Privacy Policy

1. Introduction

Parked it AB provides digital services and products related to vehicles, mobility and location-based services. Our services currently include:

• Parked it – a platform for vehicle-related and location-based services, including parking, electric vehicle charging and other supported services.
• TripTrackIt – a GPS-based electronic driving log and vehicle management service.

This Privacy Policy explains how Parked it AB collects, uses, stores, shares and protects personal data when you use our websites, mobile applications, GPS tracking devices and related services. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and other applicable data protection legislation.

2. Data Controller

The data controller is: Parked it AB Company registration number: 559481-4286 Sweden Websites: parked.it triptrackit.com General contact: support@parked.it In some circumstances involving business customers, the business customer may determine the purposes and means of certain processing involving its employees, drivers or other individuals. In such circumstances, Parked it AB may process personal data on behalf of the business customer under separate data protection arrangements.

3. Data Protection Officer

Parked it AB has appointed a Data Protection Officer (DPO) responsible for overseeing data protection matters and compliance with applicable data protection legislation. For questions concerning privacy, the processing of your personal data, or the exercise of your data protection rights, you may contact our Data Protection Officer directly at: dpo@parked.it

4. Personal Data We Process

The personal data we process depends on which Services you use.

4.1 Account Information

We may process:

• Name.
• Email address.
• Account identifiers.
• Authentication information.
• Account and communication preferences.

4.2 Vehicle Information

We may process:

• Vehicle registration number.
• Vehicle identifiers.
• Information associated with vehicles registered to an account.
• Information necessary to connect a vehicle or GPS device to our Services.

4.3 Location and Journey Information

Where required by the Service you use, we may process:

• GPS coordinates.
• Timestamps.
• Routes and journeys.
• Vehicle movements.
• Trip distances.
• Locations associated with Service activity.

Location information may reveal travel patterns and frequently visited locations. We therefore apply appropriate security measures to this information.

4.4 Service and Transaction Information

We may process information concerning:

• Parking sessions.
• Charging sessions.
• Service orders.
• Driving logs.
• Subscriptions.
• Purchases.
• Transaction references.
• Service usage.

4.5 GPS Device Information

Where compatible GPS hardware is used, we may process:

• Device identifiers.
• Device status.
• Connectivity information.
• Technical information necessary to communicate with and operate the device.

4.6 Payment and Billing Information

We may process:

• Subscription status.
• Purchase history.
• Billing information.
• Payment transaction references.
• Information required for accounting and transaction management.

Payment card information may be processed directly by our payment service providers rather than stored by Parked it AB.

4.7 Technical and Security Information

We may process:

• IP addresses.
• Application diagnostics.
• Security logs.
• Device and application information.
• Information necessary to detect errors, maintain security and prevent misuse.

5. Why We Process Personal Data and Our Legal Basis

We process personal data for specific purposes and on an applicable legal basis under the GDPR.

Providing and Managing User Accounts

We process account information and related identifiers to create, authenticate and manage user accounts. Legal basis: Performance of a contract.

Providing Purchased or Requested Services

We process vehicle, Service, device and other necessary information to provide the Services requested by the user. Legal basis: Performance of a contract.

GPS-Based Functionality

Where GPS functionality forms part of a Service requested or activated by the user, we process vehicle location, movement and related information to provide that functionality. This includes generating TripTrackIt driving logs and providing enabled Parked it location-based functionality. Legal basis: Performance of a contract, where the processing is necessary to provide the requested Service.

Payments and Subscriptions

We process billing, subscription and transaction information to administer purchases, subscriptions and payments. Legal basis: Performance of a contract and, where applicable, compliance with legal obligations.

Accounting and Legal Records

Certain transaction and financial information is retained where required by accounting, tax or other legislation. Legal basis: Compliance with a legal obligation.

Security and Prevention of Misuse

We may process account, technical and security information to protect our Services, users and systems against unauthorized access, fraud, abuse and security threats. Legal basis: Our legitimate interests in maintaining secure and reliable Services. Where we rely on legitimate interests, we consider the relevant interests and the impact of the processing on individuals.

Consent

Where applicable law requires consent for a specific processing activity, we will request consent separately. Where processing is based on consent, you may withdraw that consent in accordance with applicable law.

6. Parked it

Parked it provides vehicle-related and location-based services. Depending on the functionality you activate, Parked it may process vehicle and location information to identify, initiate, manage or terminate supported services. This may include:

• Identifying supported parking or service areas.
• Starting or terminating parking sessions.
• Managing electric vehicle charging or other supported services.
• Creating service transactions.
• Providing transaction history and receipts.
• Communicating with participating service providers.

Where automatic functionality is enabled, GPS or other vehicle location information may be used to detect when a vehicle enters, stops within or leaves a supported service area. This information may trigger automated service transactions according to your settings and the applicable Service conditions. Location information may originate from a compatible GPS tracking device, vehicle connectivity provider or another supported location source. Depending on the active configuration, location information may be processed even when the Parked it mobile application is not open.

7. TripTrackIt

TripTrackIt uses vehicle and GPS information to provide electronic driving logs. Depending on the functionality used, TripTrackIt may process:

• Vehicle location.
• Journey start and end times.
• Routes.
• Trip distances.
• Vehicle movements.
• Driving log classifications.
• GPS device information.

Location information may be transmitted automatically by a compatible GPS tracking device while the vehicle is operating, even when the TripTrackIt mobile application is not open. Where available, automated classification functionality may process journey information to suggest classifications such as business or private journeys. Automated classifications are intended to assist the user and may be reviewed and corrected. If TripTrackIt is used in relation to vehicles driven by employees or other individuals, the organization responsible for the vehicles must ensure that applicable data protection and employment requirements are satisfied.

8. Sharing Personal Data

We may share personal data with service providers and partners where necessary to provide, maintain and protect our Services. Recipients may include:

• Cloud infrastructure and hosting providers, including Microsoft Azure.
• Payment processing providers, including Stripe.
• Participating parking operators, charging providers and other vehicle-related service providers.
• GPS device manufacturers, connectivity providers and vehicle connectivity providers.
• Delivery and logistics providers where physical products are purchased.
• Authentication, communication and customer support providers.
• Professional advisers where necessary.
• Competent authorities where disclosure is required by applicable law.

We limit information shared with a recipient to what is reasonably necessary for the relevant purpose. Some participating service providers may act as independent data controllers for information they process for their own purposes. Their own privacy policies may apply to that processing. We do not sell individual driving logs or location histories to unrelated third parties for their independent marketing purposes.

9. International Data Transfers

Some service providers may process personal data outside the European Economic Area. Where personal data is transferred outside the EEA, we use appropriate safeguards as required by applicable data protection legislation. Depending on the recipient and destination, these safeguards may include an applicable adequacy decision or the European Commission's Standard Contractual Clauses. Information about applicable safeguards may be requested from our Data Protection Officer at dpo@parked.it.

10. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected and to comply with applicable contractual and legal obligations. Account information is generally retained while an account remains active and for such additional period as necessary to complete account closure, resolve outstanding matters or comply with legal obligations. Driving logs and associated location information are retained as necessary to provide TripTrackIt and according to applicable account settings and retention arrangements. Location and Service information processed through Parked it is retained according to the purpose of the relevant Service and our applicable retention procedures. Transaction, accounting and financial records may be retained after account closure where required by applicable accounting, tax or other legislation. Security logs and technical information may be retained for a limited period where necessary for security, troubleshooting and prevention of misuse. When personal data is no longer required, it is deleted or anonymized in accordance with our retention procedures.

11. Data Security

We implement technical and organizational measures designed to protect personal data against unauthorized access, alteration, disclosure, destruction and loss. These measures include, where appropriate:

• Access controls.
• Authentication mechanisms.
• Encrypted communications.
• Restricted access to personal data.
• Security logging and monitoring.
• Measures designed to protect our infrastructure and Services.

No electronic system can guarantee absolute security.

12. Business Customers and Drivers

Where an organization uses our Services for vehicles driven by employees, contractors or other individuals, additional data protection responsibilities may apply. The organization is responsible for determining whether it has an appropriate legal basis for its processing, providing required information to affected individuals and complying with applicable employment and data protection legislation. Where Parked it AB processes personal data on behalf of such an organization, Parked it AB acts as a data processor in relation to that processing and appropriate data processing terms, including a Data Processing Agreement where required, will apply. Parked it AB may separately act as a data controller for processing carried out for its own purposes, such as account administration, billing, compliance with legal obligations and security.

13. Your Rights

Subject to applicable data protection legislation, you may have the right to:

• Request access to your personal data.
• Request correction of inaccurate personal data.
• Request deletion of personal data.
• Request restriction of processing.
• Object to processing based on legitimate interests.
• Request data portability where applicable.
• Withdraw consent where processing is based on consent.

These rights are subject to the conditions and exceptions provided by applicable law. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) or another competent supervisory authority. To exercise your data protection rights or ask questions concerning the processing of your personal data, contact our Data Protection Officer at dpo@parked.it.

14. Account Deletion

Users may request deletion of their account through the account management functionality available on our website. Account deletion may result in the permanent removal of associated Service information, including driving logs. Some personal data may be retained where necessary to comply with legal obligations, establish or defend legal claims, resolve outstanding transactions or fulfil other lawful retention requirements. For business accounts, certain information may also be subject to the instructions and retention requirements of the relevant organization.

15. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to our Services, data processing activities or applicable legal requirements. The current version will be made available through our websites. Where required by law, we will provide additional notice or obtain consent before implementing relevant changes.

16. Contact

Parked it AB Company registration number: 559481-4286 Sweden General inquiries and support: support@parked.it

Data Protection Officer: Privacy and data protection inquiries: dpo@parked.it

Websites: parked.it triptrackit.com