Privacy policy

Who is the data controller

The controller of personal data submitted through this site is ICOBER Spółka z ograniczoną odpowiedzialnością, ul. Stradzewo 27, 73-200 Choszczno, Poland, registered in the National Court Register under number 0000967675, VAT ID 5941611508. For data protection matters: office@icober.pl.

What we collect

Through the contact form, we collect only the information you provide yourself: your name, municipality or company name, email address and the content of your message. We do not automatically collect any data for marketing purposes. Technical connection information generated when you use the website and the demo is described below.

Fields marked as required must be filled in for the message to reach us at all. The name of your municipality or company is optional.

Purpose and legal basis

We process contact-form data solely to answer your message and to continue the correspondence on the matter you raised. The basis is our legitimate interest in handling enquiries (Art. 6(1)(f) GDPR) and, where the exchange leads towards a contract, steps taken at your request before entering into it (Art. 6(1)(b) GDPR).

Separately, and for a different purpose, we process certain technical connection information for a limited period. This is described below in the sections on visitor statistics, contact form protection and the public demo. The legal basis is our legitimate interest in ensuring the operation and security of the website and demo, preventing abuse and troubleshooting errors and, in the case of icober.com, also compiling the basic visitor statistics described below (Article 6(1)(f) GDPR).

How long we keep it

For as long as needed to handle the matter and the correspondence, and afterwards for the period needed to establish, pursue or defend against claims.

Who we share it with

Data may be provided to our IT service providers — including website and demo hosting providers and email service providers — only to the extent necessary to operate the service and handle correspondence. The demo server is located in a data centre in Poland. Videos and the map used in the demo are separate cases in which your browser connects directly to external providers, as described below.

We do not sell personal data and do not pass it to anyone for their marketing.

Your rights

You have the right to:

• access your data,
• rectify it,
• erase it,
• restrict its processing,
• object to processing based on our legitimate interest,
• data portability, in the cases covered by Art. 20 GDPR.

Which of these apply depends on the basis and the circumstances of the processing; not every right applies in every situation.

You may also lodge a complaint with a supervisory authority — in our case the President of the Personal Data Protection Office in Poland.

Profiling and automated decisions

We do not profile people who contact us through this site, and we take no decisions about them based solely on automated processing.

Cookies

Neither icober.com nor the public iCober Cloud demo stores cookies in your browser, whether first-party or third-party. We do not use cookies for analytics, tracking, profiling or behavioural advertising, and we do not use external analytics tools.

The demo does, however, use a different technology — browser storage (localStorage) — to maintain your session and remember settings you select. This is described in the section on the demo.

An exception involving data stored by other providers occurs only when you choose to play a video, as described in the section on videos.

Videos

Videos are shown from YouTube, but the player loads only when you click the frame. Until you do, your browser makes no connection to YouTube and nothing reaches it.

Once you click, your browser connects directly to Google's servers. Your IP address and browser details reach them at that point, and Google may store data on your device. We use the youtube-nocookie.com address, which limits that storage but does not rule it out. From then on this happens on Google's terms, over which we have no control.

If you are signed in to a Google account, playback may be linked to it. Google also processes this data outside the European Economic Area, relying on mechanisms permitted under the GDPR — an adequacy decision or other safeguards used by that provider.

Public iCober Cloud demo

We provide a public demonstration environment of the iCober Cloud system at demo.icober.cloud, accessible through the “Live demo” button on this website. The devices, locations, cards and events shown in the demo are simulated — they do not originate from any customer deployment and do not relate to any real individuals. The demo does not require you to provide personal data or create an account — access is granted automatically as an anonymous guest.

Browser storage. The demo stores the following information in your browser's localStorage:

• guest session data — an access token and a refresh token together with their expiry dates; the demo cannot operate without them;
• interface settings — your selected language and, if you use a filter, your filter selection so that you do not have to select it again.

This information remains in your browser and is not used for tracking or analytics. You can remove it by clearing the site data for demo.icober.cloud in your browser settings.

Server logs. We do not maintain a visitor log for the demo. However, the intermediary server through which demo traffic passes records technical information about requests that result in errors: the IP address, date and time, requested address and information sent by the browser (for example, browser type). We use this information to troubleshoot failures and detect abuse. These entries are automatically deleted after 30 days. We do not combine them with other data or attempt to use them to identify you. The legal basis is our legitimate interest in ensuring the operation and security of the demo (Article 6(1)(f) GDPR).

Map. The map in the demo uses OpenStreetMap tiles. When the map is displayed, your browser connects directly to servers operated by the OpenStreetMap Foundation (St John's Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom), which are located in the United Kingdom and other countries. The Foundation therefore receives your IP address and browser information and processes this data as an independent controller under its own rules. Where data is transferred to the United Kingdom, the transfer is based on the European Commission's adequacy decision under Article 45 GDPR. OpenStreetMap Foundation Privacy Policy.

Visit statistics

We run our own simple visit counter on our server. We record page views per subpage, the language version, and the site you arrived from — the domain alone, without the full address and without following your path inside our own site.

To estimate how many distinct visits a day brings, we transform the IP address using a one-way function together with the date and a secret key, and store only the result. We do not keep the IP address in any readable form, and the result means nothing the next day because it is built from a different date — we delete it after twenty-four hours. This does not mean the IP address is never processed: it is, at the moment of that transformation.

We use the statistics solely to gauge visit numbers and which subpages draw interest. They go to no external analytics provider — they stay on our server.

Protecting the form

So that the contact form cannot be used to send spam, we cap how many messages one connection may send per hour. This works like the counter: the IP address is transformed using a one-way function and a secret key, and we keep only the result along with the times of sending, not the address itself.