Gizlilik Politikası
Privacy Policy
This Privacy Policy describes the rules under which we process information, including personal data and cookies.
Sharry (with its registered office in Lublin, ul. Gospodarcza 6, 02-2213 Lublin, Poland) (hereinafter “Sharry”), acting as the data controller (the entity deciding on the purposes and means of data processing), makes every effort to ensure the protection and respect of the privacy of its users. The purpose of this notice (“Privacy Policy”) is to provide users with information regarding Sharry's practices with respect to the collection, use, and disclosure of information that users may provide to Sharry through this platform or our mobile applications.
This Privacy Policy notice (together with the Sharry Terms and Conditions, other documents referred to therein, and the Cookie Policy) sets out the terms on which Sharry collects and processes users' personal data. Please read the information below carefully in order to become familiar with Sharry's policy and practices regarding users' personal data and its processing.
§ 1 Definitions and Abbreviations
GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation),
Controller/Sharry - Sharry Sp. z o.o. with its registered office in Lublin, ul. Gospodarcza 26, 20-213 Lublin, Poland
Platform - the service available at the website https://sharry.tr/ and https://sharry.eu/ and in the form of a mobile application,
User – a person using the Platform and a guest visiting the Platform.
Personal data - any information that, without excessive time and cost, may lead to the identification of a natural person, including their identification, address, and contact details.
§ 2 Controller of personal data
The controller of personal data is the Administrator of the website https://sharry.tr/ and https://sharry.eu/, Sharry sp. z o.o. with its registered office in Lublin, ul. Gospodarcza 26, 20-213, Poland, Tax ID (NIP): 9462712165, REGON: 520579888, with share capital of PLN 5,000.00;
The Controller ensures that Users' rights are properly protected, and in particular ensures that personal data is:
processed lawfully, fairly, and in a transparent manner in relation to the data subject,
collected for specified, lawful purposes and not further processed in a manner incompatible with those purposes,
substantively correct and adequate in relation to the purposes for which it is processed,
processed in a manner ensuring appropriate security of personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage,
stored in a form that permits identification of the data subjects for no longer than is necessary to achieve the purpose of the processing.
§ 3 Purpose, legal basis, period of processing of personal data
The Controller processes personal data for the following purpose:
performance of the agreement. The data will be processed pursuant to Article 6(1)(b) GDPR for the period necessary to perform it,
handling any complaint that may be filed. The data will be processed pursuant to Article 6(1)(b) GDPR for the period provided for by law,
financial settlements. The data will be processed pursuant to Article 6(1)(c) GDPR for the period provided for by law, e.g., by tax and accounting regulations,
responding to any inquiries directed to Sharry (by phone, e-mail, etc.). The data is processed pursuant to Article 6(1)(f) GDPR until we respond to your questions.
sending the newsletter. The data is processed pursuant to Article 6(1)(a), i.e., consent, at the latest until it is withdrawn,
establishing, pursuing possible claims, and/or defending against claims, pursuant to Article 6(1)(f) GDPR, i.e., the Controller's legitimate interest. Personal data will be processed for a period no longer than until the claims become time-barred,
matters related to cookie technology, pursuant to Article 6(1)(a) GDPR, i.e., consent. Your personal data is processed until these files are deleted using your browser/device settings (whereby deleting the files is not always equivalent to deleting the personal data obtained through them, hence the possibility of objection). The data will be processed until consent is withdrawn,
In every case where we ask you for consent to process your personal data, providing this data is voluntary but necessary in order to carry out the given activity. Your consent may be withdrawn at any time; this will not, however, affect the lawfulness of the processing carried out by us before its withdrawal.
Providing personal data is necessary in order to fulfil the order. Failure to provide it will make it impossible to conclude the agreement and for us to provide our services.
§ 4 Recipients of data
In certain situations, the Controller has the right to transfer your personal data to other recipients, if this is necessary in order to fulfil the Controller's obligations, necessary to perform the agreement, to carry out or ensure the continuity of the services provided, to handle payments, etc.
Personal data is made available to entities with which the Controller has concluded an appropriate data processing agreement – entities providing technical support, IT infrastructure, hosting, payment processing, etc. In situations specified by generally applicable laws and on the basis of those laws, data may be disclosed to state authorities.
Your personal data may be transferred to third countries (outside the European Economic Area) on the basis of standard contractual clauses concerning the transfer of data to third countries, on the terms described in Article 46 GDPR, i.e., provided that the recipient ensures appropriate security measures.
The website https://sharry.tr/ and https://sharry.eu/ operates on the basis of the external Platform https://bubble.io/, and our users' data is stored in accordance with that Platform's data processing rules. The full privacy policy of the external Platform bubble.io can be found at https://bubble.io/dpa.
To send e-mails to users in connection with order fulfilment and marketing purposes, the Controller uses the services of a third party - Twilio SendGrid. The full privacy policy of Twilio SendGrid can be found at https://www.twilio.com/legal/data-protection-addendum.
To send notifications to users in connection with order fulfilment and marketing purposes, the Controller uses the services of a third party - OneSignal. The full privacy policy of OneSignal can be found at https://onesignal.com/privacy_policy.
In order to securely process payments initiated by the User, the necessary payment data will be transferred to the payment service provider. The Controller uses the services of a third party - Stripe. The full privacy policy of Stripe can be found at https://stripe.com/en-de/privacy.
Sharry also cooperates with external entities that may be recipients of the user's personal data. Among the external entities, the following should be distinguished:
Sharry's subcontractors, thanks to whom the Platform has its functionality and can properly deliver services to Users (e.g., payment, analytics, and technical services)
Business partners (e.g., providing solutions via the Platform, advertising on it)
Social networking services (logging in via these services, data migration)
Services supporting the purchase of tickets are provided by Sharry's business partners, each of which acts as a separate controller processing the personal data made available to it by the platform user in accordance with its own privacy policy. When using services offered by Sharry's business partners, the User should, in each case, familiarize themselves with those partners' privacy policy.
The Controller also reserves the right to disclose the user's personal data if required to do so by the authorities of a given state on the basis of applicable law, or where it believes in good faith that disclosure of all or part of the information is necessary in order to defend against claims brought against Sharry, as well as in the event of any emergencies posing a threat to human health or life.
The Controller processes the personal data of persons visiting its profiles maintained on social networking services. Personal data is processed in connection with the maintenance of such a profile for the purpose of promoting the Controller's activities and informing about events, services, and campaigns organized by the Controller. Personal data is processed pursuant to Article 6(1)(f) GDPR, i.e., the Controller's legitimate interest.
Our website contains a Facebook, Instagram, Twitter, LinkedIn, and Producthunt plugin. When you display our website, which contains the above-mentioned plugins, your browser establishes a direct connection with the servers of the administrators of the social networking services (service providers). The content of the plugin is transmitted by the given service provider directly to your browser and integrated into the website. Through this integration, service providers receive information that your browser is displaying our website, even if you do not have a profile with the given service provider or are not currently logged in to it. Such information (together with your IP address) is transmitted by your browser directly to the service provider's server (the registered offices of the above-mentioned social networking sites are located in the USA) and stored there. If you use a given plugin, e.g., by clicking the “Like” or “Share” button, the corresponding information will also be sent directly to the server of the given service provider and stored there. Furthermore, this information will be published on the given social networking service and will be shown to persons added as your contacts. Facebook has its registered office outside the European Union, and therefore personal data will be made available to third countries (countries outside the EEA – the European Economic Area).
The purpose and scope of data collection and its further processing and use by service providers, as well as the possibility of contact and your rights in this regard and the possibility of making settings ensuring the protection of your privacy, are described in the privacy policy of the individual service providers.
If you do not want social networking services to associate the data collected during your visit to our website directly with your profile on the given service, you must log out of that service before visiting our website. You can also completely prevent the loading of plugins on the website by using appropriate extensions for your browser, e.g., script blocking.
§ 5 Information collected
Sharry may collect and process the following data concerning users:
1. Data provided to Sharry directly by platform users.
Users may submit information enabling their identification, including when completing forms available on the Platform, during registration, when using the Platform's services, when participating in contests or surveys organized by Sharry, when reporting problems and malfunctions while using the Platform, as well as during any exchange of information with Sharry by e-mail, telephone, or in any other manner.
- mandatory information that may be required for registration (such as first and last name, username, e-mail address, phone number, or password)
- correspondence address
- photograph
- detailed information concerning vehicles
- records of correspondence between Platform users
- records concerning reservations, listings, inquiries, and offers on the Platform
- detailed information concerning the user's visits to the Platform and the resources the user uses
- information entered by the user into surveys and questionnaires placed on the Platform by Sharry, as well as opinions concerning trips posted on the Platform or sent to the Controller
- information concerning documents, such as company documents, if the user decides to provide them to the Controller
2. In order to ensure a standard of security, User support, and counteracting fraud, Sharry has the ability to analyze, search, review, and moderate the content of messages sent between Users via the Platform. The above activities are carried out solely for the purpose of improving the quality of the services provided and security.
3. Data obtained by Sharry automatically.
- in the case of user registration via social networking services (e.g., Facebook, Google), the Controller may have access to certain personal data of the user (such as, for example, e-mail address, the user's first and last name, photographs)
- in the case of a user's visits to the Platform, we may collect – in a manner consistent with applicable regulations and, where required, only with the user's consent – information concerning the devices and networks used by the user to access our services (the user's IP address, login data, the type and version of the web browser, the types and versions of plugins used by web browsers, the operating system and platform, the advertising identifier, information about visits, etc.). Sharry obtains this information via various technologies, including cookies (detailed information in the Cookie Policy).
- information concerning the user's activity on the Platform (including the number of trips offered, response rate, etc.)
§ 6 Users' rights
Right to withdraw consent. Where we process your data on the basis of consent, you have the right to withdraw it at any time. Withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of consent before its withdrawal.
Right of access to data. At any time, you may request from the Controller information about which of your personal data we store.
Right to data portability. Where the Controller processes your personal data on the basis of consent, a concluded agreement, or in an automated manner, you have the right to request a copy of that data in a structured, commonly used, and machine-readable format. This applies only to data you have provided to us. You have the right to request that a copy of your data be sent to another entity.
Right to rectification of data. You have the right to correct your personal data if it is incorrect and to complete incomplete data.
Right to erasure of data, unless other legal provisions apply that require the data controller to archive data for a specified period. A request to erase your personal data will be carried out by us promptly, unless the Controller, in accordance with applicable regulations, is unable to fulfil your request.
Right to restriction of processing. This right may be exercised if
you contest the accuracy of the personal data – for a period enabling the controller to verify the accuracy of that data;
the processing is unlawful and you oppose the erasure of the personal data, requesting the restriction of its use instead;
the controller no longer needs the personal data for the purposes of processing, but it is needed by you to establish, pursue, or defend claims;
you have objected pursuant to Article 21(1) to the processing – pending verification whether the controller's legitimate grounds override the grounds for your objection.
Right to object to the processing of data for direct marketing purposes carried out by the data controller as part of its legitimate interest, as well as to restriction of processing
Complaint to a supervisory authority. If you consider that the processing of your personal data infringes data protection regulations, you may lodge a complaint with the supervisory authority, i.e., the President of the Personal Data Protection Office.
Right not to be subject to automated profiling, if the data controller were to make decisions based solely on automated profiling that produce legal effects concerning the data subject or similarly significantly affect them.
Right to withdraw, at any time, your consent to marketing activities in the form of sending a newsletter to your e-mail address, by activating the unsubscribe link included in every marketing message sent by Sharry, or by contacting Sharry in the manner described in § 9 of this policy. In order to exercise the right to control your data, access its content, correct it, and other rights related to the processing of personal data, please contact the data controller using the contact details specified in § 9. .
§ 7 Cookies
The Portal's cookie policy is published at https://sharry.tr/cookies and https://sharry.eu/cookies
§ 8 Contact
For any matters related to the processing of personal data by the Controller, you may contact us via e-mail at: [email protected].
§ 9 Changes to the Privacy Policy
The Controller reserves the right to make changes to this Privacy Policy after prior notice of the changes being introduced and after setting an appropriate time from which they will take effect. This Privacy Policy has been in effect since 19.10.2022.
This Privacy Policy describes the rules under which we process information, including personal data and cookies.
Sharry (with its registered office in Lublin, ul. Gospodarcza 6, 02-2213 Lublin, Poland) (hereinafter “Sharry”), acting as the data controller (the entity deciding on the purposes and means of data processing), makes every effort to ensure the protection and respect of the privacy of its users. The purpose of this notice (“Privacy Policy”) is to provide users with information regarding Sharry's practices with respect to the collection, use, and disclosure of information that users may provide to Sharry through this platform or our mobile applications.
This Privacy Policy notice (together with the Sharry Terms and Conditions, other documents referred to therein, and the Cookie Policy) sets out the terms on which Sharry collects and processes users' personal data. Please read the information below carefully in order to become familiar with Sharry's policy and practices regarding users' personal data and its processing.
§ 1 Definitions and Abbreviations
GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation),
Controller/Sharry - Sharry Sp. z o.o. with its registered office in Lublin, ul. Gospodarcza 26, 20-213 Lublin, Poland
Platform - the service available at the website https://sharry.tr/ and https://sharry.eu/ and in the form of a mobile application,
User – a person using the Platform and a guest visiting the Platform.
Personal data - any information that, without excessive time and cost, may lead to the identification of a natural person, including their identification, address, and contact details.
§ 2 Controller of personal data
The controller of personal data is the Administrator of the website https://sharry.tr/ and https://sharry.eu/, Sharry sp. z o.o. with its registered office in Lublin, ul. Gospodarcza 26, 20-213, Poland, Tax ID (NIP): 9462712165, REGON: 520579888, with share capital of PLN 5,000.00;
The Controller ensures that Users' rights are properly protected, and in particular ensures that personal data is:
processed lawfully, fairly, and in a transparent manner in relation to the data subject,
collected for specified, lawful purposes and not further processed in a manner incompatible with those purposes,
substantively correct and adequate in relation to the purposes for which it is processed,
processed in a manner ensuring appropriate security of personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage,
stored in a form that permits identification of the data subjects for no longer than is necessary to achieve the purpose of the processing.
§ 3 Purpose, legal basis, period of processing of personal data
The Controller processes personal data for the following purpose:
performance of the agreement. The data will be processed pursuant to Article 6(1)(b) GDPR for the period necessary to perform it,
handling any complaint that may be filed. The data will be processed pursuant to Article 6(1)(b) GDPR for the period provided for by law,
financial settlements. The data will be processed pursuant to Article 6(1)(c) GDPR for the period provided for by law, e.g., by tax and accounting regulations,
responding to any inquiries directed to Sharry (by phone, e-mail, etc.). The data is processed pursuant to Article 6(1)(f) GDPR until we respond to your questions.
sending the newsletter. The data is processed pursuant to Article 6(1)(a), i.e., consent, at the latest until it is withdrawn,
establishing, pursuing possible claims, and/or defending against claims, pursuant to Article 6(1)(f) GDPR, i.e., the Controller's legitimate interest. Personal data will be processed for a period no longer than until the claims become time-barred,
matters related to cookie technology, pursuant to Article 6(1)(a) GDPR, i.e., consent. Your personal data is processed until these files are deleted using your browser/device settings (whereby deleting the files is not always equivalent to deleting the personal data obtained through them, hence the possibility of objection). The data will be processed until consent is withdrawn,
In every case where we ask you for consent to process your personal data, providing this data is voluntary but necessary in order to carry out the given activity. Your consent may be withdrawn at any time; this will not, however, affect the lawfulness of the processing carried out by us before its withdrawal.
Providing personal data is necessary in order to fulfil the order. Failure to provide it will make it impossible to conclude the agreement and for us to provide our services.
§ 4 Recipients of data
In certain situations, the Controller has the right to transfer your personal data to other recipients, if this is necessary in order to fulfil the Controller's obligations, necessary to perform the agreement, to carry out or ensure the continuity of the services provided, to handle payments, etc.
Personal data is made available to entities with which the Controller has concluded an appropriate data processing agreement – entities providing technical support, IT infrastructure, hosting, payment processing, etc. In situations specified by generally applicable laws and on the basis of those laws, data may be disclosed to state authorities.
Your personal data may be transferred to third countries (outside the European Economic Area) on the basis of standard contractual clauses concerning the transfer of data to third countries, on the terms described in Article 46 GDPR, i.e., provided that the recipient ensures appropriate security measures.
The website https://sharry.tr/ and https://sharry.eu/ operates on the basis of the external Platform https://bubble.io/, and our users' data is stored in accordance with that Platform's data processing rules. The full privacy policy of the external Platform bubble.io can be found at https://bubble.io/dpa.
To send e-mails to users in connection with order fulfilment and marketing purposes, the Controller uses the services of a third party - Twilio SendGrid. The full privacy policy of Twilio SendGrid can be found at https://www.twilio.com/legal/data-protection-addendum.
To send notifications to users in connection with order fulfilment and marketing purposes, the Controller uses the services of a third party - OneSignal. The full privacy policy of OneSignal can be found at https://onesignal.com/privacy_policy.
In order to securely process payments initiated by the User, the necessary payment data will be transferred to the payment service provider. The Controller uses the services of a third party - Stripe. The full privacy policy of Stripe can be found at https://stripe.com/en-de/privacy.
Sharry also cooperates with external entities that may be recipients of the user's personal data. Among the external entities, the following should be distinguished:
Sharry's subcontractors, thanks to whom the Platform has its functionality and can properly deliver services to Users (e.g., payment, analytics, and technical services)
Business partners (e.g., providing solutions via the Platform, advertising on it)
Social networking services (logging in via these services, data migration)
Services supporting the purchase of tickets are provided by Sharry's business partners, each of which acts as a separate controller processing the personal data made available to it by the platform user in accordance with its own privacy policy. When using services offered by Sharry's business partners, the User should, in each case, familiarize themselves with those partners' privacy policy.
The Controller also reserves the right to disclose the user's personal data if required to do so by the authorities of a given state on the basis of applicable law, or where it believes in good faith that disclosure of all or part of the information is necessary in order to defend against claims brought against Sharry, as well as in the event of any emergencies posing a threat to human health or life.
The Controller processes the personal data of persons visiting its profiles maintained on social networking services. Personal data is processed in connection with the maintenance of such a profile for the purpose of promoting the Controller's activities and informing about events, services, and campaigns organized by the Controller. Personal data is processed pursuant to Article 6(1)(f) GDPR, i.e., the Controller's legitimate interest.
Our website contains a Facebook, Instagram, Twitter, LinkedIn, and Producthunt plugin. When you display our website, which contains the above-mentioned plugins, your browser establishes a direct connection with the servers of the administrators of the social networking services (service providers). The content of the plugin is transmitted by the given service provider directly to your browser and integrated into the website. Through this integration, service providers receive information that your browser is displaying our website, even if you do not have a profile with the given service provider or are not currently logged in to it. Such information (together with your IP address) is transmitted by your browser directly to the service provider's server (the registered offices of the above-mentioned social networking sites are located in the USA) and stored there. If you use a given plugin, e.g., by clicking the “Like” or “Share” button, the corresponding information will also be sent directly to the server of the given service provider and stored there. Furthermore, this information will be published on the given social networking service and will be shown to persons added as your contacts. Facebook has its registered office outside the European Union, and therefore personal data will be made available to third countries (countries outside the EEA – the European Economic Area).
The purpose and scope of data collection and its further processing and use by service providers, as well as the possibility of contact and your rights in this regard and the possibility of making settings ensuring the protection of your privacy, are described in the privacy policy of the individual service providers.
If you do not want social networking services to associate the data collected during your visit to our website directly with your profile on the given service, you must log out of that service before visiting our website. You can also completely prevent the loading of plugins on the website by using appropriate extensions for your browser, e.g., script blocking.
§ 5 Information collected
Sharry may collect and process the following data concerning users:
1. Data provided to Sharry directly by platform users.
Users may submit information enabling their identification, including when completing forms available on the Platform, during registration, when using the Platform's services, when participating in contests or surveys organized by Sharry, when reporting problems and malfunctions while using the Platform, as well as during any exchange of information with Sharry by e-mail, telephone, or in any other manner.
- mandatory information that may be required for registration (such as first and last name, username, e-mail address, phone number, or password)
- correspondence address
- photograph
- detailed information concerning vehicles
- records of correspondence between Platform users
- records concerning reservations, listings, inquiries, and offers on the Platform
- detailed information concerning the user's visits to the Platform and the resources the user uses
- information entered by the user into surveys and questionnaires placed on the Platform by Sharry, as well as opinions concerning trips posted on the Platform or sent to the Controller
- information concerning documents, such as company documents, if the user decides to provide them to the Controller
2. In order to ensure a standard of security, User support, and counteracting fraud, Sharry has the ability to analyze, search, review, and moderate the content of messages sent between Users via the Platform. The above activities are carried out solely for the purpose of improving the quality of the services provided and security.
3. Data obtained by Sharry automatically.
- in the case of user registration via social networking services (e.g., Facebook, Google), the Controller may have access to certain personal data of the user (such as, for example, e-mail address, the user's first and last name, photographs)
- in the case of a user's visits to the Platform, we may collect – in a manner consistent with applicable regulations and, where required, only with the user's consent – information concerning the devices and networks used by the user to access our services (the user's IP address, login data, the type and version of the web browser, the types and versions of plugins used by web browsers, the operating system and platform, the advertising identifier, information about visits, etc.). Sharry obtains this information via various technologies, including cookies (detailed information in the Cookie Policy).
- information concerning the user's activity on the Platform (including the number of trips offered, response rate, etc.)
§ 6 Users' rights
Right to withdraw consent. Where we process your data on the basis of consent, you have the right to withdraw it at any time. Withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of consent before its withdrawal.
Right of access to data. At any time, you may request from the Controller information about which of your personal data we store.
Right to data portability. Where the Controller processes your personal data on the basis of consent, a concluded agreement, or in an automated manner, you have the right to request a copy of that data in a structured, commonly used, and machine-readable format. This applies only to data you have provided to us. You have the right to request that a copy of your data be sent to another entity.
Right to rectification of data. You have the right to correct your personal data if it is incorrect and to complete incomplete data.
Right to erasure of data, unless other legal provisions apply that require the data controller to archive data for a specified period. A request to erase your personal data will be carried out by us promptly, unless the Controller, in accordance with applicable regulations, is unable to fulfil your request.
Right to restriction of processing. This right may be exercised if
you contest the accuracy of the personal data – for a period enabling the controller to verify the accuracy of that data;
the processing is unlawful and you oppose the erasure of the personal data, requesting the restriction of its use instead;
the controller no longer needs the personal data for the purposes of processing, but it is needed by you to establish, pursue, or defend claims;
you have objected pursuant to Article 21(1) to the processing – pending verification whether the controller's legitimate grounds override the grounds for your objection.
Right to object to the processing of data for direct marketing purposes carried out by the data controller as part of its legitimate interest, as well as to restriction of processing
Complaint to a supervisory authority. If you consider that the processing of your personal data infringes data protection regulations, you may lodge a complaint with the supervisory authority, i.e., the President of the Personal Data Protection Office.
Right not to be subject to automated profiling, if the data controller were to make decisions based solely on automated profiling that produce legal effects concerning the data subject or similarly significantly affect them.
Right to withdraw, at any time, your consent to marketing activities in the form of sending a newsletter to your e-mail address, by activating the unsubscribe link included in every marketing message sent by Sharry, or by contacting Sharry in the manner described in § 9 of this policy. In order to exercise the right to control your data, access its content, correct it, and other rights related to the processing of personal data, please contact the data controller using the contact details specified in § 9. .
§ 7 Cookies
The Portal's cookie policy is published at https://sharry.tr/cookies and https://sharry.eu/cookies
§ 8 Contact
For any matters related to the processing of personal data by the Controller, you may contact us via e-mail at: [email protected].
§ 9 Changes to the Privacy Policy
The Controller reserves the right to make changes to this Privacy Policy after prior notice of the changes being introduced and after setting an appropriate time from which they will take effect. This Privacy Policy has been in effect since 19.10.2022.
- Mobil uygulama
- Bizi sosyal medyada takip edin
- Müşteri desteği
Telegram
Canlı sohbet
- [email protected]
© Sharry.tr 2026