Dear Passengers,

On 25 May 2018 Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC came into force.
Who is the controller of your data?
The controller of data collected for the specified purpose is:

"Koleje Mazowieckie - KM” sp. z o.o. with registered office in Warsaw at ul. Lubelska 26
The Data Controller appointed a Data Protection Officer

Contact the Data Protection Officer - Warszawa ul. Lubelska 26, email: iod@mazowieckie.com.pl
Why do we process your data?
We collect personal data to complete processes such as ticket sale and control, complaints handling and other activities within the IT system that serve to facilitate and accelerate the purchasing experience.
What kinds of data do we process?

- First name and surname,
- Email address,
- No. of document with your photo,
- Invoice details,
- No. of your Masovian Card,
- payment channel

Who are the recipients of data?
The data collected by the Data Controller may be disclosed to recipients in accordance with the law or in connection with performed operations. The recipients of data may include competent institutions. Your personal data will not be transferred to third countries.
What rights do you have?
You have the right to request access, rectification, erasure and restriction of processing of your data. You also have the right to withdraw your consent to personal data processing.
What are the legal bases for processing of your data?
The processing of your data must be done based on an appropriate and legitimate legal basis. The legal basis for processing of your data is the provision of transport services.