Politique de confidentialité

© TRUCK1 sp. z o.o. This Privacy Policy describes how TRUCK1 sp. z o.o. ("the Controller") collects, processes, and protects personal data of users in accordance with applicable laws, including the General Data Protection Regulation (EU) 2016/679 (GDPR) and Polish data protection laws.

1. DEFINITIONS

   The following terms are used in this Privacy Policy:

   1. Website – an online resource located at www.truck1.eu and any related digital environments operated by the Controller.
   2. Controller – TRUCK1 sp. z o.o., which determines the purposes and means of processing personal data.
   3. Personal Data – any information relating to an identified or identifiable natural person, as defined in the General Data Protection Regulation (EU) 2016/679 (GDPR).
   4. Processing – any operation or set of operations performed on Personal Data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation, retrieval, use, disclosure, dissemination, restriction, erasure or destruction.
   5. User – any natural person using the Website.
   6. Customer – a User who uses services available on the Website, including publishing advertisements or entering into agreements with the Controller.
   7. Cookies – small text files stored on the User’s device when visiting the Website.
   8. IP address – a unique identifier assigned to a device connected to a network using the Internet Protocol.

2. GENERAL PROVISIONS

   1. By using the Website, the User acknowledges that they have read and understood this Privacy Policy.
   2. If the User does not agree with this Privacy Policy, they should stop using the Website.
   3. This Privacy Policy applies only to the Website. The Controller is not responsible for the privacy policies or practices of third-party websites accessible via links on the Website.
   4. The Controller processes Personal Data based on information provided by the User and does not guarantee its accuracy, except where required by applicable law.

3. SCOPE OF THE PRIVACY POLICY

   1. This Privacy Policy defines the principles of processing and protection of Personal Data by the Controller.
   2. Personal Data processed under this Privacy Policy is provided by the User when using the Website, including when registering an account, publishing advertisements, or communicating with the Controller, and may include:
      • Full name
      • Phone number
      • Email address
      • Company details (if applicable)
      • Advertisement content, enquiries, and related data
      • Payment-related information (if using paid services)
      • Geolocation data (if enabled)
      • Communication between the User and the Controller
      • Cookies, IP address, and browsing data
      • Any other data necessary for the provision of services
   3. Providing Personal Data is voluntary, but may be necessary to use certain functionalities of the Website.
   4. The Website uses cookies and similar technologies. Disabling cookies may limit the functionality of the Website.
   5. The Controller may collect technical data, including IP addresses, for the purposes of ensuring security, improving services, and diagnosing technical issues.
   6. Personal Data not listed above may also be processed if necessary for the purposes described in this Privacy Policy, in accordance with applicable law.

4. PURPOSES AND LEGAL BASIS FOR PROCESSING PERSONAL DATA

   1. The Controller processes Personal Data for the following purposes:
      1. Performance of a contract or taking steps prior to entering into a contract, including:
         • identification of the User
         • providing access to services and account management
         • publishing advertisements
         • providing customer support

         Legal basis: Article 6(1)(b) of the GDPR

      2. Pursuing the legitimate interests of the Controller, including:
         • ensuring security of the Website
         • preventing fraud and abuse
         • improving services and functionality
         • handling complaints and claims

         Legal basis: Article 6(1)(f) of the GDPR

      3. Compliance with legal obligations, including:
         • accounting and tax obligations
         • responding to requests from public authorities

         Legal basis: Article 6(1)(c) of the GDPR

      4. Marketing activities, including sending commercial information, where the User has given consent.

         Legal basis: Article 6(1)(a) of the GDPR

5. METHODS AND CONDITIONS OF PROCESSING PERSONAL DATA

   1. Personal Data is processed by the Controller in accordance with applicable law, including the General Data Protection Regulation (EU) 2016/679 (GDPR), using appropriate technical and organisational measures.
   2. Personal Data is processed for the period necessary to fulfil the purposes for which it was collected, including the duration of the contract and any retention period required by applicable law.
   3. Personal Data may be shared with third parties only where necessary, including:
      • IT and hosting service providers
      • payment service providers
      • analytics and marketing providers
      • legal and accounting advisors

      All such entities process data based on appropriate agreements with the Controller.

   4. Personal Data may be disclosed to competent public authorities where required by applicable law.
   5. In the event of a personal data breach, the Controller shall act in accordance with applicable law, including, where required, notifying the competent supervisory authority and the data subject.
   6. The Controller implements appropriate technical and organisational measures to protect Personal Data against unauthorized access, loss, alteration, or disclosure.
   7. The Website uses third-party analytics tools, including Microsoft Clarity, provided by Microsoft Corporation, to better understand User behavior and improve the Website’s functionality and user experience.

      Microsoft Clarity collects and processes data such as clicks, scrolls, mouse movements, and session recordings. This information may include technical data such as IP address, device information, browser type, and interaction data.

      Data is processed in an aggregated or pseudonymised form and is used solely for analytical and service improvement purposes.

      The use of such tools is based on the User’s consent, where required by applicable law, in accordance with Article 6(1)(a) of the GDPR.

6. RIGHTS AND OBLIGATIONS

   1. The User is responsible for:
      1. Providing accurate and up-to-date Personal Data;
      2. Using the Website in compliance with applicable law.
   2. The Controller shall:
      1. Process Personal Data in accordance with this Privacy Policy and applicable law, including the General Data Protection Regulation (EU) 2016/679 (GDPR);
      2. Implement appropriate technical and organisational measures to ensure the security of Personal Data;
      3. Ensure that access to Personal Data is granted only to authorised persons;
      4. Respond to requests from data subjects in accordance with applicable law;
      5. Restrict or erase Personal Data where required by applicable law or upon a valid request from the User.

7. LIABILITY

   1. The Controller shall be liable for the processing of Personal Data in accordance with applicable law, including the General Data Protection Regulation (EU) 2016/679 (GDPR).
   2. The Controller shall not be liable for damages resulting from:
      1. the provision of inaccurate or incomplete Personal Data by the User;
      2. the User’s use of the Website in violation of applicable law or these Privacy Policy;
      3. circumstances beyond the Controller’s reasonable control.
   3. Nothing in this Privacy Policy shall exclude or limit liability where such exclusion or limitation is not permitted under applicable law.

8. DISPUTE RESOLUTION

   1. In the event of any dispute arising in connection with this Privacy Policy, the User is encouraged to contact the Controller in order to seek an amicable resolution.
   2. The Controller shall make reasonable efforts to respond to complaints within 30 days from their receipt.
   3. These Privacy Policy shall be governed by the laws of Poland.
   4. Any disputes shall be subject to the jurisdiction of competent courts of Poland, without prejudice to the rights of consumers under applicable law.

9. DATA PROTECTION, TRANSFERS AND USER RIGHTS

   1. The Controller implements appropriate technical and organisational measures to ensure a level of security appropriate to the risk, in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR).
   2. Personal Data is stored only for as long as necessary for the purposes for which it was collected, including compliance with legal obligations. After this period, data is deleted, anonymised, or archived.
   3. Personal Data may be transferred outside the European Economic Area (EEA). In such cases, the Controller ensures appropriate safeguards, including:
      • adequacy decisions issued by the European Commission
      • Standard Contractual Clauses (SCCs)
      • other safeguards in accordance with the GDPR
   4. The User has the following rights under the GDPR:
      • the right to access Personal Data
      • the right to rectify inaccurate data
      • the right to erase data ("right to be forgotten")
      • the right to restrict processing
      • the right to data portability
      • the right to object to processing
      • the right to withdraw consent at any time
   5. The User has the right to request the deletion of their user account and associated Personal Data at any time, in accordance with Article 17 of the GDPR ("right to be forgotten").

      To request account deletion, the User may send a request from the email address associated with their account to: info@truck1.eu, clearly indicating their intention to delete the account.

      The Controller may take reasonable steps to verify the identity of the User before processing the request.

      Upon receipt of a valid request, the Controller shall delete the User’s Personal Data without undue delay, unless retention of certain data is required under applicable law, including legal, tax, or regulatory obligations.

      After the deletion of the account, the User may lose access to services requiring authentication on the Website.

   6. The User may exercise their rights by contacting the Controller at the contact details provided in this Privacy Policy.

10. FINAL PROVISIONS

    1. The Controller reserves the right to amend this Privacy Policy at any time, in particular in the event of changes in applicable law or the functionality of the Website.
    2. The updated version of the Privacy Policy shall become effective upon its publication on the Website.
    3. Where required by applicable law, the Controller shall inform Users of significant changes to this Privacy Policy.
    4. Any questions, requests, or complaints regarding this Privacy Policy may be addressed to the Controller at: info@truck1.eu.