How Availlot handles information shared through our website and services.

1. Types of data collected

Among the types of personal data Availlot collects, itself or through third parties, are: cookies; usage data; first and last name; email address; date of birth; phone number; address; password; geographic position; vehicle information; and data communicated while using the Service.

Complete details on each type of data are provided in the relevant sections below, or in explanation text shown before the data is collected. Data may be freely provided by you or, in the case of usage data, collected automatically as you use our website. Unless stated otherwise, data we request is mandatory, and failure to provide it may make it impossible for us to provide our services; where data is optional, you are free not to provide it without consequence. You are responsible for any third-party personal data you obtain, publish or share through Availlot.

2. How and where data is processed

A. Methods of processing. We take appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of data. Processing is carried out using computers and IT tools, following organizational procedures tied strictly to the purposes described here. Data may be accessible to Availlot personnel involved in administration, sales, marketing, legal or system administration, or to external parties such as technical service providers, hosting providers or communications agencies acting as data processors on our behalf.

B. Place of processing. Data is processed at Availlot's operating offices and any other location where the parties involved in processing are based. Depending on your location, this may involve transferring your data to a different country, subject to appropriate safeguards where required by law.

C. Retention time. Unless stated otherwise, personal data is processed and stored for as long as required by the purpose it was collected for, and may be retained longer where required by law or based on your consent.

3. Purposes of processing

Data concerning you is collected to allow Availlot to provide its services, comply with legal obligations, respond to enforcement requests, protect our rights and the rights of our users, and detect fraudulent or malicious activity, as well as for: analytics; contacting you; hosting and backend infrastructure; managing contacts and sending messages; registration and authentication; handling payments; advertising; database management; live-chat support; traffic optimization; location-based services; tag management; and managing landing pages and online forms.

4. Detailed processing activities

A. Access to third-party accounts. Some features allow Availlot to access data from your account on a third-party service and take action on your behalf. These are never activated automatically and always require your explicit authorization, for example, connecting a payment account so we can facilitate a transaction on your behalf.

B. Advertising. We may use data to serve advertising, including banners tailored to your interests, through third-party advertising and conversion-tracking networks. These services may use trackers to identify users, perform behavioral retargeting or measure ad performance; most offer their own opt-out tools, and general guidance on opting out of interest-based advertising is provided in Section 9 below. Where you provide a phone number, we may also use it for direct marketing about Availlot's own services, subject to your right to opt out at any time.

C. Analytics. We use analytics services to monitor and understand web traffic and usage, which may involve cookies, usage data and, for mobile testing programs, an email address. Some analytics are collected directly by Availlot without third-party involvement.

D. Contacting you. Through our contact form, you authorize Availlot to use your name and email address to respond to your enquiry. If you provide a phone number, you may be contacted regarding your enquiry or, where permitted, for commercial or promotional purposes.

E. Displaying content from external platforms. Services such as font libraries and interactive maps let us display external content on our pages; these may collect usage data for the pages where they are installed, even if you don't directly interact with them.

F. Handling payments. Payment processors enable Availlot to process card payments, bank transfers and other payment methods. We share only the information necessary to complete a transaction with the financial intermediaries involved, which may include mobile wallet providers where you choose to pay that way.

G. Hosting and backend infrastructure. Hosting services allow our website and services to run and be distributed, and may involve geographically distributed servers, making it difficult to pin down the exact location where a given piece of data is stored at any moment.

H. Live chat. Where available, live-chat tools let you interact with our support team directly from our pages. Live-chat conversations may be logged, and usage data may be collected for pages where the widget is installed even if you do not use it.

I. Location-based services. Availlot may collect, use and share your location data to provide location-based features, such as showing nearby parking availability. Most browsers and devices let you opt out of location sharing by default; where you provide explicit authorization, your location may be tracked.

J. Managing contacts and messages. We use services to manage a database of email and phone contacts so we can communicate with you, which may include data on when a message was viewed or a link was clicked. Phone numbers collected for SMS communication are never shared with third parties for their own marketing purposes; they are used solely to provide requested services, account notifications and support, and you may opt out at any time using the instructions in the message.

K. Online forms and surveys. We may use third-party tools to build, distribute and analyze online forms and surveys, collecting whatever information you choose to provide in response.

L. Landing and invitation pages. Services that host landing pages may collect the email addresses and usage data of visitors interested in our services, and may allow us to track and analyze visitor response to different page content.

M. Operations, license plate recognition. At some Availlot-enabled facilities, vehicle inventories may be conducted using automated license plate recognition ("LPR") technology, used only to: determine correct fees for time-based parking sessions; identify abandoned vehicles; activate or deactivate parking sessions; verify vehicle counts; collect unpaid fees; and respond to law enforcement inquiries. Access to LPR data is restricted to personnel with a legitimate business need, such as on-site staff auditing occupancy, employees handling unpaid or abandoned-vehicle reports, and technicians maintaining the system, and is retained for at least 180 days before being eligible for automatic deletion. Requests to share LPR data with a third party must be made in writing, stating the requester, their organization and the purpose, and are reviewed before being approved. Sale or unauthorized disclosure of license plate data is prohibited by company policy. Questions about this LPR policy, or requests to delete LPR data, can be sent to partners@availlot.com.

N. Registration and authentication. When you register directly with Availlot, we collect the personal data you provide on the registration form, which may include your address, date of birth, email address, name, password and phone number, to identify you and give you access to your account.

O. Tag management. We may use a tag-management service to centrally manage the tags and scripts used across our website, which can result in your data flowing through, and potentially being retained by, that service.

P. Traffic optimization and distribution. A content-delivery service may filter traffic between our website and your browser to improve performance and reliability, which can involve processing data across a widely distributed server network, making it difficult to pin down exactly where content containing your data is transferred.

Q. User database management. We may use a database or CRM service to build user profiles from the email address, name or other information you provide, track activity through analytics, and, where permitted, match that information with publicly available data to build profiles we use to improve Availlot. Some of these services may also send you messages triggered by specific actions you take on our website.

5. Cookies and tracking technologies

Availlot uses cookies and similar trackers, small sets of data stored in your browser, or other technologies such as unique identifiers, web beacons and embedded scripts, to operate the website, remember preferences and understand usage. For details, see our Cookie Policy.

6. Opting out of interest-based advertising

In addition to any opt-out feature offered by a specific service listed above, you can generally learn more about opting out of interest-based advertising in the dedicated section of our Cookie Policy.

7. Additional information for users

A. Pseudonymous use. Where registration allows a nickname or pseudonym, your personal data will not be published or made publicly available under your real identity. Any activity you take will appear under your chosen nickname, though voluntarily shared content may still directly or indirectly reveal your identity.

B. Not directed to children under 13. By using Availlot, you represent that you are an adult under applicable law. Minors may use Availlot only with the assistance of a parent or guardian, and under no circumstance may a person under 13 use Availlot.

C. Device and user identifiers. Availlot may track users by storing a unique device identifier or a universally unique identifier (UUID), for analytics purposes or to store your preferences. A UUID persists across app launches and updates but is lost if you delete the app; reinstalling generates a new one.

8. Legal basis and your rights

A. Legal basis for processing. We process personal data where you have given consent; where processing is necessary to perform an agreement with you or fulfill a pre-contractual obligation; where necessary to comply with a legal obligation; where processing serves a public interest or official function vested in us; or where necessary for a legitimate interest pursued by Availlot or a third party. We are glad to help clarify which legal basis applies to a specific instance of processing.

B. Retention. Data collected for performing a contract is retained until the contract is fully performed; data collected for our legitimate interests is retained as long as needed to fulfill that interest; and we may retain data longer where you have consented, or where required to meet a legal obligation. Once a retention period expires, the data is deleted, and rights such as access, erasure, rectification and portability can no longer be exercised over it.

C. Your rights (including under the GDPR). To the extent permitted by law, you have the right to: withdraw consent at any time; object to processing carried out on a legal basis other than consent; access your data and obtain a copy of it; verify and request correction of inaccurate data; restrict certain processing; request erasure of your data; receive your data in a portable, machine-readable format; and lodge a complaint with your competent data protection authority. Where processing is for direct marketing, you may object at any time, free of charge and without justification.

D. How to exercise these rights. Requests can be directed to Availlot using the contact details in Section 12. Requests are free of charge and will be answered as early as possible, and always within one month. Any rectification, erasure or restriction will be communicated to each party the data was disclosed to, unless this proves impossible or requires disproportionate effort.

9. International transfers

Availlot may use service providers or infrastructure located in different countries, which may mean your data is processed outside the country in which it was originally collected, subject to appropriate safeguards where required by applicable law.

10. Security

We use administrative, technical and organizational measures designed to protect data against unauthorized access, disclosure, modification or destruction. No method of transmission or storage is completely secure, and we cannot guarantee absolute security; please use appropriate care when submitting information online.

11. Changes to this Privacy Policy

We may update this policy at any time by posting a revised version on this page and, where technically and legally feasible, notifying you through the website or another contact method on file. We recommend checking this page periodically and referring to the effective date above. Where a change affects processing based on your consent, we will collect new consent where required.

12. Contact us

If you have questions about this Privacy Policy, wish to exercise a privacy right, or have a question about our license plate recognition policy, contact Availlot at partners@availlot.com or through our Contact Us page.

13. Definitions

Personal data is any information that, directly, indirectly or in connection with other information, allows for the identification of a natural person. Usage data is information collected automatically through our website, such as IP addresses, pages visited, time of request, referring pages, browser and device details, and the path followed within the site. User means the individual using Availlot. Data controller (or Owner) means Availlot, which determines the purposes and means of processing described in this policy. Cookie means a tracker consisting of a small set of data stored in your browser. Tracker means any technology, cookies, unique identifiers, web beacons, embedded scripts and similar, that enables the tracking of users.