• sending you marketing messages regarding our business activity or the business activity of carefully selected third-party companies that, in our opinion, may interest you, by publication or—if you have specifically consented to this—by sending email or through the use of similar technologies (you may inform us at any time that you no longer wish to receive marketing messages); providing third-party companies with statistical information about our users (however, these third-party companies will not be able to identify any individual user from this data);
• for the purpose of ensuring the security of the mobile application and preventing fraud;

3. Transfer of data to third parties:

For the purpose of quality service provision, personal data may be transferred to the following persons:

• carriers that directly provide services;
• (IT) service providers;
• financial institutions and payment service providers;
• business partners;
• customer service providers (internal/external), retail operators;
• insurance companies, other partners involved in our activities (for example, auditors, banks, insurance companies, lawyers, supervisory authorities, other parties involved in the company’s business transactions)

We may transfer personal data to state authorities and institutions (for example, to the police, the prosecutor’s office, supervisory authorities, etc.) if there is a relevant obligation/permission.

4.Retention period and subsequent deletion of personal data:

Your personal data is stored for the period during which you have an active account (account), except for IP address data, which is stored for three weeks from the time of placing the order. If your account is deleted, personal data will also be deleted from the database, except in cases where such data is needed to achieve legal, marketing purposes and to prevent fraud. Personal data necessary for the above purposes will be stored for 7 years, or for a longer period established for the storage of such information/data if provided by applicable law. Upon the expiration of the above period, we anonymize your personal data so that it can no longer be linked to you personally. In this case, we will be able to use this information for targeting advertising and/or informational materials, for statistical or other purposes without further informing you, since such information will cease to be personal data.
Deleting the Mobile application from your device does not result in the deletion of your personal data.

5. User rights:

You may at any time exercise your rights as a personal data subject, namely:

• right to information: you may contact us with a request to provide information regarding the processing of your personal data. You must clearly formulate your request so that we can provide you with the necessary information as quickly as possible. Upon request, we will provide you with a copy of the personal data that is subject to processing. Please note that in certain cases defined by law, your right to receive information may be limited.
• right to rectification: you have the right to correct inaccurate or outdated personal data. In addition, you have the right to supplement any of your personal data that is incomplete.
• right to erasure: you have the right to erase your personal data. Your right to erase personal data depends, in particular, on whether at that time there will be a need to retain your data for our compliance with statutory obligations.
• right to restriction of processing: you have the right to request restriction of the processing of your personal data.
• right to withdraw consent: you have the right to withdraw your consent to the processing of personal data at any time. This also applies to consent statements given before the GDPR came into force, i.e., before 25 May 2018.

6. Use of cookies, plugins, and other services:

We may use cookies, web beacons, tags, scripts, local shared objects such as HTML5, and advertising identifiers (including mobile identifiers such as Apple’s IDFA or Google’s Advertising ID) and similar technologies (“Cookies”) in connection with the use of Websites or Mobile applications for certain purposes: your authentication, remembering your settings, and other purposes specified below.
A cookie is a small piece of data that is sent to the browser on your computer or mobile device. Cookies that belong to the Websites or Mobile applications are primary. Cookies that we allow other organizations to send through the Websites are called “third-party cookies.”
The Mobile application uses cookies for various purposes:
Technical cookies: we want our users to be able to use modern, convenient websites and applications that automatically adapt to their needs. We use technical cookies so that the Website is displayed correctly and works without errors, and so that you can create an account, log into it, and manage your orders. Technical cookies are necessary to ensure the error-free operation of the Application.
Functional cookies: they are necessary to remember your preferences and help you use the Mobile application efficiently. We may use them to remember your data and save you from having to enter your username and password each time. Your password will always be encrypted.
You can also limit the sharing of some of this data using your mobile device settings.

7. Data security

The Company will take sufficient technical and organizational measures to prevent the loss, unlawful use, or falsification of your personal information. |We will store all personal information you provide on our secure servers (protected by both password and firewalls).
All electronic financial transactions carried out using the Application will be protected by data encryption technology.
You are fully responsible for keeping your password for accessing the Application confidential.
We will never ask you for your password (except when you are attempting to log into your account in the Application).
If you have any questions or concerns related to the Privacy Policy or how the Company manages your personal information, as well as if you encounter any other issues regarding personal information, be sure to contact our Data Protection Officer by email at: 43475155@ukr.net.

8. Updates to the privacy policy:

This policy and the legal relations falling under its scope are governed by the Law of Ukraine “On Personal Data Protection.” Current laws and requirements for personal data processing may change. In such a case, the Company will publish a new version of the Privacy Policy indicating the date of the current edition.
We may from time to time supplement or otherwise amend the Privacy Policy without prior notice.
By this you consent to amendments to the Privacy Policy without obtaining any special confirmation from you. We recommend regularly checking this page to stay informed about the latest changes.

Edition as of March 29, 2024