BusTracker – UniBa Tech

1. Introduction

Welcome to BusTracker.
Your privacy and the protection of personal data are important to us. This policy explains how BusTracker processes, stores, and protects personal data in accordance with Law No. 06/L-082 on Personal Data Protection of the Republic of Kosovo and the applicable provisions of the GDPR.

BusTracker functions as a platform for managing school transportation and real-time bus monitoring.
BusTracker does not collect personal data directly from end users for its own purposes. All personal data entered into the system is provided solely by the institution/company using the platform, which is the Data Controller.
BusTracker acts as the Data Processor, processing data only according to the Controller’s instructions.

2. Types of Data Processed

BusTracker processes only the data entered by the institution for operational needs. These may include:

  • Driver data:
  • Full name
  • Phone number
  • Login credentials
  • Bus location (GPS), only during working hours
  • Parent data (if entered by the institution):
  • Full name
  • Phone number
  • Relationship to the student
  • Student data:
  • Full name
  • Class/grade
  • Bus stop location
  • Transport-related information
  • Technical data:
  • Device identifiers (for driver app use)
  • System logs and operational events

BusTracker does not collect additional data, does not perform profiling, and does not use data for marketing or advertising.

3. Purpose of Data Processing

Data is processed strictly for the operational needs of the institution, including:

  • Management of school transportation
  • Real-time monitoring of buses for safety
  • Account management for drivers and parents
  • Notifications to parents regarding bus arrival
  • Reporting and transport history
  • System performance improvements
  • Compliance with legal obligations

BusTracker does not use personal data for any purpose beyond what is authorized by the institution.

4. Data Retention

Data is retained only for as long as needed for operational purposes or as defined in the contract with the institution.

Standard retention periods:

  • Operational transport data: 12 months
  • Technical logs: 90 days
  • Account data: until deleted upon institution request
  • After the retention period expires, data is securely deleted or anonymized.

5. Data Security

We apply strong technical and organizational measures to protect personal data, including:

  • Encrypted communication (HTTPS/TLS)
  • Role-based access control (admin, driver, parent)
  • Secured servers and continuous monitoring
  • Regular backups
  • Internal data protection procedures

6. Sharing of Data with Third Parties

BusTracker does not sell, transfer, or share personal data with third parties.
Data may only be shared:

  • When required by law (official authority requests)
  • With explicit authorization from the Data Controller (the institution)
  • No third party has automatic access to the system.

7. Rights of Data Subjects

All rights are exercised through the institution (Data Controller).
Data subjects have the right to:

  • Access their personal data
  • Request correction or deletion of data
  • Request information about how their data is processed
  • BusTracker supports the institution in fulfilling these rights.

8. Consent and Data Usage Agreement

  • By using BusTracker, the institution agrees that:
  • It serves as the Data Controller
  • Data is entered and used solely for operational transport management
  • BusTracker processes data only according to documented instructions
  • No direct data collection from individuals is performed by BusTracker

9. Contact

For questions regarding this policy or data protection matters, please contact:

Email: [email protected]

Website: www.unibatech.com

10. Policy Updates

This policy may be updated occasionally. Any changes will be published on the platform and will take effect immediately upon publication.

Effective and last updated date: 03.12.2025