1. Who is the controller
The controller of the VYPRAVO Jazdec application and the personal data described below is:
Blueridge s. r. o.
Karpatské námestie 7770/10A, 831 06 Bratislava – Rača, Slovakia
Company ID (IČO) 57 383 448
Contact for privacy questions: info@vypravo.online.
2. What VYPRAVO Jazdec is
VYPRAVO Jazdec is a work app for drivers and guides whose account was created by their dispatcher. There is no public sign-up.
3. What data we process
| Data | Purpose | Legal basis |
|---|---|---|
| Name, username, e-mail, language | account, sign-in, password reset | contract / legitimate interest |
| Trips, pickups, schedule, availability | showing your work | contract |
| Expenses and receipt photos | reimbursement | contract, accounting duties |
| Chat messages and photos with dispatch | communication with dispatch | contract |
| Vehicle handover video (with sound) and photos, odometer, fuel, damages | evidence of vehicle condition | legitimate interest (protects driver and company) |
| Guest ratings for your trips | feedback | legitimate interest |
| Random install identifier, device name and type, app version | sign-in security, list of your devices | legitimate interest (security) |
| Notification token | sending notifications | legitimate interest |
| Security logs (sign-in time, IP address, browser/app type) | protecting accounts from misuse | legitimate interest (security) |
4. What the app does not do
- No location (in this version): we do not process location, advertising identifiers, or phone contacts.
- No third-party analytics or advertising SDKs: we use no third-party analytics or advertising tools and do not track you across apps.
- No selling of data: we do not sell data.
Photos: for receipt photos and chat photos, the server removes metadata including location (EXIF/GPS). The same metadata stripping is planned for vehicle handover photos too; until that is deployed, this stripping does not apply to handover photos.
Guest data: the app shows the assigned driver the guest details needed for the trip (name, pickup hotel, party size, notes, phone). The controller processes this data under its customer privacy policy.
Camera and microphone: only when you record a vehicle handover video or attach a photo yourself.
5. Legal basis
The legal basis for each item of data is stated directly in the table in section 3 above. In summary this is:
- Performance of a contract (GDPR Art. 6(1)(b)) — trips, pickups, expenses, dispatch communication and other records needed to carry out your working relationship.
- Legitimate interest (GDPR Art. 6(1)(f)) — evidence of vehicle condition, ratings, sign-in security and security logs.
6. Retention
- Account and work records: kept while you work with us, then as required by law (e.g. accounting records).
- Vehicle handover videos and photos: kept until the operator deletes them; automatic deletion after a set period is being prepared.
- Audit log: records of actions taken in the app (e.g. editing or deleting expenses or trips) are kept for 12 months; money-related and GDPR actions for 10 years, the same as in the VYPRAVO Booking app.
- Login attempts: login attempts including IP address – 90 days.
- Known devices: the device fingerprint used to recognise it is kept for 365 days.
- Unfinished uploads are deleted after 72 hours.
7. Recipients and processors
- Hosting: data is stored on our own virtual server, operated by netcup GmbH in Vienna, Austria (EU).
- Authorised dispatchers and administrators of the controller can access it.
- Google Firebase Cloud Messaging (processor): delivers notifications. It sees only the device token and the notification text.
8. International transfers
Handing the device token to Google Firebase Cloud Messaging may involve processing outside the EU within its own push infrastructure, under Google's standard contractual safeguards.
9. Security
- Face / fingerprint unlock: your phone checks the biometrics on its own. No biometric data reaches us.
- In the app, Profile → Devices shows where you are signed in and lets you sign out any device.
10. Your rights
You have the rights of access, correction, erasure, restriction, portability and objection. Write to info@vypravo.online. You may also complain to the Slovak data protection authority (Úrad na ochranu osobných údajov SR).
11. Contact
Privacy questions: info@vypravo.online
Postal address: Karpatské námestie 7770/10A, 831 06 Bratislava – Rača, Slovakia
12. Changes to this policy
We publish changes to this policy on this page. The effective date is shown in the page header above.