Privacy policy

1. Controller

The controller is Palletbyte (hello@palletbyte.com). For all matters concerning personal data, write to hello@palletbyte.com.

2. Contact form

The form sends the company name, the contact person’s first and last name, the email address and the message to our server. We store the enquiry in our system and forward it to our team by email.

• Purpose: responding to the enquiry and further correspondence, including preparing an offer.
• Legal basis: our legitimate interest in responding to messages (Art. 6(1)(f) GDPR) and, where the enquiry concerns a contract, taking steps at your request prior to entering into it (Art. 6(1)(b) GDPR).

3. Account in the Palletbyte Dock Manager app

When an operator registers, we process the data of the person creating the account (first name, last name, email address, company name) in order to create the account, provide the service and invoice it (Art. 6(1)(b) and (c) GDPR).

Data that the operator enters into the app — the accounts of its staff and customers and driver data in bookings — is processed by us on behalf of the operator as a processor (Art. 28 GDPR). The operator is the controller of this data, and the retention period for driver data is set by the warehouse (by default 365 days after the booking is completed, followed by automatic anonymisation).

4. Operation and security of the website

On every visit, the server technically receives the IP address and browser information needed to display the website and to protect it against abuse (Art. 6(1)(f) GDPR). We serve fonts from our own server — the website does not load them from Google.

5. Visit statistics (Google Analytics)

Only with your consent do we use Google Analytics 4 to learn which content is read and how to improve the website. The tool collects, among other things, an identifier from a cookie, information about the device and browser, approximate location and the pages visited. We do not use this data for advertising.

• Legal basis: your consent (Art. 6(1)(a) GDPR and Art. 399 of the Polish Electronic Communications Law).
• Without consent, the Google Analytics script is not loaded at all. You can withdraw consent using the “Cookie settings” button in the footer; withdrawal does not affect the lawfulness of processing carried out before it.
• The app.dm.palletbyte.com application does not use Google Analytics.

6. Recipients of data

We use providers that process data on our behalf under data processing agreements:

• Hetzner Online GmbH (Germany) — servers for the website and the app,
• an email provider in the European Union — sending messages and notifications,
• ACTIO (Sendly, Poland) — sending SMS to drivers, only when the operator enables SMS in the app,
• Google Ireland Limited (Ireland) — Google Analytics, only with your consent.

7. Transfers outside the EEA

In the case of Google Analytics, data may be transferred to Google LLC in the USA. Google LLC participates in the EU-U.S. Data Privacy Framework, for which the European Commission has found an adequate level of protection (Art. 45 GDPR). Our other providers process data in the European Union.

8. How long we keep data

• Form enquiries and correspondence — for as long as it takes to handle the enquiry, and then until any claims become time-barred.
• Operator account data — for the term of the contract, and then for as long as required by tax and accounting regulations.
• Technical server data — no longer than security requires.
• Data in Google Analytics — 14 months from collection, or less if you withdraw your consent earlier.

9. Your rights

You have the right to access your data, to rectification, erasure, restriction of processing and data portability, and the right to object to processing based on our legitimate interest. You may withdraw your consent at any time. Write to hello@palletbyte.com.

You may also lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, Poland, uodo.gov.pl).

10. Other information

Providing data is voluntary, but without it we cannot respond to your enquiry or create an account. We do not make automated decisions and do not profile visitors. We announce changes to this policy by updating this page.