Privacy Policy — PADO Mobile Application

Effective Date: September 10, 2025

1. Scope of Data Processed

The Controller processes personal data necessary to use the Pado App, including:

• account data (name, email address, phone number),
• profile data (photo, preferences),
• booking and payment information (processed by external providers),
• device and usage information (device type, OS, identifiers),
• location data (only with the User's consent).

2. Purposes of Processing

Personal data is processed for the following purposes:

• providing and maintaining the services available in the app,
• processing bookings and payments,
• contacting Users regarding support and technical matters,
• ensuring security and preventing abuse,
• statistical analysis and service improvement,
• fulfilling the Controller's legal obligations.

3. Legal Basis (GDPR)

Data processing is carried out under the EU General Data Protection Regulation (GDPR) based on:

• Art. 6(1)(b) — performance of a contract (providing app services),
• Art. 6(1)(c) — compliance with a legal obligation,
• Art. 6(1)(f) — legitimate interest of the Controller (security, analytics, communication).

4. Data Sharing

Data may be shared only with:

• technical, hosting, and payment service providers,
• authorities authorized under the law,
• entities involved in a potential merger or acquisition.

The Controller does not sell personal data or transfer it outside the EU without adequate safeguards.

5. Data Retention

Personal data is retained for as long as necessary to provide services and fulfill legal obligations, or for a maximum of 5 years after the User's last activity.

6. User Rights

Users have the right to:

• access their data,
• rectify or update data,
• delete their data ("right to be forgotten"),
• restrict processing,
• object to processing,
• transfer their data to another controller,
• withdraw consent at any time,
• lodge a complaint with the President of the Personal Data Protection Office (UODO).

7. Data Security

The Controller applies appropriate technical and organizational measures to protect personal data from unauthorized access, loss, or destruction. However, no IT system can guarantee absolute security.

8. Changes to This Policy

This Policy may be updated due to legal or technical changes. The current version is always available in the app and on the website.

9. Contact

For data protection matters, please contact the Controller at: