Lanka Driver – Privacy Policy

Last updated: 12 October 2026

This policy explains how the Lanka Driver mobile application (Android package com.lanka.driver) processes personal data. The app is a work tool for drivers who work for or with P.H.U. "Lanka" Inna Kopalkina. It is not available for public registration. Accounts are created by the company.

1. Data controller

P.H.U. "Lanka" Inna Kopalkina
ul. Tadeusza Kotarbińskiego 18, 82-200 Malbork, Poland
NIP: 5871732217
Email: lankacompl@gmail.com
Phone: +48 666 552 235

2. Data we process

• Account and login data: your driver login code and PIN, plus session tokens. Tokens are kept on your device in encrypted secure storage. On our servers, refresh tokens are stored only as hashes.
• Driver profile: your name and the vehicle you are assigned to, as recorded in the company fleet system.
• Vehicle telematics from the company's Webfleet system: the vehicle's GPS track, fuel level and range, and OptiDrive driving-style indicators (for example speeding, idling, harsh driving events, fuel usage). We also show a ranking of OptiDrive scores among company drivers.
• Route reports you submit: the report type, time, position on the vehicle's track and an optional note.
• Your documents: files the company holds about you (for example licences or certificates). They are downloaded to your device only when you open them.
• Fuel plan requests: each refuelling plan shown to you is logged, together with the vehicle data it was based on and the language of your app.
• Technical data: standard server logs such as your IP address, request time and app language.

3. What we do not collect

• The app does not request your phone's location permission. All positions come from the vehicle's telematics unit.
• No contacts, camera, microphone, photos or other files from your device.
• No advertising identifiers, and no third-party analytics or tracking SDKs.
• We do not sell personal data or use it for advertising.

4. Why we process it and the legal basis

• We provide the app to you as part of your employment or cooperation with the company: login, showing your vehicle, documents and reports. The legal basis is Art. 6(1)(b) GDPR.
• We use the data for fleet management, route documentation, fuel cost control and driving-safety feedback. The legal basis is the company's legitimate interest under Art. 6(1)(f) GDPR.
• We keep records where the law requires it, for example tax, accounting and labour law. The legal basis is Art. 6(1)(c) GDPR.

5. Who receives the data

• Webfleet (Bridgestone Mobility Solutions) is the telematics provider that supplies vehicle position, fuel and driving data.
• AI text provider: when you ask for an explanation of a fuel plan, only the plan facts (stations, distances, liters, prices) are sent to generate a plain-language text. Your name and contact details are not sent.
• OpenFreeMap provides the map tiles. When the map loads, your device requests tiles directly from this service, so it sees your IP address.
• Hosting and storage providers run our servers and store files.
• Public authorities, when the law requires it.

Some providers may process data outside the European Economic Area. In that case, transfers are protected by the European Commission's Standard Contractual Clauses or an adequacy decision.

6. How long we keep it

• App sessions expire automatically, after at most 90 days from login. Logging out ends the session immediately.
• Route reports and fuel plan logs are operational records. We keep them for the duration of your cooperation with the company and afterwards for as long as legal retention and limitation periods require. Reports you delete are hidden in the app but kept as records.
• We keep documents and profile data for as long as the employment, contract or law requires.

7. Security

All traffic is encrypted with HTTPS. Access tokens are short-lived and refresh tokens are single-use. Each driver can access only their own data. Access to company systems is restricted to authorised staff.

8. Your rights

You have the right to:

• access your data
• rectification
• erasure
• restriction of processing
• data portability
• object to processing based on legitimate interest

To use these rights, or to ask for your app account and data to be deleted, email lankacompl@gmail.com. You may also lodge a complaint with the Polish supervisory authority, Prezes Urzędu Ochrony Danych Osobowych (PUODO), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.

9. Children

The app is intended only for professional drivers and is not directed at anyone under 18.

10. Changes to this policy

We may update this policy when the app changes. The current version is always available at this address, and the date at the top shows the last update.