Privacy Policy

Data controller

The controller of your personal data is Mateusz Radny, a sole trader operating under the business name Hermsoft Mateusz Radny, Nekielska 41, 62-330 Nekielka, Poland, NIP (tax ID): 7891698329, REGON: 361197187 (“Hermsoft”, “we”). Hermsoft operates hermsoft.pl and provides the Transpira fleet management platform.

For any personal data matters, contact us at kontakt@hermsoft.pl or by phone at +48 663 182 493.

What data we process and why

Contact and demo form: we process your e-mail address, optionally your phone number, and the content of your message in order to answer your inquiry and schedule a product demo. The legal bases are steps taken prior to entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in handling correspondence (Art. 6(1)(f) GDPR).

Server logs: we process the IP address and basic technical request data to keep the site secure and prevent abuse, including request rate limiting (Art. 6(1)(f) GDPR).

Transpira app account: we process your e-mail address, name and organization details to provide the service (Art. 6(1)(b) GDPR), and billing data to process payments and meet tax obligations (Art. 6(1)(b) and (c) GDPR).

Fleet data (e.g. vehicle positions, driver data, tachograph records) entered into the app by customers is processed by us as a processor — the customer's organization remains the controller of that data, under a data processing agreement.

Data recipients

We use providers that process data on our behalf: hosting and infrastructure providers, e-mail providers, Google Ireland Ltd. (Firebase authentication), Stripe (payment processing), Fakturownia sp. z o.o. (invoicing) and SMS notification providers. Each of them is bound by a data processing agreement or an equivalent legal instrument.

We do not sell personal data and we do not share it with third parties for marketing purposes.

Transfers outside the EEA

Some providers (e.g. Google, Stripe) may transfer data to countries outside the European Economic Area, in particular to the USA. Such transfers rely on European Commission adequacy decisions (EU–US Data Privacy Framework) or standard contractual clauses.

How long we keep data

We keep form correspondence for as long as needed to handle the matter, and no longer than the limitation period for potential claims. Account data is kept for the duration of the contract and afterwards for the period required by law (e.g. billing documents for the period required by tax law, and data covered by transport regulations, such as tachograph records, for the periods those regulations require).

We fulfil erasure requests by anonymizing personal data while respecting mandatory retention periods — data we cannot delete yet is locked and deleted automatically once the required period expires.

Your rights

You have the right to access your data, rectify it, erase it, restrict processing, port it, and object to processing based on legitimate interest. To exercise these rights, write to kontakt@hermsoft.pl.

You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office (uodo.gov.pl).

Cookies

The site uses only strictly necessary cookies and browser storage: to remember your language preference and interface settings. We use no analytics, advertising or tracking cookies — which is why we do not display a cookie consent banner.

Automated decision-making

We do not make decisions about you based solely on automated processing that would produce legal effects. The app's analytical features (e.g. driver safety scoring) operate within the service provided to the customer's organization and always link to the underlying source data.

Changes to this policy

We may update this policy as the product evolves. The date of the last update is shown at the top of this page; we will notify app users of any material changes.