Privacy Policy

Last updated: January 2026

1. Data Controller

The data controller responsible for your personal data is:

2. What Data We Collect

We collect and process the following categories of personal data:

2.1 Contact Form Data

• First name and last name
• Email address
• Company name (optional)
• Fleet size (optional)
• Message content

2.2 Technical Data

• IP address
• Browser type and version
• Device information
• Pages visited and time spent

2.3 Customer Data (for service users)

• Account credentials
• Fleet and vehicle data
• GPS tracking data
• Driver information
• Billing information

3. Legal Basis for Processing

We process your personal data based on:

• Consent (Art. 6(1)(a) GDPR) - When you submit a contact form or subscribe to communications
• Contract performance (Art. 6(1)(b) GDPR) - When necessary to provide our services
• Legitimate interests (Art. 6(1)(f) GDPR) - For analytics, security, and improving our services
• Legal obligation (Art. 6(1)(c) GDPR) - When required by law (e.g., tax records)

4. How We Use Your Data

We use your personal data to:

• Respond to your inquiries and contact requests
• Provide and maintain our fleet management services
• Process payments and billing
• Send service-related communications
• Improve our website and services
• Ensure security and prevent fraud
• Comply with legal obligations

5. Data Sharing

We may share your data with:

• Service providers - Hosting, analytics, payment processing
• Platform partners - Wialon, Flespi (for service delivery)
• Legal authorities - When required by law

We do not sell your personal data to third parties.

6. International Transfers

Your data may be transferred outside the European Economic Area (EEA). When this occurs, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Transfers to countries with adequate data protection laws

7. Data Retention

We retain your personal data for:

• Contact inquiries - 2 years from last contact
• Customer accounts - Duration of contract + 5 years
• Fleet/GPS data - As specified in your service agreement
• Billing records - 5 years (legal requirement)
• Analytics data - 26 months

8. Your Rights

Under GDPR, you have the right to:

• Access - Request a copy of your personal data
• Rectification - Correct inaccurate or incomplete data
• Erasure - Request deletion of your data ("right to be forgotten")
• Restriction - Limit how we process your data
• Portability - Receive your data in a machine-readable format
• Objection - Object to processing based on legitimate interests
• Withdraw consent - Withdraw consent at any time

To exercise these rights, contact us at privacy@theassettrack.com.

9. Cookies

Our website uses cookies for:

• Essential cookies - Required for website functionality
• Analytics cookies - To understand how visitors use our site (Umami Analytics - privacy-focused, no personal data collected)

You can control cookies through your browser settings.

10. Security

We implement appropriate technical and organizational measures to protect your data, including:

• Encryption in transit (TLS/SSL)
• Secure data storage
• Access controls and authentication
• Regular security assessments

11. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date.

13. Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Polish Data Protection Authority:

14. Contact Us

For any questions about this Privacy Policy or our data practices, please contact us:

• Email: privacy@theassettrack.com
• Address: ul. Marszalkowska 115/338, 00-102 Warszawa, Poland