ARMK » Privacy Notice

Information on the processing of personal data

In connection with the processing of your personal data, we hereby inform you, pursuant to Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ L 119, 4.5.2016, p. 1), hereinafter referred to as the “GDPR”, that:

I. Data Controller

The controller of your personal data is Agencja Rozwoju Miasta Krakowa Sp. z o.o. You may contact the Controller in writing by post at: ul. Marii Konopnickiej 17, 30-302 Kraków, by email at biuro@armk.pl, or by telephone at (+48) 731 900 140.

II. Data Protection Officer

The Controller has appointed a Data Protection Officer, who may be contacted at the Controller’s registered office or by email at iod@armk.pl.

III. Legal basis and purposes of personal data processing

Your personal data will be processed for the following purposes:

entering into and performing an agreement for the paid use of a parking space, in particular recording vehicle entry and exit in the parking system, processing payments and managing monthly passes (legal basis: Article 6(1)(b) GDPR);
ensuring the safety of persons and property and monitoring vehicle traffic by means of video surveillance at the car park (legal basis: Article 6(1)(f) GDPR);
handling complaints and reports, and communicating with car park users (legal basis: Article 6(1)(b) and (f) GDPR);
issuing invoices and maintaining accounting records (legal basis: Article 6(1)(c) GDPR);
establishing, pursuing or defending claims arising from the use of the car park (legal basis: Article 6(1)(f) GDPR).

IV. Information on whether providing personal data is mandatory or voluntary and the consequences of not providing such data

Providing personal data is voluntary. However, in certain cases, it may be necessary in order to use the car park services.

V. Recipients of personal data

Your personal data may be disclosed to entities authorised to receive such data under applicable law.
Your personal data may also be transferred to entities processing data on behalf of the Controller, such as providers of IT, advisory and legal services. Such entities process personal data solely on the basis of an agreement with the Controller.
Recipients of your personal data may also include electronic payment service providers and the operator of the ParkCash mobile application.

VI. Personal data retention period

Your personal data will be processed:

for the period necessary to perform the agreement for the use of the car park and subsequently, for tax and accounting purposes, for a period of 5 years from the end of the calendar year in which the deadline for payment of the tax expired;
for the purposes of pursuing or defending possible claims, for a period of 3 years following the end of the cooperation and where proceedings are pending, until such proceedings have been finally concluded and until the relevant limitation periods have expired;
video surveillance recordings will be retained for no longer than 3 months, after which they will be permanently deleted or overwritten. In justified cases, where video surveillance recordings constitute or may constitute evidence in proceedings conducted pursuant to applicable law, such data will be processed for the purpose of pursuing or defending claims for a period of 1 year. If proceedings are initiated, the data will be processed until the proceedings have been concluded by a final and binding decision and until the limitation period for claims, calculated from any new deadlines arising as a result of the proceedings, has expired.

VII. Rights of data subjects

In connection with the processing of your personal data, you have the right to:

access your personal data;
obtain a copy of your personal data;
rectify your personal data;
erase your personal data;
data portability;
restrict the processing of your personal data;
object to the processing of your personal data;

– in the cases and under the conditions specified in the GDPR. You may exercise the above rights by contacting the Controller.

VIII. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with the President of the Personal Data Protection Office where there are grounds to believe that the Controller is processing your personal data in breach of the GDPR.