Privacy, terms and the driver agreement.

Who operates Passby

Passby is a product of DAT1A ADVISING S.R.L., a Romanian limited liability company with its registered office at B-dul Ion Mihalache nr. 156, Bl. 4, Sc. C, Sector 1, București. Trade Register number J40/9403/2023, fiscal code (CUI) 39910303, EUID ROONRC.J40/9403/2023. Contact: [email protected].

Contracts with advertisers and drivers are concluded with DAT1A ADVISING S.R.L. Prices to advertisers are quoted in lei (RON) excluding VAT, with an indicative EUR equivalent at the BNR reference rate on the invoice date. Driver payouts are made in lei.

Disputes are governed by Romanian law and, where consumer rules apply, by the ANPC procedures; the EU online dispute resolution platform is available at ec.europa.eu/consumers/odr.

Privacy

Controller. DAT1A ADVISING S.R.L., București, is the data controller under the GDPR (Regulation (EU) 2016/679). Requests about your data go to [email protected]; you may also complain to ANSPDCP, the Romanian supervisory authority.

What we collect. From drivers: name, contact details, vehicle details, payout method label, and location while a drive is active. From advertisers: contact details and campaign briefs. From site visitors: form submissions you send us.

What we do with location. Logged routes are used to pay drivers per kilometre and to compute campaign impressions. Advertisers see aggregated reach by zone and hour and the live position of cars in their campaign, never a driver's name, home or history.

Waiting list. When you join the driver waiting list we store your name, email, phone, city, car and approximate daily kilometres, on the basis of your consent (GDPR art. 6(1)(a)), to contact you about campaigns that match your routes. We do not ask for your licence plate, ID or documents until a campaign has approved you. Waiting-list details are deleted after 12 months if you never activate a campaign, or earlier on request. Optional news emails require a separate tick and can be stopped with one reply.

Advertisers and contact forms. Proposal requests and messages are stored with the details you enter and the page you sent them from, on the basis of taking steps at your request before a contract (art. 6(1)(b)), for 24 months.

Where the data lives. Submissions are stored on Cloudflare's infrastructure and read by the Passby team; email runs on Google Workspace. Both act as processors under data processing agreements that include the EU standard contractual clauses for any transfer outside the EEA. Route data from the app is processed only while a drive is active.

Your rights. Access, correction, deletion, restriction, portability and objection, by writing to [email protected]. We answer within 30 days. You can also complain to ANSPDCP (dataprotection.ro).

What we don't do. We do not sell location data. We do not track drivers when no drive is active. We do not share driver identities with advertisers.

Retention. Route data is kept for the campaign's reporting window plus 12 months, then aggregated and deleted.

Terms of service

• Passby is a marketplace between advertisers and drivers. Campaign availability varies by market.
• Estimates on this site are estimates. Proposals state final pricing and reach commitments.
• Advertisers own their creative and are responsible for its legality. Passby may decline creative that is unlawful, misleading or unsafe to display on a vehicle.

Driver agreement

• Drivers are independent contractors and choose which campaigns to apply to.
• Payment is per logged kilometre inside the campaign zone at the rate shown at application, subject to the campaign's monthly cap. Payouts run every Friday for kilometres through 18:00 the preceding Thursday.
• Graphics must stay on for the flight and be removed at its end using the provided instructions. Passby supplies paint-safe materials for factory finishes; drivers confirm their vehicle qualifies.
• Fraudulent kilometres (spoofed location, driving with the graphic removed) forfeits unpaid earnings and ends participation.