Privacy when using this website

Definitions

This Privacy Policy sets out the rules under which your personal data will be processed as well as the entity responsible for its processing, in accordance with applicable law. The Privacy Policy also specifies the purposes for which your personal data will be processed, the scope of such processing, and the rights you are entitled to in connection with the processing of your personal data.

The terms used in this document mean:

a) Privacy Policy – this document.

b) Website – www.europark.pl.

c) GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ EU L 119, 2016, p. 1, as amended).

d) Personal data – any information relating to an identified or identifiable natural person (data subject); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

e) Processing – any operation or set of operations performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

f) Controller – a natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

g) Processor – a natural or legal person, public authority, agency, or other body which processes personal data on behalf of the controller.

h) Recipient – a natural or legal person, public authority, agency, or another body, to which personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients.

The administrator of your personal data is:

EuroPark Sp. z o.o. (limited liability company)
ul. Tytusa Chałubińskiego 8
00-613 Warsaw

entered into the Register of Entrepreneurs of the National Court Register (KRS) kept by the District Court of Warsaw, XII Commercial Division of the National Court Register, under the number 0000311556, REGON 141465050, NIP 951-22-63-813 with the share capital amounting to PLN 4 733 000,00 PLN fully paid-up (hereinafter referred to as the Administrator, EuroPark or Company).

This privacy policy sets out the purposes, legal basis and principles of the processing of personal data carried out by EuroPark as part of the operation of the website and the conduct of its business activities. Below is a listing of the various processing processes, together with a description of their specifics.

Information on the use of cookies and the principles of data processing using them can be obtained at cookies tab on this page.

The Privacy Policy is updated on a regular basis. The current version is dated 4 November 2021.

Data Protection Inspector

If you need additional information related to data protection or want to exercise your rights, please contact:

Data Protection Officer Lukasz Jara, who can be contacted:

by email: iod@europark.pl,

by sending correspondence to the address of EuroPark headquarters (ul. Tytusa Chałubińskiego 8, 00-613 Warszawa).

Purposes of Processing Your Personal Data

1. Processing of personal data for the purpose of executing the parking space rental agreement

1. As part of the execution of the parking space rental agreement (hereinafter: the Agreement), we will process your personal data for the following purposes:

a) undertaking marketing activities towards you, including sending commercial information to your e-mail and/or phone number – only if you give consent. Legal basis: Article 6(1)(a) GDPR.

b) concluding and executing the Agreement or taking actions at your request before its conclusion. Legal basis: Article 6(1)(b) GDPR.

c) archiving for tax settlements and company accounts. Legal basis: Article 6(1)(c) GDPR in connection with the Accounting Act and the Tax Ordinance Act.

d) pursuing or defending against potential claims. Legal basis: Article 6(1)(f) GDPR.

e) assessing customer satisfaction and for statistical purposes. Legal basis: Article 6(1)(f) GDPR."

2. Processing of personal data of Contractors

1. Purposes and legal bases similar to section 1 (a–e) above.

2. Recipients: entities providing financial, accounting, legal, and IT services.

3. Providing data for marketing is voluntary; providing other data is required for the Agreement.
   
   

3. Processing of personal data of persons designated by Contractors for contact/execution of the agreement

1. Your personal data will be processed for the proper execution of the agreement to which your employer/principal/co-worker is a party, and who indicated you as the person designated for contact/execution of the said agreement, as well as for the possible pursuit or defence against claims arising during the performance of the agreement or after its termination. The legal basis for processing your personal data will be Article 6(1)(f) of the GDPR, i.e. the Administrator’s legitimate interest specified in the above purposes.

2. The recipients of your personal data will be entities providing legal, financial, and IT services to the Administrator.

3. Your personal data will be stored for the period necessary to execute and settle the Agreement. We will then store your data for the period necessary to document activities involving you, as well as for the time resulting from: the limitation period for claims, confidentiality obligations (if a separate statement was signed), and tax regulations.

4. We will process your personal data such as: name and surname, name of the employing entity, job title, business phone number or e-mail address.

5. Your personal data was provided to the Administrator by your employer/principal/co-worker in connection with the conclusion/performance of the cooperation/service agreement concluded between your employer/principal/co-worker and the Administrator.
   
   

4. Processing of personal data in connection with the imposition of an additional fee

1. In connection with the imposition of an additional fee on you, your personal data is processed by us for the following purposes:

a) pursuing a financial claim against you arising from the imposed additional fee, and the legal basis for such processing is Article 6(1)(f) of the GDPR, i.e. the Administrator’s legitimate interest in pursuing a financial claim arising from the imposed additional fee.

b) archiving documentation necessary for tax settlements and keeping the Administrator’s company accounts. The legal basis for processing your personal data by us will be the fulfilment of a legal obligation imposed on the Administrator by generally applicable laws, i.e. Article 6(1)(c) of the GDPR in connection with:

1. Article 74(2)(1) of the Accounting Act of 29 September 1994.

2. Article 70 of the Tax Ordinance Act of 29 August 1997.

3. The recipients of your personal data may be entities providing legal, financial, and IT services to the Administrator.

4. Your personal data will be stored:

a) for the period necessary to pursue a claim against you for the imposed additional fee – based on and in accordance with generally applicable laws (including, in particular, as specified in the Civil Code) – when processing your personal data for the purpose of pursuing a claim for the imposed additional fee.

b) for a period of five years – when processing your data to fulfil legal obligations imposed on the Administrator by generally applicable laws (point 1(b) of this information clause).

4. Providing your personal data is necessary to achieve the Administrator’s purposes.
   
   

5. Processing of personal data for complaint handling purposes

1. In connection with the complaint you have submitted regarding the imposed additional fee, your personal data will be processed by us for the following purposes:

a) substantive consideration of your complaint and providing you with a response in this regard.

b) archiving documentation necessary for keeping the Administrator’s company accounts. The legal basis for processing your personal data by us will be the fulfilment of a legal obligation imposed on the Administrator by generally applicable laws, i.e. Article 6(1)(c) of the GDPR in connection with Article 74(2)(6) of the Accounting Act of 29 September 1994.

2. In the event your complaint is rejected and the amount due from the additional fee is not paid, we will process your personal data to enforce the Administrator’s claim for the imposed additional parking fee for parking a vehicle in a manner inconsistent with the parking regulations. The legal basis for processing your personal data will be Article 6(1)(f) of the GDPR, i.e. the Administrator’s legitimate interest for the above purpose.

3. The recipients of your personal data may be entities providing legal, financial, and IT services to the Administrator. In the case of a rejected complaint and non-payment of the amount due for the additional fee, the recipient of your data will be debt collection service providers with whom we have entered into data processing agreements.

4. Your personal data will be stored:

a) for the period necessary for substantive consideration of your complaint and for correspondence with you in this matter.

b) after settlement of your complaint (whether accepted or rejected), your personal data will be stored for a period of one year from the date of settlement, as we are required to do so by generally applicable laws, including Article 74(2)(6) of the Accounting Act of 29 September 1994.

c) for the period necessary to pursue a monetary claim against you for the imposed additional fee – in case you fail to settle the amount due.

5. Providing your personal data is necessary to submit your complaint and to receive a response regarding it.
   
   

6. Processing of personal data in the course of pursuing a claim for the imposed additional fee (payment demand)

1. We process your personal data to enforce the Administrator’s claim for the imposed additional parking fee for parking a vehicle in a manner inconsistent with the parking regulations. The legal basis for processing your personal data is Article 6(1)(f) of the GDPR, i.e. the Administrator’s legitimate interest in pursuing a monetary claim for the additional fee. In addition, your personal data is also processed to fulfil our legal obligations in keeping the Administrator’s documentation and company accounts, which have been imposed on us by generally applicable laws (including, among others, the Accounting Act). The legal basis for processing your personal data is Article 6(1)(c) of the GDPR in connection with Article 74(2)(1) and (6) of the Accounting Act.

2. In the event of non-payment of the amount due for the additional fee, the recipient of your data will be debt collection service providers with whom we have entered into data processing agreements. In addition, recipients of your data may also be entities providing legal, financial, and postal/courier services to us.

3. Your personal data will be stored for the period necessary to successfully pursue a monetary claim against you. After it is enforced, your personal data related to payment of the outstanding amount (data on the bank transaction confirmation) will be stored for 5 years from the transaction date, under Article 74(2)(1) of the Accounting Act, and personal data collected during the complaint procedure will be stored for one year from the date of settlement of the complaint, under Article 74(2)(6) of the Accounting Act – as we are required to do so by generally applicable laws.

4. Your personal data was obtained from a public register, i.e. the Central Vehicle and Driver Register, pursuant to Article 80cd of the Road Traffic Act of 20 June 1997, or from a person who indicated you as the actual user of the vehicle on which the additional fee was imposed.

5. We process your personal data of ordinary categories such as:

a) Identification data (name and surname, company);

b) Vehicle identification data (registration number, make);

c) Contact details (residential/correspondence address/registered office address).

7. Processing of personal data for the purposes of contacting the Administrator

1. Your personal data will be processed by us in order to respond to your message/query if you decide to contact us via our communication channels available on the Website (including, among others, via the contact form, by e-mail, and via our helpline).

2. The legal basis for processing your personal data will be Article 6(1)(f) of the GDPR, i.e. the Administrator’s legitimate interest in handling your requests or queries directed to us and providing a response to them.

3. The recipients of your personal data may be entities providing legal or IT services to the Administrator.

4. Your personal data will be stored for the period necessary to correspond with you, including in particular the period necessary to respond to your messages/queries.

5. Providing your personal data is required if you wish to contact us and receive a response to your query or request.

What rights do you have?

Every person whose data we process has the right to:

a. to access their personal data and to obtain a copy of the personal data being processed;

b. to rectify his/her inaccurate data;

c. to request erasure of the data (right to be forgotten) in the event of the circumstances provided for in Article 17 of the RODO;

d. request the restriction of data processing in the cases indicated in Article 18 of the RODO;

e. to object to the processing of data in cases provided for in Article 21 of the RODO;

f. portability of the data provided, processed by automated means.

If you believe that your personal data is processed unlawfully, you can lodge a complaint with the supervisory authority (UODO, ul. Stawki 2, Warsaw).

Additional information

Your personal data will not be transferred outside the European Economic Area (this includes the member states of the European Union and Iceland, Norway and Liechtenstein) and will not be processed through automated data processing, among other things, your data will not be processed by computer programs for profiling purposes.

Personal Data Security

1) The website has a valid certificate issued by a trusted certification authority. This means that information such as passwords or credit card data is securely sent to this site and cannot be intercepted.

2) The IT employee grants users of the IT systems the permissions to process personal data in the Administrator’s IT systems immediately after receiving from the user a declaration of confidentiality regarding personal data and the methods of securing them.

3) Access to the Administrator’s IT systems used for processing personal data is only possible after providing a unique identifier and password.

4) Data encryption is applied, in particular for data transmitted via a public network.

5) Each person employed or cooperating in the processing of personal data has been authorized to process such data.

6) Data processing agreements, within the meaning of Article 28 of the GDPR, have been concluded with third parties processing data on behalf of the data controller.

7) Authorized persons have been trained in the principles of secure personal data processing.

8) Responsibility for actions related to personal data security has been defined.

9) Persons processing personal data have submitted a declaration of confidentiality regarding personal data and the methods of securing such data.

10) The integrity of databases is periodically verified by restoring data from backup copies.

Personal Data Controllers

The personal data controllers are:

• EuroPark Sp. z o.o., with its registered office in Warsaw (00-613), ul. Tytusa Chałubińskiego 8 (hereinafter: EuroPark)

• IMMOGDAŃSK Sp. z o.o., with its registered office in Gdańsk (80-398), ul. Obrońców Wybrzeża 1
  
  

Contact:
For matters related to personal data processing, please contact the EuroPark Data Protection Officer:

• Email: iod@europark.pl

• Address: EuroPark registered office address
  
  

Source, Purpose, and Legal Basis for Processing Personal Data

The Controllers process:

• Data obtained directly from the data subject (e.g., vehicle registration number, data provided in a complaint)

• Data provided by the minister responsible for digitization from the CEPiK database pursuant to Article 80cd of the Act of 20 June 1996 – Road Traffic Law

Purposes of processing:

• Performance of the vehicle parking agreement

• Pursuit of the legitimate interest, namely:

  • Handling complaints, if submitted

  • Pursuing claims for vehicle parking fees or defending against claims

• Compliance with a legal obligation in the area of tax law and keeping accounting records
  
  

Disclosure and Transfer of Data

The Controllers may:

• Transfer personal data to entities processing it on their behalf for the purposes of enforcement proceedings and complaint handling

• Disclose data to entities authorized by law, including courts and bailiffs in enforcement proceedings
  
  

Note:

• Data will not be transferred to a third country or an international organization

• Data will not be processed in an automated manner
  
  

Data Retention Period

Personal data will be processed:

• For the limitation period of claims related to vehicle parking

• Or until the expiry of the archiving period related to tax law and the obligation to keep accounting records
  
  

Rights of the Data Subject

The data subject has the right to:

• Access their personal data and receive a copy

• Rectify data

• Request deletion of data

• Request restriction of processing

• Object to data processing

• Request data portability