GDPR & Data Processing Policy

1. Data Controller

The controller of your personal data is:
Pilo Technology sp. z o.o.
ul. Szlak 77/222
31-153 Kraków, Poland
E-mail contact: support@pilotechnology.com

2. What Data We Process and Why

We collect and process personal data for the following purposes:

• Website usage analytics: If you grant consent, we use Google Analytics (via Firebase integration) to gather anonymous, aggregated data on how visitors interact with our website. This helps us optimize performance, fix design issues, and understand traffic sources. This includes IP addresses (anonymized), device parameters, referral URLs, and page navigation patterns.
• Contact and Request Forms: When you send a request via our contact forms, we process your Name, Company, Email Address, Role, and Message. We use this information solely to respond to your inquiry and address your specific business needs.
• Waitlist Signups: If you opt-in to join the waitlist for Pilo One, we process your Email Address to send you early access invitations, release announcements, and platform updates.

3. Legal Basis for Processing

We process your data in accordance with GDPR Article 6:

• Consent (Art. 6(1)(a) GDPR): For website cookies, Google Analytics tracking, and waitlist newsletters. You can withdraw your consent at any time.
• Performance of a Contract / Pre-contractual steps (Art. 6(1)(b) GDPR): For responding to pricing quotes, product demo requests, and technical integration questions submitted via contact forms.
• Legitimate Interest (Art. 6(1)(f) GDPR): To secure our website, prevent spam, and maintain system stability.

4. Cookie Policy

Cookies are small text files stored on your device. We categorize them as follows:

• Essential Cookies: Strictly necessary to run the site (e.g., storing your cookie consent preference). These do not track personal information and cannot be disabled.
• Analytics Cookies (Google Analytics): Used to measure user engagement. These are blocked by default and are only activated if you click "Accept All" or enable them in the consent settings.

You can adjust or revoke your cookie choices at any time by clicking the "Cookie Settings" button in the footer of this website.

5. Data Retention

• Analytics logs: Automatically expired after 14 months (Google Analytics standard retention).
• Contact form inquiries: Retained for the duration of the business communication, up to a maximum of 2 years after last contact, unless converted into an active sales contract.
• Waitlist data: Kept until you choose to unsubscribe (via the link in emails or by contacting us).

6. Third-Party Data Transfers

We do not sell or rent your personal data. We share data only with trusted service providers:

• Firebase Hosting (Google Cloud Platform): For hosting our static files and serving content.
• Google Analytics: For user activity measurement (processed with IP anonymization).

Google services may store data on servers located outside the European Economic Area (EEA), including the United States. We rely on Standard Contractual Clauses (SCCs) and the EU-U.S. Data Privacy Framework to ensure equivalent data protection.

7. Your Rights

Under the GDPR, you have the right to:

1. Request access to your personal data.
2. Request rectification (correction) of incorrect data.
3. Request erasure of your data ("right to be forgotten").
4. Request restriction of processing.
5. Object to processing.
6. Request data portability.
7. Withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, please email us at support@pilotechnology.com. You also have the right to lodge a complaint with a data protection authority (e.g., the President of the Personal Data Protection Office in Poland).