PRIVACY POLICY

Welcome to Ebuscompany s.r.o!

Ebuscompany deeply values your privacy and the protection of your personal data. This privacy policy details the information we collect, the methods we use to obtain it, the purposes for which we use it, the process by which we obtain your consent, the period for which we retain it in our databases and, if necessary, with whom we share it.

In this privacy policy, the words "website" refer to the Ebuscompany website, "we", "us", "our", and "Ebuscompany", refers to Ebuscompany s.r.o, and "you", "client", and "user", refers to you, the user or client of Ebuscompany.

By using the website and our services, you are accepting the practices described in this privacy policy. Your use of the website and our services is also subject to our terms and conditions. This privacy policy may change from time to time. Your continued use of the website after we make changes to this privacy policy will be deemed acceptance of those changes, so please check this policy periodically for updates.

This privacy policy has been developed and is maintained in accordance with all applicable national and international privacy and data protection laws and regulations and specifically the General Data Protection Regulation (GDPR - European regulations).

1. GENERAL INFORMATION

The personal data of users that are collected and processed through:

Will be under the responsibility and in charge of:

2. HOW WE OBTAIN YOUR CONSENT

By visiting the website, making a booking on the website, and by contacting us through our forms or contact information, you agree to our collection, storage and use of your information as set out in this privacy policy. You may withdraw your consent at any time by sending us your request through our contact information.

3. TYPES OF INFORMATION COLLECTED

The information we collect from our users helps us to continually improve the user experience on the website and provide our services appropriately. These are the types of information we collect:

Information you provide to us. You provide information when you visit the website, contract, book and use our services, and contact us through our forms and contact information. As a result of those actions, you may provide us with the following information:

Ebuscompany will not collect any personally identifiable information about you unless you provide it voluntarily.

Usage Data: As you browse our website, certain usage data is automatically collected. These include technical information such as the IP address of your device, the type and version of your browser, the specific pages you visit on our website, the date and time of your access, the amount of time you spend on those pages, and other diagnostically relevant data.

In the case of access via mobile devices, we also collect information specific to these devices. This may include, but is not limited to, the type of mobile device used, its unique identifier, the IP address of the device, the mobile operating system and the type of mobile browser, along with other identifiers and diagnostic data.

In addition, we collect information that your browser automatically provides each time you visit our website or access our website using a mobile device.

Payment Data: Payment Data refers to information related to your payment details, such as cardholder name, email address, telephone number, credit card number, expiry date, security code, etc., depending on the payment method selected by the user when booking our services.

Your payment details will be processed by third party payment processors available on this website such as TicketingHub and Stripe, which will process and store your details securely and for the sole purpose of processing payment for bookings of our services. Ebuscompany reserves the right to engage any available payment processor.

See TicketingHub and Stripe's privacy policy here:

Contact Information: We may access some personal information about the user, such as name and email address, when the user or any third party communicates with us through our contact information. Personal information provided through our contact information is not stored on any Ebuscompany server and will be stored on the respective server of our email service.

4. HOW LONG WE KEEP YOUR DATA

Personal data provided by our users through our website will be retained for as long as necessary to provide our services and fulfil the legitimate purposes described in this policy in section 5 or until the user or client requests deletion of their data. Ebuscompany may retain personal data for a longer period provided that the user has consented to such processing, as long as such consent is not withdrawn. In addition, Ebuscompany may be obliged to retain personal data for a longer period provided that this is required for compliance with a legal obligation or by order of an authority. Once the retention period has expired, the personal data will be deleted. Therefore, the right of access, the right of deletion, the right of rectification and the right to data portability cannot be asserted after the retention period has expired.

5. HOW WE USE YOUR INFORMATION (LEGITIMATE PURPOSES)

In general, we use the data we collect primarily to provide, maintain, protect and improve our website and to provide our services properly. We use the data collected through our website as described below:

Facilitate the booking of our tours
Process payment for our tour bookings.
Provide our tours according to the established schedules.
Understand and improve your experience using our website and services.
Respond to your comments or questions through our contact information.
Send you related information, including confirmations, invoices, technical notices, updates, security alerts, and support and administrative messages.
Send you relevant information about our website and services.
Marketing purposes of Ebuscompany.
Link or combine your information with other data we obtain from third parties to help us understand your needs and provide you with better service.
Process and respond to requests related to users' privacy rights.
Protect, investigate and deter fraudulent, unauthorised or illegal activities.

6. HOW WE SHARE INFORMATION

Information about our clients is an important part of our business, and we are not in the business of selling it to others. We share client information only as described below.

Third-Party Service Providers. We use third-party services to perform certain functions on our website. Some of these functions and services include website hosting, booking management platform (TicketingHub), payment processing (Stripe), sending emails, including marketing emails, and data analysis.

These third-party services and tools may have access to personal information needed to perform their functions, but may not use that information for other purposes. Information shared with these third-party services will be treated and stored in accordance with their respective privacy policies and our privacy policy.

Email Communications: By providing your email address, you consent to receive relevant content, notifications, and information from us. As a result, your email address may be shared with third-party bulk email service providers solely for the purpose of sending you these communications. If you wish to stop receiving emails from Ebuscompany, you can unsubscribe at any time by using the "unsubscribe" link in the emails or by submitting a request through our contact information.

Business Transfers. In the event Ebuscompany creates, merges with, or is acquired by another entity, your information will likely be transferred. Ebuscompany will send you an email or post a prominent notice on our website before your information becomes subject to another privacy policy.

Protection of Ebuscompany and Others. We release personal information when we believe release is appropriate to comply with the law, enforce or apply our terms and conditions and other agreements, or protect the rights, property, or safety of Ebuscompany, our users, or others. This includes exchanging information with other companies and organisations for fraud protection and credit risk reduction.

Anonymous Information. Ebuscompany uses anonymous browsing information collected automatically by our servers primarily to help us administer and improve the website. We may also use aggregated anonymous information to provide information about the website to potential business partners and other unaffiliated entities. This information is not personally identifiable.

7. DATA BREACH NOTIFICATIONS

In the event of a security breach that compromises the confidentiality of the personal data of our users, Ebuscompany undertakes to notify those affected in a timely manner. This notification will be made through the means of contact that have been provided by the user on our website. We will take all reasonable measures to protect the information and remedy any situation that compromises the security of your data.

8. INTERNATIONAL DATA TRANSFER

By using our website, you agree that your personal data may be transferred to and processed outside the Czech Republic, where data protection laws may differ. This is because we use data storage services that may have servers located in other countries. Ebuscompany is committed to taking reasonable steps to ensure that your data is treated in accordance with applicable privacy regulations, specifically the GDPR and is adequately protected during any international transfer.

9. PROTECTION OF YOUR INFORMATION

We grant access to your personal information only to those outside persons or services that have a legitimate need to know it and in accordance with our privacy policy. We adhere to industry-recognised security standards to protect your personal information, both during transmission and in storage. However, it is important to note that no method of transmission over the Internet or electronic storage is foolproof and 100% secure. Therefore, while we at Ebuscompany strive to implement commercially viable data protection methods, we cannot ensure absolute security of your personal information. We undertake not to sell, distribute or transfer your personal data to unauthorised third parties, unless we have your explicit consent or are required by law to do so.

10. PRIVACY RIGHTS

Users who provide information through our website, as data subjects, have the right to access, rectify, download or delete their information, as well as to restrict and oppose certain processing of their information. While some of these rights apply generally, others only apply in certain limited circumstances. These rights are described below:

Access and portability: to access and know what information is stored on our servers, you can send us your request through our contact information.
Rectification, restriction, limitation and deletion: You may also rectify, restrict, limit or delete much of your information.
Right to be informed: Users of our website will be informed, upon request, about what data we collect, how it is used, how long it is kept and whether it is shared with third parties.
Object: Where we process your data based on our legitimate interests, as explained above, or in the public interest, you may object to this processing in certain circumstances. In such cases, we will stop processing your information unless we have legitimate grounds to continue processing it or where necessary for legal reasons.
Withdraw consent: Where you have previously given your consent, for example to allow us to process and store your personal information, you have the right to withdraw your consent to the processing and storage of your information at any time. For example, you can withdraw your consent by updating your settings. In certain cases, we may continue to process your information after you have withdrawn your consent if we have a lawful basis for doing so or if your withdrawal of consent was limited to certain processing activities.
Complaint: If you wish to lodge a complaint about our use of your information (and without prejudice to any other rights you may have), you have the right to do so with your local supervisory authority. Users may exercise all of these rights by contacting us via the contact information or contact page.
Rights related to automated decision-making, including profiling: Users may request that we provide them with a copy of the automated processing activities we conduct if they believe that data is being unlawfully processed.

Users or holders of personal data provided through the website may exercise these rights over their personal data at any time and without limitation by sending their request through our contact information. The request to exercise your rights will be processed and answered within 10 working days of sending the request.

11. PROTECTION OF CHILDREN'S ONLINE PRIVACY

We comply with the requirements of national and international data protection regulations regarding the protection of personal data of minors. We do not collect any information from children under the age of 13 (minimum age allowed to collect and process information without parental or legal guardian consent). If we become aware that a child under the age of 13 has provided us with personal information, we will take steps to delete such information.

12. THIRD PARTIES

Except as expressly included in this privacy policy, this document only addresses the use and disclosure of information that Ebuscompany collects from you. If you disclose your information to third parties, different rules may apply to their use or disclosure of the information you disclose to them. Ebuscompany does not control the privacy policies of third parties, and you are subject to the privacy policies of such third parties where applicable. Ebuscompany is not responsible for the privacy or security practices of third parties, including those linked to or from the website. Please refer to the privacy policies of any third-party websites or services you access through the website.

13. CHANGES TO PRIVACY POLICY

We reserve the right to change our privacy policy at any time. Changes will be promptly notified to our users and posted on the website. Your continued use of our website following such changes will signify your acceptance of the changes.

14. CONTACT INFORMATION

If you have questions or concerns about this privacy policy and the treatment and security of your data, please contact us using the contact information below: