# PUB-02 — Passenger Privacy Notice
## 1. Controller
Controller: `[LEGAL NAME, ADDRESS AND IČO]`
Privacy contact: `[CONTACT]`
DPO: `[IF APPLICABLE]`
## 2. Data processed
Weyo may process:
- Identity and contact data - Date of birth or age-assurance result - Account and authentication data - Device, session and security information - Precise pickup and destination location - Route and ride location - Ride history and timestamps - Driver and Carrier assignment - Payment-provider identifiers - Transaction metadata - Ratings - Support communications - Complaints - Incidents - Fraud and security indicators - Notification preferences - Consent records
Weyo should not receive or store raw card numbers or security codes.
## 3. Purposes and legal bases
Weyo processes information to:
- Create and secure accounts - Arrange and administer rides - Provide support - Process approved payments - Meet legal duties - Prevent fraud - Protect users - Resolve disputes - Improve the service where a lawful basis exists
Each purpose must be mapped to:
- Contract necessity - Legal obligation - Legitimate interests - Consent
Consent is used only where appropriate and withdrawable.
## 4. Location
Precise foreground location is used for pickup, destination, dispatch and ride functions.
The permission screen must explain:
- When collection starts - When collection ends - Who receives location - What happens if permission is refused
Passenger background location must remain disabled unless separately justified, disclosed, controlled and approved through a DPIA.
## 5. Recipients and roles
Information may be shared with:
- Assigned Driver - Carrier - Relevant Fleet - Payment provider - Hosting and storage providers - Maps and routing providers - Messaging providers - Support and security providers - Professional advisers - Authorities where lawfully required
Weyo must publish the actual recipient categories and classify each party as controller, joint controller or processor.
## 6. Transfers
International transfers may occur only under the approved provider arrangement and GDPR safeguards.
`[INSERT ACTUAL TRANSFER DETAILS.]`
## 7. Retention
Weyo retains each category only for approved service, legal, tax, taxi-record, security, dispute or legal-claim purposes.
`[INSERT APPROVED CATEGORY-SPECIFIC PERIODS.]`
## 8. Profiling and automated decisions
Weyo may use fraud and safety indicators.
The final notice must explain:
- Meaningful logic - Significance - Possible consequences - Available human review
## 9. Rights
Individuals may exercise applicable rights to:
- Access - Correction - Deletion - Restriction - Portability - Objection - Withdrawal of consent
Individuals may complain to the Czech Office for Personal Data Protection, ÚOOÚ.
Requests go to `[CHANNEL]`.
## 10. Adult-only service
Passenger accounts are adult-only.
Suspected underage accounts are handled under a proportionate procedure.
Weyo will not collect identity documents from all passengers solely for age assurance unless necessity and proportionality are approved.
## 11. Changes
The notice displays its ID, version and effective date.
Material changes are notified appropriately. A notice update is not itself consent.