Privacy Policy

1. Data Controller

The data controller responsible for your personal data is:

2. What Data We Collect

We collect and process the following categories of personal data:

2.1 Contact Form Data

The form on this site asks for three things and sends those three:

• Your name
• Your email address
• The message you write

Submissions go into our own customer system, which we host on our own domain. They do not pass through a third-party form or email-marketing service.

2.2 Technical Data

• IP address
• Browser type and version
• Device information
• Pages visited and time spent

2.3 Customer Data (for service users)

• Account credentials
• Fleet and vehicle data
• GPS tracking data
• Driver information
• Billing information

3. Legal Basis for Processing

We process your personal data based on:

• Consent (Art. 6(1)(a) GDPR) — When you submit a contact form or subscribe to communications
• Contract performance (Art. 6(1)(b) GDPR) — When necessary to provide our services
• Legitimate interests (Art. 6(1)(f) GDPR) — For analytics, security, and improving our services
• Legal obligation (Art. 6(1)(c) GDPR) — When required by law (e.g., tax records)

4. How We Use Your Data

We use your personal data to:

• Respond to your inquiries and contact requests
• Provide and maintain our fleet management services
• Process payments and billing
• Send service-related communications
• Improve our website and services
• Ensure security and prevent fraud
• Comply with legal obligations

5. Data Sharing

We may share your data with:

• Website hosting — Cloudflare, which serves this site and handles the connection data any web server sees
• Analytics — Umami, which we host ourselves, and Google Tag Manager, which loads measurement tags supplied by Google
• Platform partners — Wialon and flespi, where delivering a service requires it
• Payment processing — Our bank and accounting providers, for invoicing paid engagements
• Legal authorities — When required by law

We do not sell your personal data to third parties.

6. International Transfers

Your data may be transferred outside the European Economic Area (EEA). When this occurs, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Transfers to countries with adequate data protection laws

In practice the transfer that applies to a visitor is Google Tag Manager: what the tags it loads collect is processed by Google, including in the United States.

7. Data Retention

We retain your personal data for:

• Contact inquiries — 2 years from last contact
• Customer accounts — Duration of contract + 5 years
• Fleet/GPS data — As specified in your service agreement
• Billing records — 5 years (legal requirement)
• Analytics data — 26 months

8. Your Rights

Under GDPR, you have the right to:

• Access — Request a copy of your personal data
• Rectification — Correct inaccurate or incomplete data
• Erasure — Request deletion of your data ("right to be forgotten")
• Restriction — Limit how we process your data
• Portability — Receive your data in a machine-readable format
• Objection — Object to processing based on legitimate interests
• Withdraw consent — Withdraw consent at any time

To exercise these rights, contact us at privacy [at] theassettrack.com.

9. Cookies

This site sets no cookies of its own, and stores nothing in your browser. It has no login and no session, so there is nothing for one to hold. Two third-party scripts run on it:

• Umami — our own analytics, hosted by us and cookieless. It counts pageviews and clicks without storing anything on your device.
• Google Tag Manager — loads measurement tags supplied by Google. Those tags can set cookies in your browser and send data to Google.

Blocking either through your browser or an extension changes nothing about how the site works.

10. Security

We implement appropriate technical and organizational measures to protect your data, including:

• Encryption in transit (TLS/SSL)
• Secure data storage
• Access controls and authentication
• Regular security assessments

11. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date.

13. Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Polish Data Protection Authority:

14. Contact us

For any questions about this Privacy Policy or our data practices, please contact us:

• Email: privacy [at] theassettrack.com
• Address: ul. Marszalkowska 115/338, 00-102 Warszawa, Poland