Privacy Policy

This Privacy Policy sets out the rules for saving and accessing data on Users’ Devices using the Service for the purpose of providing electronic services by the Administrator, as well as the rules for collecting and processing Users’ personal data that has been provided by them personally and voluntarily via tools available on the Service.

This Privacy Policy constitutes an integral part of the Service Regulations, which define the rules, rights, and obligations of Users using the Service.


§1 Definitions

Service – the website “TirestParking.pl” operating at the address TirestParking.pl

External Service – websites of partners, service providers, or service recipients cooperating with the Administrator

Service Administrator / Data Administrator – the Service Administrator and Data Administrator (hereinafter: the Administrator) is the company “TIREST BEATA KNAAK”, operating at: ul. Kołbielska 32, 05-300 Grębiszew, with Tax Identification Number (NIP): 822 234 73 75, providing electronic services via the Service

User – a natural person for whom the Administrator provides electronic services via the Service

Device – an electronic device together with software through which the User accesses the Service

Cookies – text data collected in the form of files placed on the User’s Device

GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC

Personal Data – information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person

Processing – any operation or set of operations performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction

Restriction of Processing – the marking of stored personal data with the aim of limiting their future processing

Profiling – any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that person’s work performance, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements

Consent – any freely given, specific, informed, and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her

Personal Data Breach – a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored, or otherwise processed

Pseudonymization – the processing of personal data in such a manner that the data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person

Anonymization – an irreversible process of data operations that destroys or overwrites personal data, making it impossible to identify or link a given record to a specific user or natural person


§2 Data Protection Officer

Pursuant to Article 37 of the GDPR, the Administrator has not appointed a Data Protection Officer.

In matters related to data processing, including personal data, please contact the Administrator directly.


§3 Types of Cookies

Internal Cookies – cookies placed and read from the User’s Device by the Service’s ICT system

External Cookies – cookies placed and read from the User’s Device by ICT systems of external services. Scripts of external services that may place cookies on Users’ Devices have been intentionally placed in the Service via scripts and services installed in the Service

Session Cookies – cookies placed and read from the User’s Device by the Service during a single session of a given Device. After the session ends, the files are deleted from the User’s Device

Persistent Cookies – cookies placed and read from the User’s Device by the Service until they are manually deleted. The files are not deleted automatically after the session ends unless the User’s Device settings are configured to delete cookies after the session ends


§4 Data Storage Security

Cookie storage and reading mechanisms – mechanisms for storing, reading, and exchanging data between cookies saved on the User’s Device and the Service are implemented through built-in web browser mechanisms and do not allow the downloading of other data from the User’s Device or data from other websites visited by the User, including personal or confidential information. Transferring viruses, trojans, or other malware to the User’s Device is also practically impossible.

Internal Cookies – cookies used by the Administrator are safe for Users’ Devices and do not contain scripts, content, or information that could threaten personal data security or device security.

External Cookies – the Administrator makes every possible effort to verify and select service partners with regard to User security. However, the Administrator does not have full control over the content of cookies from external partners. The Administrator is not responsible, to the extent permitted by law, for the security, content, or licensed use of cookies from external services by scripts installed in the Service. A list of partners is provided later in this Privacy Policy.

Cookie Control
The User may change cookie settings regarding saving, deleting, and access to cookie data at any time via their web browser settings.

The User may also delete all cookies stored so far using the tools available on the Device through which they use the Service.

User-side Risks – although the Administrator uses all possible technical measures to ensure the security of cookie data, data security also depends on User behavior. The Administrator is not responsible for interception of data, session hijacking, or data deletion resulting from conscious or unconscious User actions, viruses, trojans, or spyware infecting the User’s Device. Users should follow safe internet usage principles to protect themselves from such threats.

Personal Data Storage – the Administrator makes every effort to ensure that personal data voluntarily provided by Users is secure, access to it is limited, and processing is carried out in accordance with its intended purpose. The Administrator also applies appropriate physical and organizational safeguards to protect data against loss.


§5 Purposes of Using Cookies

  • Improving and facilitating access to the Service

  • Personalizing the Service for Users

  • Enabling login to the Service

  • Marketing and remarketing in external services

  • Affiliate services

  • Statistics (users, number of visits, device types, connections, etc.)

  • Providing multimedia services

  • Providing social services


§6 Purposes of Personal Data Processing

Personal data voluntarily provided by Users is processed for the following purposes:

Provision of electronic services:

  • User account registration and maintenance and related functionalities

  • Sharing content from the Service on social media or other websites

  • Communication between the Administrator and Users regarding the Service and data protection

  • Ensuring the Administrator’s legitimate interests

Automatically collected anonymous User data is processed for:

  • Statistics

  • Remarketing

  • Affiliate program support

  • Ensuring the Administrator’s legitimate interests


§7 Cookies of External Services

The Service uses JavaScript scripts and web components of partners who may place their own cookies on the User’s Device. Users can decide which cookies are allowed in their browser settings.

Partners and services that may place cookies include:

Multimedia services:

  • YouTube

Social / integrated services:

  • Twitter

  • Facebook

Content sharing services:

  • Instagram

Statistics services:

  • Google Analytics

  • SEMrush

  • WordPress Stats (Automattic Inc.)

  • Facebook Analytics for Apps

Other services:

  • Internet Archive

  • Google Maps

Services provided by third parties are beyond the Administrator’s control and may change their terms, privacy policies, purposes of data processing, and cookie usage at any time.


§8 Types of Collected Data

The Service collects User data. Some data is collected automatically and anonymously, while some constitutes personal data voluntarily provided by Users.

Automatically collected anonymous data:

  • IP address

  • Browser type

  • Screen resolution

  • Approximate location

  • Visited subpages

  • Time spent on subpages

  • Operating system

  • Referrer URL

  • Referring website

  • Browser language

  • Internet connection speed

  • Internet service provider

Data collected during registration:

  • First name / last name / nickname

  • Login

  • Email address

  • IP address (collected automatically)

Data collected during newsletter subscription:

  • First name / last name / nickname

  • Email address

  • IP address (collected automatically)

Data collected when adding a comment:

  • First name and last name / nickname

  • Email address

  • Website address

  • IP address (collected automatically)

Some non-identifying data may be stored in cookies and transferred to statistical service providers.


§9 Access to Personal Data by Third Parties

As a rule, the only recipient of Users’ personal data is the Administrator. Data is not transferred or sold to third parties.

Access to data (usually based on a data processing agreement) may be granted to entities responsible for maintaining infrastructure and services necessary for operating the Service, such as:

  • Hosting companies

  • Newsletter service providers

Data Processing Entrustment – Hosting Services
The Service uses external hosting, VPS, or dedicated server providers. All data is stored and processed within infrastructure located in Poland. Access to data may occur due to maintenance work performed by the provider’s staff, governed by an agreement between the Administrator and the provider.


§10 Method of Personal Data Processing

Personal data provided voluntarily by Users:

  • Personal data will not be transferred outside the European Union unless published by the User themselves

  • Personal data will not be used for automated decision-making (profiling)

  • Personal data will not be sold to third parties

Automatically collected anonymous data:

  • Anonymous data may be transferred outside the European Union

  • Anonymous data will not be used for automated decision-making (profiling)

  • Anonymous data will not be sold to third parties


§11 Legal Grounds for Personal Data Processing

Data is processed based on:

  • GDPR Regulation (EU) 2016/679, Article 6(1)(a), (b), and (f)

  • Polish Act of 10 May 2018 on Personal Data Protection

  • Polish Telecommunications Law of 16 July 2004

  • Polish Copyright and Related Rights Act of 4 February 1994


§12 Data Retention Period

Personal data provided voluntarily:
Data is stored for the duration of service provision and deleted or anonymized within 30 days after service termination. In justified cases, data may be stored for up to 3 years to protect the Administrator’s legitimate interests.

Anonymous data:
Anonymous statistical data is stored indefinitely.


§13 Users’ Rights

Users have the right to:

  • Access personal data

  • Rectify personal data

  • Erase personal data

  • Restrict processing

  • Data portability

  • Object to processing

  • Lodge a complaint with a supervisory authority


§14 Contact with the Administrator

  • Postal address: TIREST BEATA KNAAK, ul. Kołbielska 32, 05-300 Grębiszew

  • Email: tirest@tirestparking.pl

  • Phone: +48 257 991 080

  • Contact form: /kontakt


§15 Service Requirements

Restricting cookies may affect certain Service functionalities. The Administrator is not responsible for improper operation caused by cookie restrictions.


§16 External Links

The Service may contain links to external websites not controlled by the Administrator. The Administrator is not responsible for content outside the Service.


§17 Changes to the Privacy Policy

The Administrator reserves the right to amend this Privacy Policy at any time. Changes concerning personal data processing will be communicated to registered Users or newsletter subscribers via email within 7 days. Continued use of the Service constitutes acceptance of the changes.

Changes take effect upon publication.