Information about the Administrator and his processing of personal data

1. The controller of your personal data is Car Park Sp. z o. o. with its registered office in Warsaw, postal code 02-204, at ul. Nowoberestecka 14.
2. Information about the Car Park Company can be found at: www.carpark.com.pl
3. Personal data under this Privacy Policy is all information about a natural person who is identified or identifiable through one or more specific factors, including device IP, location data, online identifier and information collected through cookies and other similar technology.
4. Providing personal data for the purpose of fulfilling a service contract is voluntary, but it is also a condition for establishing business contact or concluding a contract. Failure to provide personal data will result in the inability to conclude a contract and provide services.
5. The acronym GDPR means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.
6. Under this Privacy Policy, a User is any natural person visiting the Website.
7. Individuals who register on the Website are asked to provide data necessary to provide services. To facilitate service, the User may provide additional data, thereby consenting to its processing. Such data may be deleted at any time.
8. The Administrator carefully selects and applies appropriate technical and organizational measures to ensure the protection of processed personal data. Only individuals duly authorized by the Administrator have full access to the databases.
9. The Administrator protects personal data against disclosure to unauthorized persons, as well as against their processing in violation of applicable law.
10. Personal data will not be processed in an automated manner.
11. Visitors can browse the Website without prior registration or providing personal data.

The purposes and basis of personal data processing by the Administrator

12. Personal data will be processed for the purpose of:
    • performance of the contract for the provision of services specified on the Website (pursuant to Article 6 paragraph 1 letter b of the GDPR);
    • compliance with the legal obligation incumbent on the Controller (pursuant to Article 6(1)(c) of the GDPR);
    • marketing of own products or services, including personalised ones (pursuant to Article 6(1)(f) of the GDPR);
    • pursuing or securing claims (pursuant to Article 6(1)(f) of the GDPR);
13. User activity on the Website, including their personal data, may be recorded in system logs. The information collected in the logs is processed in connection with the provision of services. The Administrator also processes it for technical purposes – in particular, data may be temporarily stored and processed to ensure the security and proper functioning of IT systems, e.g., in connection with making backup copies, testing changes to IT systems, detecting irregularities, or protecting against abuse and attacks.

Personal data processing time

14. As a rule, data are processed for the duration of the service provision or order fulfillment, until the consent is withdrawn or an effective objection to data processing is raised in cases where the legal basis for data processing is the legitimate interest of the Controller.
15. The data processing period may be extended if processing is necessary to establish, pursue, or defend against potential legal claims, and after that period only if and to the extent required by law. After the processing period, the data is irreversibly deleted or anonymized.

Data recipients

16. In connection with the provision of services, personal data will be disclosed to external entities, including in particular suppliers responsible for the operation of IT systems, entities such as banks and payment operators, entities providing accounting, legal, auditing, consulting and courier services.
17. If the User consents, their data may also be made available to other entities for their own purposes, including marketing purposes.
18. Personal data will not be transferred to a third country/international organisation.

Cookie Policy

19. The website does not automatically collect any information, except for information contained in cookies.
20. Cookies are computer data, specifically text files, stored on the Website User's end device and intended for use with the Website's websites. Cookies typically contain the name of the website they originate from, the duration of their storage on the end device, and a unique number.
21. The entity that places cookies on the Website User's end device and obtains access to them is the operator of the Website, Car Park Sp. z o. o. with its registered office in Warsaw, postal code 02-204 Warsaw; at ul. Nowoberestecka 14.
22. Cookies are used for the following purposes:
    • adapting the content of the Website pages to the User's preferences and optimising the use of websites; in particular, these files enable the recognition of the Website User's device and the proper display of the website, tailored to their individual needs;
    • creating statistics that help understand how Website Users use websites, which allows for the improvement of their structure and content
23. In many cases, web browsing software (web browser) allows cookies to be stored on the user's end device by default. Website users can change their cookie settings at any time. These settings can be changed, in particular, to block the automatic handling of cookies in the web browser settings or to notify the user each time they are placed on the device. Detailed information about the possibilities and methods of handling cookies is available in the software (web browser) settings.
24. The Website Operator informs that restrictions on the use of cookies may affect some of the functionalities available on the Website.
25. Cookies placed on the Website User's end device may also be used by advertisers and partners cooperating with the Website operator.
26. Most browsers allow users to control cookies through their preferences. Users should consult the privacy policies of these browsers to understand their cookie practices. Limiting cookie settings may impair the overall functionality of the Service.

User Rights

27. The User has the right to access the content of his/her data, obtain a copy thereof, the right to rectify it, delete it, limit its processing, the right to transfer data, the right to object to the processing of data based on the legitimate interest of the Administrator or to processing for direct marketing purposes, the right to withdraw consent at any time without affecting the lawfulness of processing (if processing is based on consent), which was carried out on the basis of consent before its withdrawal.
28. If it is found that the processing of personal data violates the provisions of the GDPR or other provisions on personal data protection, the data subject may file a complaint with the President of the Personal Data Protection Office.
29. A request regarding the exercise of the rights of data subjects may be submitted in writing or by e-mail to the Controller's contact details indicated below.
30. The request should, to the extent possible, precisely indicate what the request concerns. In particular, what rights the requester wishes to exercise and what processing the request concerns.
31. If the Controller is unable to determine the content of the request or identify the person submitting the request based on the submitted application, it will ask the applicant for additional information.
32. A response to applications will be provided within one month of receipt. If an extension of this deadline is necessary, the Administrator will inform the applicant of the reasons for such extension.
33. The response will be provided to the e-mail address from which the application was sent, and in the case of applications sent by post, by regular mail to the address indicated by the applicant, unless the content of the letter indicates a desire to receive feedback to the e-mail address (if such an e-mail address was provided).

Administrator's contact details

34. Contact with the Controller is possible via e-mail address rodo@carpark.com.pl or correspondence address Car Park Sp. z o. o. with its registered office in Warsaw, postal code 02-204 Warsaw; at ul. Nowoberestecka 14.

Rules for changing the Privacy Policy

35. The policy is reviewed on an ongoing basis and updated as necessary.