Search

Privacy Policy

PRINCIPLES OF PERSONAL DATA PROCESSING

Last updated: December 2025

This Privacy Policy describes how METRANS a.s. (“METRANS”, “we”, “us”, or “our”) collects, uses, stores, and protects personal data in connection with the METRANS mobile application and related digital services.

1. Scope of This Privacy Policy

This Privacy Policy applies to:

  • The METRANS mobile application for iOS and Android
  • Related backend systems and intranet services
  • Associated analytics, notification, and security services

 

The application is intended exclusively for employees and authorized users of METRANS a.s. and its subsidiaries. Access to the application is restricted by authentication mechanisms.

2. Data Controller

Controller: METRANS a.s.
Email: info@metrans.eu
Registered address: Podleská 926/5, 104 00 Prague 10, Czech Republic

3. Personal Data We Collect

Depending on how the application is used, we may collect the following categories of data:

3.1 Data Provided by the User

  • Login credentials and internal user identifiers
  • Contact information where required for account management

 

3.2 Automatically Collected Data

  • Device identifiers required for push notifications
  • Technical data such as operating system, app version, and language settings
  • Crash and performance diagnostics

 

3.3 Analytics Data

The application uses Firebase Analytics and Google Analytics to collect aggregated and pseudonymized usage data, such as:

  • App launches and screen views
  • Interaction events (e.g. navigation within the app)
  • Technical performance metrics

 

These analytics do not serve advertising purposes and are used solely to improve application stability, usability, and performance.

4. Push Notifications

The application uses Firebase Cloud Messaging to deliver push notifications. To enable this functionality, a device-specific notification token is processed. This token is used exclusively for delivering notifications and is not shared for marketing or advertising purposes.

5. Purpose of Processing

Personal data is processed for the following purposes:

  • Providing secure access to internal company services
  • Ensuring proper authentication and authorization
  • Operating and maintaining the application
  • Monitoring performance and preventing technical issues
  • Improving user experience and functionality

6. Legal Basis for Processing

Personal data is processed based on:

  • Legitimate interest of the controller (Article 6(1)(f) GDPR)
  • Performance of contractual or employment-related obligations
  • Compliance with legal and security requirements

7. Data Sharing and Third Parties

We do not sell personal data to third parties. Data may be processed by trusted service providers acting as data processors, including:

  • Google Firebase (analytics, crash reporting, push notifications)
  • Infrastructure and hosting providers within the EU

 

All third-party processors are contractually bound to comply with GDPR and data protection requirements.

8. Data Retention

Personal data is retained only for as long as necessary to fulfill the purposes described in this policy or as required by law. Analytics and diagnostic data is retained in aggregated or pseudonymized form.

9. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, loss, or misuse. Access to data is restricted to authorized personnel only.

10. User Rights

Under the General Data Protection Regulation (GDPR), users have the right to:

  • Request access to their personal data
  • Request correction or deletion of personal data
  • Restrict or object to processing
  • Lodge a complaint with a supervisory authority

 

Requests can be submitted via email to: info@metrans.eu

11. Mobile Application Data Deletion

Users may request deletion of personal data collected through the METRANS mobile application by contacting info@metrans.eu. Upon such request, data associated with the mobile application usage (including account identifiers, device tokens used for push notifications, and diagnostic data) will be deleted without undue delay, unless retention is required by applicable law.

12. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy to reflect changes in legal, technical, or operational requirements. The current version will always be available at this URL.