How we process and protect data
Privacy policy of the website, newsletter, AISP Cloud and client program.
Choose “Save as PDF” in the print window. The document will include the current generation date.
Website and newsletter
Privacy policy of the website https://pl.aisp.pl
This privacy policy has been adopted in accordance with the provisions of Regulation (EU) No. 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (Official Journal of the European Union No. L 119/1 of 4/05/2016; hereinafter: GDPR). The purpose of the policy is, in particular, to fulfill the information obligation referred to in Art. 13 and 14 GDPR.
1. Definitions
We use the following phrases in this policy:
1) Website – website run by AISP at: https://pl.aisp.pl/.
2) We, AISP, Administrator - AISP spółka z ograniczoną odpowiedzialnością with its registered office in Gliwice (44-100) at ul. Stanisława Konarskiego 18/C, registered in the Register of Entrepreneurs of the National Court Register kept by the District Court in Gliwice, 10th Commercial Division of the National Court Register, under the number 0001083846, NIP: 6312719187, REGON: 52755357300000, e-mail address: kontakt@aisp.pl.
3) You, Mr., Mrs., State, Customer - persons whose personal data are processed by AISP in connection with the use of the Website.
2. Who is the data controller?
The data controller is the person who determines the purposes and methods of processing personal data. The administrator of your personal data is AISP.
3. Whose personal data do we process?
In connection with our business activities, we process, in particular, personal data of Website users. The scope of data processed is always adequate to the purposes of processing.
4. What data do we collect using the Website and for what purposes do we use it?
The scope of your data that we collect and the purposes of their processing depend on the functionalities of the Website used, as follows:
4.1. Browsing the Website
I. What data do we collect?
Data saved in the form of server logs, in which the user is identified as a URL address. These data include:
a) time of arrival of the query,
b) time of sending the response,
c) name of the client station - identification carried out via the HTTP protocol,
d) information about errors that occurred during the HTTP transaction,
e) URL address of the page previously visited by the user (referrer link) - if the Website was accessed via a link,
f) information about the user's browser,
g) IP address information.
II. For what purpose do we process data?
For the purposes of administering the server on which the Website is stored, as well as statistical analysis of traffic on the Website.
III. Do you have to provide us with your data?
Providing data is voluntary, provided that it determines the possibility of proper use of the Website.
IV. On what legal basis do we process your data?
Based on:
a) concluded contract, the subject of which is a service provided electronically in the form of providing the Website (Article 6(1)(b) of the GDPR) and,
b) our legitimate interest (Article 6(1)(f) of the GDPR) - consisting in the possibility of making the Website available to third parties, as well as ensuring the correct display of the Website.
V. Who can we share your data with?
Personal data may be made available to third parties only if we are obliged or authorized to do so under the law. In particular, data recipients may include:
a) people operating our infrastructure or IT systems,
b) persons providing data hosting,
c) subcontractors participating in the implementation of contracts concluded with you.
VI. How long will we process your data?
For the time necessary to perform concluded contracts or for the duration of our legitimate interest in data processing - and in each case no less than the period of your visits to the Website.
Remember that if the basis for data processing is legitimate interest, you have the opportunity to object to further data processing, in accordance with point. 8 below
4.2. Newsletter
I. What data do we collect?
E-mail address and name, surname or company.
II. For what purpose do we process data?
For marketing purposes related to sending the newsletter, including information about the content of our offer.
III. Do you have to provide us with your data?
Providing data is voluntary, provided that it determines the possibility of receiving the newsletter.
IV. On what legal basis do we process your data?
Based on your consent to receive the newsletter (Article 6(1)(a) of the GDPR) - granted in particular by completing the appropriate form on the Website and clicking the confirming button ("Subscribe").
Remember that you have the right to withdraw your consent at any time (e.g. by sending an appropriate e-mail to: kontakt@aisp.pl) without affecting the lawfulness of processing based on consent before its withdrawal.
V. Who can we share your data with?
Personal data may be made available to third parties only if we are obliged or authorized to do so under the law. In particular, data recipients may include:
a) people operating our infrastructure or IT systems,
b) persons providing data hosting,
c) subcontractors through whom we can send the newsletter.
VI. How long will we process your data?
Until you withdraw your consent to receiving the newsletter.
4.3. Cookies
The cookie policy constitutes Annex 1 to this Privacy Policy.
5. Can data be processed in processes involving automated decision-making, including "qualified" profiling?
Currently, we do not use any operations involving automated decision-making that would produce legal effects on the recipients or significantly affect them in a similar way. If such operations related to the processing of personal data are implemented in the future, we will ensure their compliance with the relevant regulations, including Art. 22 GDPR.
6. Can your personal data be transferred outside the European Economic Area (EEA)?
We currently do not envisage transferring your data outside the European Economic Area. However, we do not rule out that we may consider it justified in the future. In such a case, the data will be secured in the manner required by generally applicable regulations, in particular by using the so-called Standard Contractual Clauses (SCC).
7. What rights do you have in relation to data processing?
In particular, you can request us to:
1) access to data processed by us (including: information about data processing by us or providing a copy of data),
2) rectification (correction) of data,
3) limiting processing (suspending data operations or not deleting data),
4) deletion of data (“right to be forgotten”),
5) transfer of data to another administrator.
The above requests may be sent in particular in the manner specified in point. 11 below - and will be considered in accordance with the relevant provisions, including Art. 15-20 GDPR.
8. Right to object
Notwithstanding the above, you have the right to object to the processing of your data based on our legitimate interest. In this case:
1) if personal data is processed for marketing purposes - we will immediately cease such processing.
2) if the basis for data processing is another type of interest - we will stop such processing unless we demonstrate: a) that the said interest overrides your interests, rights and freedoms or b) there is a basis for establishing, pursuing or defending against claims.
The right to object may be exercised, in particular, by sending an appropriate declaration in the manner specified in point. 11 below.
9. Complaint to the supervisory authority
If you believe that the processing of your data violates applicable regulations, you have the right to lodge a complaint with the supervisory authority, i.e. the President of the Office for Personal Data Protection. PUODO contact details are available in particular on the website https://uodo.gov.pl/pl/p/kontakt.
10. Place of publication and privacy policy updates
This privacy policy may change from time to time. The current version of the policy will be available at all times on our website at: https://pl.aisp.pl/start.
11. How can you contact us?
If you have any questions about how we use your personal data, you can contact us by telephone, e-mail or post at the following numbers and addresses:
AISP limited liability company
ul. Stanisława Konarskiego 18C
44-100 Gliwice
- with the note: "personal data protection"
e-mail: kontakt@aisp.pl
Annex No. 1 to the Privacy Policy - COOKIES Policy
§1
1. This Policy sets out the rules for storing information by the Administrator and the Administrator's access to information already stored on the Customer's Devices in the form of Cookies.
2. All terms defined in the Privacy Policy also retain their meaning under this Cookie Policy. Moreover, the following terms are given the following meanings:
a) Cookies - means IT data, in particular small text files, saved and stored on devices through which the Customer uses the Website's websites. Cookies usually contain the name of the website they come from, their storage time on the end device and a unique number.
b) Own Cookies - means Cookies placed by the Administrator, related to the provision of electronic services by the Administrator via the Website.
c) External Cookies - means Cookies placed by third parties via the Website.
d) Policy - this Cookie Policy, constituting Annex No. 1 to the Privacy Policy.
e) Device - means an electronic device through which the Customer gains access to the Website.
§2
1. The Administrator uses Cookies to store information on the Customer's Device or gain access to information already stored - on the terms set out in this Policy.
2. The administrator uses the following types of cookies:
a) Session cookies: they are stored on the Customer's Device and remain there until the end of the browser session. The saved information is then permanently deleted from the Device's memory
b) Persistent cookies: they are stored on the Customer's Device and remain there for the period indicated in the file parameters or until they are deleted. Ending the session of a given browser or turning off the Device does not delete this type of Cookies from the Device.
3. The Administrator's use of Cookies does not cause any configuration changes in the Customer's Device and the software installed in this Device.
§3
1. The Administrator uses Own Cookies to adapt the content of the Website to the User's preferences and needs, in particular taking into account the type of Device with which the User uses the Website. These types of Cookies include:
a) "necessary" cookies enabling the use of services available on the Website, e.g. authentication cookies used for services requiring authentication on the Website;
b) cookies used to ensure security, for example used to detect abuses in the field of authentication within the Website;
c) "performance" cookies, enabling the collection of information on how the Website pages are used;
d) "functional" cookies, enabling "remembering" the settings selected by the User and personalizing the User's interface, e.g. in terms of the selected language or region from which the User comes, font size, appearance of the website, etc.;
e) "advertising" cookies, enabling the provision of advertising content to Users more tailored to their interests.
2. The Administrator uses External Cookies to create aggregate statistics and analyzes to monitor the use of the Website by Customers - which allows it to be best adapted to the needs of Customers. In this respect, the Administrator uses the services of:
a) Google Analytics — the service is activated only after consent to analytics has been given. It is used to create aggregate website usage statistics, including application downloads and clicks on phone, email and calendar contact options. We do not send phone numbers or email addresses to Google Analytics. Details are available in Google’s Privacy Policy (https://policies.google.com/privacy?hl=en).
b) Google AdWords and Facebook Ads (Meta) - within which the Website uses the so-called remarketing codes. The codes are used to match individualized advertisements to individual customers and then display them in the advertising network of a given supplier (Google or Facebook). These networks include both supplier websites and their trading partners. Detailed information in this regard is available on suppliers' websites, including:
• Google – https://policies.google.com/technologies/types?hl=pl
• Facebook: https://www.facebook.com/policy/cookies/
3. Due to the use of cookies, the Administrator only collects statistical data related to browsing history. Other data (such as name, surname, address, etc.) are not recorded in any way.
§4
1. The Customer has the option of limiting or disabling access to Cookies to his/her Device in the web browser settings or by configuring the service - in particular in such a way as to block the automatic handling of Cookies or inform about each time Cookies are placed on the Customer's Device. A description of the activities necessary for this purpose can be found on the manufacturers' websites, e.g.:
a) Mozilla Firefox: https://support.mozilla.org/pl/kb/W%C5%82%C4%85czanie%20i%20wy%C5%82%C4%85czanie%20obs%C5%82ugi%20ciasteczek
b) Google Chrome: https://support.google.com/accounts/answer/61416?co=GENIE.Platform%3DDesktop&hl=pl
c) Microsoft Edge: https://privacy.microsoft.com/pl-pl/windows-10-microsoft-edge-and-privacy
2. The customer may delete cookies at any time.
3. Restricting the use of cookies may affect some of the functionalities available on the Website.
AISP cloud, client program and data processing
Privacy Policy AISP Clouds
This privacy policy has been adopted in accordance with the provisions of Regulation (EU) No. 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (Official Journal of the European Union No. L 119/1 of 4/05/2016; hereinafter: GDPR). The purpose of the policy is, in particular, to fulfill the information obligation referred to in Art. 13 and 14 GDPR.
1. Definitions
We use the following phrases in this policy:
1) AISP Cloud - AISP proprietary software running on physical servers and managing the Firebase Google Cloud Services cloud and processing Customer Orders.
2) Application - the AITracker computer program available in binary form and under the MIT license for the client, the AITracker program for Windows, along with the entire program code. The program is used to register, log in and send/receive user data to/from the AISP Cloud.
3) We, AISP, Administrator - AISP spółka z ograniczoną odpowiedzialnością with its registered office in Gliwice (44-100) at ul. Stanisława Konarskiego 18/C, registered in the Register of Entrepreneurs of the National Court Register kept by the District Court in Gliwice, 10th Commercial Division of the National Court Register, under the number 0001083846, NIP: 6312719187, REGON: 52755357300000, e-mail address: kontakt@aisp.pl.
4) You, Mr., Mrs., You, Customer - persons whose personal data are processed by AISP in connection with the use of the AISP Application and Cloud.
2. Who is the data controller?
The data controller is the person who determines the purposes and methods of processing personal data. The administrator of your personal data is AISP.
3. Whose personal data do we process?
In connection with our business activities, we process in particular personal data of users of the AISP Application and Cloud. The scope of processed data is always adequate to the purposes of processing.
4. What data do we collect using the AISP Application and Cloud, and for what purposes do we use it?
The scope of your data that we collect and the purposes of their processing depend on the functionalities of the AISP Application and Cloud used, as follows:
4.1. Using the AISP Cloud
I. What data do we collect?
Data saved within the AISP Cloud, assigned to the User Panel. These data include:
a) a video recording that may include the image of the vehicle driver or its passengers,
b) visible vehicle registration number.
II. For what purpose do we process data?
For the purposes of executing orders placed via the Account, including: sending related emails, providing counting results and handling any complaints regarding the Application or the AISP Cloud.
III. Do you have to provide us with your data?
Providing data is voluntary, provided that it determines the possibility of performing the contract and the proper use of the Application and the AISP Cloud.
IV. On what legal basis do we process your data?
Based on:
a) a concluded contract, the subject of which is a service provided electronically in the form of providing the AISP Application and Cloud (Article 6(1)(b) of the GDPR) and,
b) our legitimate interest (Article 6(1)(f) of the GDPR) - consisting in ensuring the correct display of the AISP Application and Cloud.
V. Who can we share your data with?
Personal data may be made available to third parties only if we are obliged or authorized to do so under the law. In particular, data recipients may include:
a) people operating our infrastructure or IT systems,
b) persons providing data hosting,
c) subcontractors participating in the implementation of contracts concluded with you.
VI. How long will we process your data?
For the time necessary to perform concluded contracts or for the duration of our legitimate interest in data processing - however, after processing the video data in the cloud, they are deleted and the counting results are stored for a period of 14 days from the date of transmission.
Remember that if the basis for data processing is legitimate interest, you have the opportunity to object to further data processing, in accordance with point. 8 below
4.2. AI training
I. What data do we collect?
Image, registration number.
II. For what purpose do we process data?
For the purposes of training artificial intelligence for the provision of program services via the AISP Cloud.
III. Do you have to provide us with your data?
Providing data is voluntary, provided that it determines the ability of AISP to provide services.
IV. On what legal basis do we process your data?
Based on the Agreement concluded with the Administrator (Article 6(1)(f) of the GDPR).
V. Who can we share your data with?
Personal data may be made available to third parties only if we are obliged or authorized to do so under the law. In particular, data recipients may include:
a) Employees, collaborators, contractors of AISP and persons operating our infrastructure or IT systems,
b) persons providing data hosting,
VI. How long will we process your data?
For the duration of the contract.
4.3. Registration of the User Panel in the AISP Application and Cloud and placing orders via the User Panel
I. What data do we collect?
Data necessary to register the User Panel in the AISP Application and Cloud, including: name and surname, address, shipping address (if different), e-mail address, login, password, NIP and company name.
II. For what purpose do we process data?
In order to:
a) performance of the contract for the provision of electronic services - in the form of registration of the User Panel in the AISP Application and Cloud,
b) execution of orders placed via the User Panel, including: sending related emails, sending counting results and handling any complaints,
c) conducting correspondence using all known technologies, including: traditional mail, electronic mail (e-mail) or other communication methods (e.g. instant messengers, etc.).
d) creating summaries, analyzes and statistics - which includes in particular marketing research, commercial data analysis, service development planning, etc.
e) pursuing claims or defending against reported claims.
III. Do you have to provide us with your data?
Providing data is voluntary, provided that it determines the possibility of registering the User Panel in the AISP Application and Cloud and using the related functionalities of the AISP Application and Cloud.
IV. On what legal basis do we process your data?
Based on:
a) concluded contracts, the subject of which is the operation of the User Panel in the AISP Application and Cloud, as well as the provision of services ordered via the AISP Application and Cloud (Article 6(1)(b) of the GDPR),
b) generally applicable provisions that impose legal obligations on us, the implementation of which requires data processing - in particular in the field of tax law and accounting or archiving provisions (Article 6(1)(c) of the GDPR),
c) our legitimate interest (Article 6(1)(f) of the GDPR) - consisting in the possibility of taking the actions indicated in point II letter c-g above.
V. Who can we share your data with?
Personal data may be made available to third parties only if we are obliged or authorized to do so under the law. In particular, data recipients may include:
a) people operating our infrastructure or IT systems,
b) persons providing data hosting,
c) subcontractors through whom we can fulfill orders,
d) persons providing audit or advisory services to us - e.g. in the field of legal, tax or accounting assistance,
e) purchasers of receivables related to transactions concluded using the AISP Application and Cloud - if we decide to sell such receivables, in particular due to the existence of significant payment arrears.
VI. How long will we process your data?
Depending on the basis of processing - it will be:
a) the time necessary to perform the contract concluded via the AISP Application and Cloud, as well as the limitation period for related claims,
b) duration of legal obligations that require the processing of your data,
c) the duration of our legitimate interest in data processing.
Remember that if the basis for data processing is legitimate interest, you have the opportunity to object to further data processing, in accordance with point. 8 below
5. Can data be processed in processes involving automated decision-making, including "qualified" profiling?
Currently, we do not use any operations involving automated decision-making that would produce legal effects on the recipients or significantly affect them in a similar way. If such operations related to the processing of personal data are implemented in the future, we will ensure their compliance with the relevant regulations, including Art. 22 GDPR.
6. Can your personal data be transferred outside the European Economic Area (EEA)?
We currently do not envisage transferring your data outside the European Economic Area. However, we do not rule out that we may consider it justified in the future. In such a case, the data will be secured in the manner required by generally applicable regulations, in particular by using the so-called Standard Contractual Clauses (SCC).
7. Can data be processed in processes involving automated decision-making, including "qualified" profiling?
Currently, we do not use any operations involving automated decision-making that would produce legal effects on the recipients or significantly affect them in a similar way. If such operations related to the processing of personal data are implemented in the future, we will ensure their compliance with the relevant regulations, including Art. 22 GDPR.
8. Can your personal data be transferred outside the European Economic Area (EEA)?
We currently do not envisage transferring your data outside the European Economic Area. However, we do not rule out that we may consider it justified in the future. In such a case, the data will be secured in the manner required by generally applicable regulations, in particular by using the so-called Standard Contractual Clauses (SCC).
9. What rights do you have in relation to data processing?
In particular, you can request us to:
1) access to data processed by us (including: information about data processing by us or providing a copy of data),
2) rectification (correction) of data,
3) limiting processing (suspending data operations or not deleting data),
4) deletion of data (“right to be forgotten”),
5) transfer of data to another administrator.
The above requests may be sent in particular in the manner specified in point. 11 below - and will be considered in accordance with the relevant provisions, including Art. 15-20 GDPR.
10. Right to object
Notwithstanding the above, you have the right to object to the processing of your data based on our legitimate interest. In this case:
1) if personal data is processed for marketing purposes - we will immediately cease such processing.
2) if the basis for data processing is another type of interest - we will stop such processing unless we demonstrate: a) that the said interest overrides your interests, rights and freedoms or b) there is a basis for establishing, pursuing or defending against claims.
The right to object may be exercised, in particular, by sending an appropriate declaration in the manner specified in point. 11 below.
11. Complaint to the supervisory authority
If you believe that the processing of your data violates applicable regulations, you have the right to lodge a complaint with the supervisory authority, i.e. the President of the Office for Personal Data Protection. PUODO contact details are available in particular on the website https://uodo.gov.pl/pl/p/kontakt.
12. Place of publication and privacy policy updates
This privacy policy may change from time to time. The current version of the policy will be available at all times as part of the functionality of the Application.
13. How can you contact us?
If you have any questions about how we use your personal data, you can contact us by telephone, e-mail or post at the following numbers and addresses:
AISP limited liability company
ul. Stanisława Konarskiego 18C
44-100 Gliwice
- with the note: "personal data protection"
e-mail: kontakt@aisp.pl