Privacy Policy.
Version dated 24 March 2026.
The privacy of Users and the security of their data are the overriding priority of SkyCash Poland S.A., hereinafter referred to as “we”, “us”, or “SkyCash”. We make every effort to protect your personal data, which we administer, as effectively as possible. We want the safeguards we use to be effective and to guarantee the confidentiality, integrity, and availability of the processed data.
Personal data means any operations performed on your personal data, for example collecting or analyzing data for the purpose of providing services.
Processing are all operations performed on your personal data, e.g. obtaining or analysing data for the purposes of providing services.
This document concerns personal data and other information that we receive from you. It explains what personal data processing operations may be carried out as part of SkyCash’s business activity and how they are carried out.
Who administers your personal data?
The controller of your personal data is SkyCash Poland S.A., with its registered office in Warsaw at ul. Prosta 68, 00-838 Warsaw, owner of SkyCash Transport and SkyCash Parking mobile applications and the websites www.skycash.com, flota.skycash.com, oldflotaskycash.com (hereinafter jointly the „SkyCash application”). www.skycash.com, flota.skycash.com, oldflota.skycash.com (hereinafter collectively referred to as the “SkyCash application”).
The controller is the entity that decides how your personal data is used.
SkyCash applies technical and organizational safeguards ensuring the protection of personal data against unauthorized or unlawful processing, accidental loss, damage, or destruction, and ensures that the same level of data protection is applied by cooperating entities to which it has entrusted data for processing.
How can you contact us to obtain more information about the processing of your personal data?
Write to our appointed Data Protection Officer, Tomasz Cieślik, if you have doubts or questions regarding your rights. You can contact him at: prywatnosc@skycash.com privacy@skycash.com
mailing address:
Data Protection Officer
SkyCash Poland S.A.
68 Prosta Street
00-838 Warsaw
Where do we get your data from?
We obtained it directly from you during the process of creating a SkyCash Account and while you use the SkyCash application, as well as from other sources, in accordance with the law (for example for verification purposes) and on the basis of agreements with partners. These other sources may include public sources, for example the National Court Register (KRS) and the Central Registration and Information on Business (CEIDG). We also collect data from your device, for example: GPS location data (with your explicit consent), data concerning recognition of user activity for the purpose of implementing the auto-stop (smart-move) function, i.e. the automatic ending of an active parking session. In each of these cases, we verify whether we have a legal basis for processing your personal data.
What is the purpose and legal basis for the processing of your personal data by SkyCash Poland S.A.?
We assure you that we process your personal data in accordance with the applicable law, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR), the Act of 10 May 2018 on the Protection of Personal Data, and sector-specific regulations.
We guarantee that your data will be processed in accordance with the purpose for which it was provided to us and, where the basis for processing is your voluntary consent, you may withdraw that consent at any time.
We process your personal data because it is necessary to conclude, properly perform, terminate, or undertake other actions necessary to perform the contract concluded with you (Article 6(1)(b) GDPR), including in particular to:
- enable the provision of services by electronic means and full use of the SkyCash application, including making transactions and payments for services available in the SkyCash application, as well as providing services to you,
- conclude, monitor, and remind you about insurance policies that you concluded with our assistance, acting on your behalf,
- create and manage your account or accounts, and provide service for your account, transactions, and technical issue resolution,
- handle complaints regarding transactions carried out in the SkyCash application if you submit such a complaint,
- handle requests that you send to us (e.g. through a contact form),
- contact you, including for purposes related to the provision of services,
- conduct webinars presenting the service - an interactive meeting, online presentation, held in real time.
In addition, we process your personal data to fulfill obligations arising from legal provisions (Article 6(1)(c) GDPR), especially regulations concerning payment services, anti-money laundering and counter-terrorist financing, tax law, and consumer protection and competition law.
We also process your personal data for the purposes indicated below on the basis of the legitimate interests of SkyCash Poland S.A. (Article 6(1)(f) GDPR), which include:
- monitoring your activity and that of all other users, including managing your activity in the SkyCash application,
- carrying out marketing activities addressed to you (subject to the reservation that direct marketing will be conducted on the basis of your voluntary consent - Article 6(1)(a) GDPR) of SkyCash Poland S.A.’s own services, or the services or goods of third parties,
- support for financial and insurance services offered in the SkyCash application
- ensuring payment service support,
- ensuring the security of services that we provide to you electronically, including enforcing compliance with the internal rules of the SkyCash application and preventing fraud, money laundering, terrorism, abuse, and ensuring traffic safety,
- monitoring your activity and that of all other users, for example conducting research and analyses of the SkyCash application, including with regard to functionality, improvement of services, or estimating the main interests and needs of our users,
- handling your requests submitted in particular to the Customer Service Office when they are not directly related to performance of the contract,
- debt collection; conducting court, arbitration, and mediation proceedings,
- conducting statistical analyses;
- storing data for archiving purposes and ensuring accountability (demonstrating our compliance with legal obligations);
- improving the services we provide and optimizing the application on the basis of collected data, including data concerning user behavior in the application, device data, device telemetry including location.
If you consent to it (Article 6(1)(a) GDPR), we process your personal data for the purpose of:
- storing data in cookies;
- collecting data from websites and mobile applications;
- providing you with the Newsletter service - in this case, the legal basis for processing personal data is the consent you give by subscribing to the Newsletter and providing us with your e-mail address;
- organizing loyalty programs, competitions, and promotional campaigns in which you may participate;
- contacting you, including for purposes related to permitted marketing activities, through available communication channels, in particular and with your consent - by e-mail, SMS, and telephone,
- if you consent to it, we process your personal data for direct marketing purposes
You may withdraw your consent to the processing of personal data at any time by sending an e-mail to prywatnosc@skycash.com. We will stop processing immediately and inform you accordingly. We will process your personal data until you withdraw your consent. SkyCash guarantees that it will process your personal data only for specific, explicit, and legitimate purposes and will not process it further in a manner incompatible with those purposes. privacy@skycash.com We will cease processing immediately and inform you accordingly. We will continue to process your personal data until you withdraw your consent. SkyCash guarantees that it will only process your personal data for specific, explicit, and legitimate purposes and will not further process it in a manner incompatible with those purposes.
Are you required to provide us with your personal data?
We require you to provide the following personal data in order to conclude a contract with you and perform it, and thus provide the service to you:
- the phone number on which the SkyCash application will be used, first name, last name, e-mail address (in the case of a SkyCash Account), or
- the phone number on which the SkyCash application will be used, first name, last name, e-mail address, and in some cases PESEL number and identity document number (in the case of a SkyCash Account using a service that requires such data, e.g. a season ticket), or
- if you consent: information about your location via GPS, in order to speed up and facilitate the display of services in your area;
- the Skycash Parking application (formerly mobiParking) uses user activity recognition. In the application, user activity recognition includes only technical activity states such as:
- IN_VEHICLE
- ON_BICYCLE
- RUNNING
- STILL
- WALKING
NOTE: This information is used solely for the implementation of the auto-stop (smart-move) function, i.e. for the automatic ending of an active parking session; it works only when the user has the auto-stop function available and enabled.
If, for any reason, you do not provide the personal data necessary for the provision of the service (excluding data covered by your consent), unfortunately we will not be able to conclude a contract with you or provide certain services, and consequently you will not be able to use the SkyCash application or certain services within it.
If required by law, we may require you to provide other data necessary, for example for accounting or tax reasons, or to perform obligations arising from the Act of 1 March 2018 on Counteracting Money Laundering and Terrorist Financing.
Apart from these cases, providing your data is voluntary; in particular, providing data for marketing purposes is voluntary.
In addition, for the proper performance of the contract concluded with you or in order to fulfill our legal obligations, we process your data including:
- financial, e.g. SkyCash account balance,
- transaction data, e.g. details of payments made,
- browsing history, e.g. data necessary to maintain proper information exchange between the server and the browser when using the SkyCash application
- publicly available data or data obtained from third parties, e.g. data from public registers,
- technical data, e.g. data concerning the device on which you use the SkyCash application,
- location data, e.g. data concerning the location where a transaction is made using the mobile application.
What rights do you have in relation to SkyCash Poland S.A. regarding the processed data?
We guarantee the fulfillment of your rights arising from the General Data Protection Regulation (GDPR), i.e. the right of access, including obtaining a copy of the data, the right to rectify and complete data, and to erase it in cases provided for by law, restrict its processing, the right to data portability, the right not to be subject to automated decision-making, including profiling, as well as the right to object to the processing of your personal data.
You may exercise these rights, among others, when:
- with regard to a request to rectify or complete data: you notice that your data is incorrect or incomplete,
- with regard to a request to erase data: your data is no longer necessary for the purposes for which it was collected by SkyCash; you withdraw your consent to data processing; you object to the processing of your data,
- your data is being processed unlawfully; the data must be erased in order to comply with a legal obligation,
- with regard to a request to restrict data processing: you notice that your data is incorrect - you may request restriction of the processing of your data for a period allowing us to verify the accuracy of that data; your data will be processed unlawfully, but you do not want it erased; we will no longer need your data, but you may need it to defend or pursue claims; or you object to the processing of your data - until it is determined whether the legitimate grounds on our side override the grounds for the objection,
- with regard to a request for data portability: the processing of your data is based on a contract concluded with you or your consent and the processing is carried out by automated means.
You have the right to lodge a complaint regarding our processing of your personal data with the supervisory authority, which is the President of the Personal Data Protection Office
In what situations can you object to the processing of your data?
You have the right to object to the processing of your personal data when:
- the processing of your personal data is based on legitimate interest or for statistical purposes, and the objection is justified by your particular situation,
- your personal data is processed for direct marketing purposes, including profiling for that purpose.
To whom we disclose your personal data?
Within the organizational structure of SkyCash Poland S.A., access to your personal data will be granted only to employees authorized by us and only to the extent necessary. In some situations, we may disclose your personal data to recipients outside the structure of SkyCash Poland S.A., in particular entities providing IT, marketing, and solution optimization services. In every such case, we will carefully examine the legal basis for disclosing your personal data.
We disclose your personal data to entities whose services you use, in particular public transport organizers, municipalities, railway or coach carriers, parking service providers, toll road service providers, and other providers of services offered by SkyCash, to the extent necessary for the proper provision of the service, including ticket inspection or calculation of applicable discounts.
We disclose your personal data to entities to whom you instruct us to disclose your data for the performance of the service. This includes in particular services such as:
- concluding insurance – the service regulations are available here, we disclose your data if you instruct us to do so, within the scope of data necessary to present an insurance offer and conclude an insurance contract. here, we share your data if you give us such an order within the scope of data necessary to present an insurance offer and conclude an insurance contract.
Under applicable law, we may transfer your personal data to public authorities, in particular those combating fraud and abuse
We may transfer your data to payment operators in connection with payment execution and handling payment complaint.
We may transfer your data to entities handling communication conducted via e-mail or push notifications in order to inform you, for example, about changes to the regulations, current transaction status, service availability in the SkyCash application, and other important events. Each such entity is obliged by law and contract with SkyCash Poland S.A. to comply with GDPR and to process your data on the basis of and only within the scope provided for in the contract.
How long do we retain your personal data?
We retain your personal data for the duration of the contract concluded with you, as well as after its termination for other lawful purposes related to the contract:
- pursuing claims related to the performance of the contract - for the duration of the contract and for XNUMX years after its termination for the purpose of potential pursuit or defense against claims, 6 years after its completion for the purposes of any possible investigation or defense against claims,
- fulfilling obligations arising from legal provisions, including in particular tax and accounting regulations - generally for XNUMX years counted from the end of the tax year, in accordance with the law, 5 years calculated from the end of the tax year, in accordance with the regulations,
- preventing abuse and fraud - in accordance with the AML Act (Act on Counteracting Money Laundering and Terrorist Financing), generally for XNUMX years from the end of the business relationship, with the possibility of extension if permitted/required by law 5 years from the end of the business relationship, with the possibility of extension if permitted/required by regulations,
- statistical and archival purposes.
We retain your personal data for marketing purposes for the duration of the contract or until you object to such processing, whichever occurs earlier.
In the case of loyalty programs, competitions, and promotional campaigns in which you may participate, we will process your data for the duration of such activities and the prize settlement period, in accordance with the rules of the relevant program, competition, or campaign.
For accountability purposes, i.e. to prove compliance with the provisions concerning personal data processing, we will retain data for the period during which SkyCash is obliged to retain data or documents containing it in order to document compliance with legal requirements and enable public authorities to verify such compliance.
In the case of services used for analysis and optimization of the application, your data may be retained for a maximum of 14 months.
In the case of services used to evaluate campaign effectiveness, your data is retained for a maximum of 14 months.
In the case of declaring participation in a webinar, if there are no other legal grounds, your data will be deleted 3 months after the date of the webinar for which participation was declared.
Do we transfer your data to countries outside the European Economic Area?
Your personal data will be transferred outside the European Economic Area (EEA) to Google LLC on the basis of appropriate legal safeguards, namely standard contractual clauses for personal data protection approved by the European Commission and the provider’s participation in the Data Privacy Framework program.
In particular, your data processed as part of Firebase Authentication and Google Analytics services will be stored in the USA.
Due to the existence of many tools supporting companies in marketing, system improvement, and application development, it cannot be ruled out that during the operation and development of SkyCash your data will be transferred to servers in the USA. This applies in particular to Meta Pixel, including IP address processing, and Braze.
Cookie policy
We use cookies to personalize content and advertisements, provide social media features, and analyze traffic in the SkyCash application. We share information about how you use the SkyCash application with social media, advertising, and analytics partners. Partners may combine this information with other data received from you or obtained when you use their services. To provide social features and analyze traffic in the SkyCash application, we share information about how you use our SkyCash application with social, advertising, and analytics partners. Partners may combine this information with other information received from you or obtained when you use their services.
Cookies are files sent to your computer or other device while browsing a website.
Cookies allow us to remember and verify your preferences. Thanks to them, we can, among other things, improve your search results and ensure the relevance of the information displayed to you.
Cookies do not make any modifications or changes to the device or software installed on your device.
Please remember that you have the right not to consent to our use of Cookies (you may block them). When using our website, we allow you to change your Cookie preferences.
If you want to block Cookies, we recommend selecting the appropriate settings in your web browser. More information this topic can be found at: https://wszystkoociasteczkach.pl.
Do we process your personal data in an automated manner (including profiling) in a way that affects your rights?
Your personal data will be processed in an automated manner (including in the form of profiling), however this will not produce any legal effects with regard to you or similarly significantly affect your situation.
Profiling of personal data by SkyCash consists of processing your data in an automated manner by using it to assess certain information about you, in particular to analyze or forecast personal preferences and interests, as well as to assess the risk of money laundering and terrorist financing. This assessment is based on data declared by you when concluding the contract with SkyCash Poland S.A., publicly available data, and transaction data, based on established objective criteria, for example economic, geographical, and subject-matter criteria. The consequence of the assessment is automatic qualification into a particular risk group.
ANALYTICAL AND MARKETING TOOLS USED BY THE CONTROLLER
The Controller uses various solutions and tools for analytical and marketing purposes. Below is basic information about these tools. Detailed information can be found in the privacy policy of the respective service provider.
GOOGLE ANALYTICS
Google Analytics cookies are files used by Google to analyze the way in which a User uses the Service, to create statistics and reports regarding the functioning of the Service. Google does not use the collected data to identify the User and does not combine this information in order to enable identification. Detailed information about the scope and principles of data collection in connection with this service can be found at: https://www.google.com/intl/pl/policies/privacy/partners.
GOOGLE ADS
Google Ads is a tool that makes it possible to measure the effectiveness of advertising campaigns carried out by the Controller, allowing analysis of such data as keywords or the number of unique users. The Google Ads platform also allows us to display our advertisements to people who have previously visited the Service. Information on Google’s processing of data in connection with this service is available at https://policies.google.com/technologies/ads?hl=pl.
FACEBOOK PIXELS
Facebook Pixels are a tool enabling the measurement of the effectiveness of advertising campaigns carried out by the Controller on Facebook. The tool allows advanced data analytics in order to optimize the Controller’s activities, also using other tools offered by Facebook. Detailed information on Facebook’s processing of data can be found at: https://pl-pl.facebook.com/help/443357099140264?helpref=about_content.
FACEBOOK ADS (META)
Reaching users with advertisements within the Meta network (Facebook, Instagram, Messenger, Audience Network). Collecting data on the number of app installs, the number of events performed by users in the app and on the website, information about pages and content they visit, and building groups of users based on events performed or pages visited. To obtain more information, visit Meta’s privacy policy at:
https://www.meta.com/pl/legal/privacy-policy
We may periodically update this Policy, including in connection with changes in the law or the functionality of the Services. We will inform you of significant changes in the application/service or by e-mail. The current version is always available in the application and on the website.