Parking Łódź-Centrumparking.lodz.pl

Privacy policy and cookies

Rules for processing personal data and using cookies on parking.lodz.pl.

This English text is a translation provided for convenience. The legally binding version is the Polish privacy policy. Version dated 15 August 2026.

TIS Partners sp. z o.o. respects the privacy of people using the parking.lodz.pl website and attaches particular importance to the protection of personal data. This Privacy Policy and Cookies explains what data may be processed in connection with using the Website, for what purposes and on what legal bases, to whom data may be transferred, and what rights data subjects have.

§ 1. Data controller

  1. The controller of personal data is TIS Partners sp. z o.o., with its registered office in Łódź, ul. Prezydenta Gabriela Narutowicza 26/28, 90-135 Łódź, entered in the register of entrepreneurs of the National Court Register under KRS 0000336300, NIP 7272750581, REGON 100743293, hereinafter the "Controller".
  2. On matters relating to personal data protection and the exercise of rights, you can contact the Controller:
    • by e-mail: [email protected],
    • in writing: TIS Partners sp. z o.o., ul. Prezydenta Gabriela Narutowicza 26/28, 90-135 Łódź.
  3. This Policy concerns the processing of data in connection with using the parking.lodz.pl website, hereinafter the "Website".
  4. The rules for processing data directly related to using the car park, concluding and performing agreements, subscriptions, complaints and video monitoring are also described in the Controller’s GDPR information notice.

§ 2. What data may be processed

  1. In connection with using the Website, the Controller may process in particular:
    1. first name,
    2. e-mail address,
    3. phone number, if provided,
    4. the content of a message sent via the contact form,
    5. other data voluntarily included by the User in the message,
    6. IP address,
    7. technical information about the device, operating system and browser,
    8. the date and time of connecting to the Website,
    9. information about pages visited and requests sent to the server,
    10. identifiers of cookies or similar technologies, if used.
  2. The Controller asks that special categories of data referred to in Art. 9 GDPR, or other information not necessary to handle the matter, are not sent via the contact form.
  3. Providing a first name and e-mail address in the contact form is necessary to send a message and receive a reply. Providing a phone number is voluntary, unless in a specific case it is necessary to fulfil the User’s request.

§ 3. Purposes, legal bases and periods of processing

1. Contact form and correspondence

Data provided in the form or in correspondence are processed to reply, conduct correspondence and handle the enquiry. The basis is Art. 6(1)(f) GDPR, the Controller’s legitimate interest in communicating with people interested in its activities. If the enquiry aims directly at concluding a contract, the basis is also Art. 6(1)(b) GDPR. Data on enquiries that did not lead to a contract may be kept for up to 12 months from the end of the correspondence, and longer only where necessary to establish, pursue or defend claims or to fulfil a legal obligation.

2. Conclusion and performance of a contract

If a contract results from the contact, data are processed to the extent necessary to conclude and perform it under Art. 6(1)(b) GDPR. Further rules on the data of car park clients are set out in the GDPR information notice.

3. Proper operation and security of the Website

Technical data, in particular the IP address, information on requests to the server and security-related events, may be processed to:

The basis is Art. 6(1)(f) GDPR, the Controller’s legitimate interest in ensuring the security and reliability of the Website. Data are kept for the period necessary for these purposes, and longer only where necessary to clarify an incident, fulfil a legal obligation or pursue or defend claims.

4. Website analytics

With the User’s consent, the Controller may use analytics tools, in particular Google Analytics, to create statistics on Website use, assess its popularity and navigation, and improve its functionality. The basis is Art. 6(1)(a) GDPR, the User’s consent. Storing information on the User’s device or accessing information stored on it takes place in accordance with Art. 399 and 400 of the Electronic Communications Law. Analytics tools that are not necessary for the Website to operate are launched only after appropriate consent is given. The User may withdraw consent at any time; withdrawal does not affect actions carried out before it. User- and event-level data in Google Analytics are stored according to the service configuration, within retention settings of no more than 14 months.

5. Establishing, pursuing and defending claims

Data may be processed to establish, pursue or defend against claims related to using the Website, correspondence or the Controller’s services. The basis is Art. 6(1)(f) GDPR. Data may be kept until the relevant limitation period expires, and if proceedings are commenced - until they are finally concluded and the decision is enforced, where further storage is necessary.

6. Fulfilment of legal obligations

Where the law requires the Controller to process certain data, the basis is Art. 6(1)(c) GDPR. Data are then kept for the period arising from the relevant regulations.

§ 4. Cookies and similar technologies

  1. The Website may use cookies and similar technologies to store information on the User’s terminal device or to access information already stored on it.
  2. The following categories of technology may be used on the Website:

    Necessary cookies and technologies

    Necessary for the proper operation of the Website, security, network handling, remembering the consent decision and delivering functions requested by the User. To the extent their use is necessary to transmit an electronic communication or to deliver a service expressly requested by the User, they do not require separate consent.

    Analytics cookies and technologies

    Used to measure how the Website is used, create statistics and improve its functionality. They are launched only after the User’s consent.

  3. The Controller may use in particular the services of the following providers:
    • Cloudflare, Inc. and Cloudflare group entities - network infrastructure, CDN, protection against attacks and other threats, and ensuring the security of the Website,
    • Google Ireland Limited and Google group entities - Google Analytics and Google Tag Manager for managing the tools used on the Website,
    • Formspree, Inc. - technical handling of the contact form.
  4. Google Tag Manager is used to manage the configuration of tags and tools used on the Website. The Website configuration should ensure that analytics tools requiring consent are not launched before it is obtained.
  5. A contact form handled using Formspree may pass to that provider the information entered in the form, in particular the first name, e-mail address, optionally the phone number, the message content and technical data related to sending the form.
  6. The Controller does not treat browser settings as the sole mechanism for obtaining consent to non-essential cookies. For cookies requiring consent, the User’s decision is collected via the consent management mechanism available on the Website.
  7. The User may:
    • accept all optional cookies,
    • reject optional cookies,
    • choose individual categories,
    • later change or withdraw the decision via the "Cookie settings" function available on the Website.
  8. Withdrawing consent should be as easy as giving it.
  9. Changing browser settings may additionally restrict or delete cookies. Blocking necessary cookies may cause some Website functions to work improperly.

§ 5. Recipients of data

  1. Personal data may be transferred to entities providing the Controller with services necessary to run its business, in particular:
    • providers of hosting, IT infrastructure, network and security services,
    • providers of analytics tools,
    • providers of tools for handling forms and communication,
    • entities providing IT and maintenance services,
    • accountants, tax advisers, lawyers, auditors and other professional advisers, where necessary,
    • entities providing services related to debt recovery or the defence of claims,
    • public authorities, courts, prosecutors, the Police or other entitled bodies, where the obligation to disclose data arises from the law.
  2. Entities processing data on the Controller’s behalf may process them only to the extent arising from the agreement with the Controller and in accordance with its documented instructions, unless the law provides otherwise.
  3. The Controller does not sell Users’ personal data.

§ 6. Transfers of data outside the European Economic Area

  1. Due to the use of global technology providers, some data related to using the Website may be processed outside the European Economic Area, in particular in the United States.
  2. In such a case, the transfer takes place in accordance with Chapter V of the GDPR, in particular:
    • on the basis of a European Commission adequacy decision, including the EU-US Data Privacy Framework, where the recipient is covered by an appropriate decision, or
    • on the basis of standard contractual clauses approved by the European Commission and, where required, additional safeguards.
  3. Information on the safeguards applied in a specific case can be obtained by contacting the Controller.

§ 7. Rights of data subjects

  1. Depending on the basis and circumstances of processing, the data subject has:
    • the right to access data and obtain a copy,
    • the right to rectify data,
    • the right to erase data,
    • the right to restrict processing,
    • the right to data portability, where the conditions in Art. 20 GDPR are met,
    • the right to object to processing based on Art. 6(1)(f) GDPR,
    • the right to withdraw consent at any time, where processing is based on consent.
  2. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
  3. The rights to erasure, restriction, objection or portability are not absolute and apply in the cases set out in the GDPR.
  4. To exercise your rights, contact the Controller at [email protected] or in writing at the Controller’s registered office.
  5. The data subject also has the right to lodge a complaint with the President of the Personal Data Protection Office, ul. Stanisława Moniuszki 1A, 00-014 Warszawa, if they consider that their data are processed unlawfully.

§ 8. Objection to processing

  1. Where data are processed on the basis of Art. 6(1)(f) GDPR, the data subject may object at any time on grounds relating to their particular situation.
  2. On receiving an objection, the Controller will stop processing the data unless it demonstrates the existence of compelling legitimate grounds for further processing, overriding the interests, rights and freedoms of the person, or grounds for establishing, pursuing or defending claims.
  3. Where data would be processed for direct marketing, an objection to such processing results in the data no longer being processed for that purpose.

§ 9. Automated decision-making and profiling

  1. The Controller does not make decisions about Users based solely on automated processing, including profiling, that produce legal effects concerning them or similarly significantly affect them.
  2. Analytics tools may enable a statistical or pseudonymous picture of how the Website is used. These activities serve to analyse the functioning of the Website and do not lead to decisions with legal or similarly significant effects.

§ 10. Data security

  1. The Controller applies appropriate technical and organisational measures to ensure a level of security appropriate to the risk of processing personal data.
  2. Access to data is limited to persons and entities that need it to perform the tasks entrusted to them.
  3. The Controller uses solutions aimed in particular at protecting the Website against unauthorised access, data loss, data alteration, abuse and other threats.

§ 11. External content and services

  1. The Website may contain links or embedded content from external providers, such as maps, videos or other elements.
  2. If launching such content involves accessing information stored on the User’s device, or storing information that is not necessary for the Website to operate or to deliver a service requested by the User, such a mechanism should be launched only after obtaining the required consent.
  3. After moving to an external service, data processing also takes place on the terms set by its operator.

§ 12. Changes to the Policy

  1. The Policy may be updated in particular in the event of changes to law, technology, service providers or the way the Website operates.
  2. The current version of the Policy is published on the Website together with the date of the last update.
  3. If a change requires new consent from the User, the Controller will obtain it before starting processing that requires such consent.