Information on the processing of personal data of persons whose documents are inspected in connection with travel by public transport in Kraków

Bearing in mind the provisions of Article 13 (1) and (2) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as “GDPR”, we set out below the information and rules for processing your personal data.

  1. The Data Controller, i.e. the entity which decides how your personal data will be used, is the Public Transport Authority in Kraków (hereinafter referred to as: ZTP) with its registered office at 1 Wielopole St., 31-072 Kraków, phone number: 12 616 86 00, e-mail address:, Electronic Mail Box address: /ZTPK/SkrytkaESP.
  2. In all matters concerning the processing of personal data by ZTP, you can contact the Data Protection Officer appointed for this purpose, e-mail address:, by letter to the address of the ZTP headquarters indicated above or in person at the ZTP headquarters.
  3. Your data will be processed for the purposes related to:
    • the inspection of transport documents in Kraków Public Transport vehicles;
    • the collection of the appropriate shipping charge and an additional fee, or the issue of a request for payment;
    • the request to present a document confirming the identity of the passenger;
    • the detaining of the passenger and his immediate handing over to the police or other law enforcement authorities;
    • the retention of the document presented by the passenger against receipt and sending it to the prosecutor’s office or the police, in the event of a reasonable suspicion that this document is forged;
    • the consideration of complaints, appeals and complaints of passengers regarding received additional fees, control activities as well as the behaviour of inspectors and providing explanations;
    • reporting cases of fraudulent transit to the competent law enforcement authorities;
    • archiving of documents.
  4. ZTP processes the following data:
    • identification data (e.g. name, surname, PESEL number, NIP number, signature also in the form of digital record);
    • address and contact details (e.g. home address, phone number, e-mail address);
    • property status data.
  5. Personal data is an open catalogue of information that is shaped according to circumstances. The above means that the scope of data that can be considered as personal data is not fixed and depends on the context in which the personal data are processed.
  6. Persons who, during a ticket inspection on KMK vehicles, do not present a valid transport document or a document entitling them to free or reduced travel, are required to pay the additional fee together with the appropriate transport fee directly to the inspector or provide the personal data necessary to issue a request for payment. Failure to provide the data at the time of the refusal to pay the amount due directly to the inspector will result in the consequences provided for by law.
  7. You have the right of access to the content of your data and the right to rectify or complete them, request their erasure or restrict their processing, in the cases provided for by law.
  8. In order to exercise the rights mentioned above, you should address your request to the following e-mail address:, in writing to the address of the ZTP registered office, via the Electronic Mail Box: /ZTPK/SkrytkaESP or submit it in person at the ZTP headquarters. Before we can exercise your rights, we will need to confirm your identity in a manner individually tailored to the request.
  9. If you consider that the processing of your personal data by ZTP violates the provisions of the GDPR, you have the right to lodge a complaint with the President of the Office for Personal Data Protection, 2 Stawki St., 00-193 Warsaw.
  10. The recipients of your personal data are or may be entities, in particular:
    • ZTP worker;
    • servicing ZTP equipment through which personal data are processed;
    • providing and maintaining software used for the processing of data of which ZTP is the Controller;
    • providing advisory and control services commissioned by ZTP (e.g. auditing companies, certifying companies);
    • courier companies through which correspondence may be carried out;
    • providing debt collection services;
    • those processing data for the purpose of legal representation, e.g. law firms.
  11. Your data may also be made available to public authorities or entities entitled to obtain data on the basis of applicable law, e.g. courts, law enforcement agencies or state institutions, when they make a request, based on an appropriate legal basis.
  12. Your personal data will not be transferred to countries outside the European Economic Area and will not be transferred to international organisations.
  13. Lack of payment within 14 days results in automatic transfer of data for further debt collection activities. The administrator does not use profiling for personal data.
  14. Personal data will be stored until expiry of the statute of limitations for mutual claims and for the archiving period resulting from the office instructions.