Privacy Policy

1. Introduction

Sentio Sp. z o.o. (trading as "The Routing Lab") is committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. This Privacy Policy explains how we collect, use, store and protect your personal data when you use our website, services and products, including AutoHiver.

2. Data Controller

The data controller responsible for your personal data is:

3. Data We Collect

We may collect and process the following types of personal data:

• Contact Information: Name, email address, phone number, company name and job title when you contact us or submit a form.
• Technical Data: IP address, browser type, device information and usage data when you visit our website.
• Communication Data: Records of correspondence when you contact us via email, phone, or our contact forms.
• Service Data: Information related to your use of our services, including AutoHiver platform data, delivery routes and operational metrics.

4. How We Use Your Data

We process your personal data for the following purposes:

• To provide and improve our services, including AutoHiver and consulting services
• To respond to your inquiries and communicate about our products and services
• To send you relevant marketing communications (with your consent)
• To comply with legal obligations and protect our legitimate interests
• To analyse website usage and improve user experience

5. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: When you have given explicit consent for specific purposes, such as marketing communications.
• Contractual Necessity: When processing is necessary for the performance of a contract or to take pre-contractual steps at your request.
• Legitimate Interests: When processing is necessary for our legitimate business interests, provided these do not override your rights.
• Legal Obligation: When processing is required to comply with applicable laws and regulations.

6. Data Sharing and Transfers

We do not sell your personal data. We may share your data with:

• Service providers who assist in delivering our services (e.g., hosting providers, email services)
• Business partners involved in joint projects or services (with appropriate agreements)
• Legal authorities when required by law or to protect our rights

If we transfer data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Contact form submissions are typically retained for up to 3 years unless you request earlier deletion. Service-related data may be retained longer to comply with contractual and legal obligations.

8. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restriction: Request limitation of processing in certain circumstances
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or for marketing purposes
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month.

9. Cookies

Our website uses a single essential cookie to remember your language preference when you switch between English and Polish. This cookie (NEXT_LOCALE) is strictly necessary for the website to function according to your preferences and does not collect any personal data or track your browsing activity. No analytics or third-party cookies are used on this website.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes encryption, secure servers and regular security assessments.

11. Children's Privacy

Our services are not directed at children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated through our website or via email. We encourage you to review this policy periodically.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

You also have the right to lodge a complaint with your local data protection supervisory authority if you believe your rights have been violated.