Privacy Policy

Revised Privacy Policy for PalGPS

Date: April 22, 2025

This Privacy Policy outlines the types of personal data PalGPS may collect from individuals who use our website and mobile application, how their personal data is processed, their rights as data subjects, and other relevant information. By using our website and mobile application, you consent to the collection and processing of your personal data as described in this Privacy Policy. The processing of your personal data is carried out in compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and other applicable data protection laws.

1. Definitions

• Personal Data: Any information that directly, indirectly, or in connection with other information relates to an identified or identifiable living individual.
• Data Subject: Any person whose personal data is being collected, held, or processed.
• Data Controller: PalGPS, which determines the purposes and means of collecting and processing the personal data of data subjects.
• Cloud: The remote environment in which personal data may be maintained, managed, backed up, and made available to users over a network.

2. Purposes of Processing Your Personal Data

• To operate, monitor, analyze, and improve the services provided on our website and mobile application.
• To ensure the security and stability of the services on our website and mobile application.
• To provide core GPS tracking functionalities.
• To maintain user accounts and preferences.
• To analyze app usage for performance optimization.
• To provide location history features.
• To respond to user inquiries and provide support.

3. Personal Data We Collect

We collect and process the following categories of personal data that you provide to us during registration and through your use of the services on our website and mobile application:

• Account Information: Name, email address, username, password (hashed).
• Vehicle Location Data:
  • Precise location (GPS-based).
  • Coarse location (network-based).
  • Location history (collected and stored with your explicit consent).
• Device Information: Device identifiers (e.g., IMEI, Android ID, advertising ID), device model, operating system, IP address, network information.
• Usage Data: Information about how you use the app, such as features accessed, time spent in the app, and interactions with other users (if applicable).

4. Legal Basis for Processing Your Personal Data

Your personal data will be processed based on one or more of the following legal bases as outlined in the General Data Protection Regulation:

• Necessity for the performance of a contract (Article 6(1)(b) GDPR): This applies to data processing that is necessary to provide you with the services you requested when you registered and use our app (e.g., providing location tracking).
• Consent (Article 6(1)(a) GDPR): We will rely on your explicit consent for certain processing activities, such as the collection of precise location data when the app is in the background (if applicable) and the collection and storage of location history. You have the right to withdraw your consent at any time.
• Legitimate interests (Article 6(1)(f) GDPR): We may process your data based on our legitimate interests, such as improving our services, ensuring security, and analyzing app usage, provided that such interests are not overridden by your rights and freedoms.
• Compliance with a legal obligation (Article 6(1)(c) GDPR): We may process your data if necessary to comply with applicable laws and regulations.

5. Sharing of Your Personal Data

We may share your personal data with the following categories of third parties for the purposes described below:

• Service Providers: We may engage third-party service providers to assist us with various functions, such as:
  • Mapping and location services (e.g., Google Maps, PalGPS map): To provide mapping functionalities and location-based services. This may involve sharing location data.
  • Cloud storage providers: To store and maintain your data securely.
• Legal Authorities: We may disclose your personal data to law enforcement agencies, regulatory bodies, or other governmental authorities if required by law or legal process.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred to the acquiring entity. We will notify you if such a transfer occurs and your personal data becomes subject to a different privacy policy.

We do not share your personal data with any third parties for their own marketing or other unrelated purposes.

6. Personal Data and the Cloud

If you choose to store or process any personal data in the Cloud using PalGPS services, you acknowledge and agree that you are the data controller for such data and are responsible for complying with the GDPR and other applicable data protection laws regarding how that personal data is handled, processed, and stored in the Cloud. In such cases, PalGPS acts as a data processor and will process your data according to your instructions and our contractual agreements. We implement reasonable technical and organizational measures to ensure the security of your data in the Cloud, but you remain responsible for the data you choose to store there.

7. Safety of Your Personal Data

We are committed to protecting your personal data and have implemented reasonable technical and organizational security measures to prevent unauthorized access, disclosure, alteration, or destruction. These measures include:

• Running firewall software.
• Keeping our servers and software up to date with security patches.
• Implementing access controls to restrict access to personal data to authorized personnel only.
• Using encryption for data transmission and storage where appropriate.
• Regularly reviewing and updating our security practices.

While we strive to protect your personal data, please be aware that no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security. If you believe your account has been compromised or your personal data has been disclosed without authorization, please contact us immediately.

8. Keeping Your Personal Data

We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, as outlined in this Privacy Policy, or as required by applicable laws, regulations, or for the provision of our services. The retention period may vary depending on the type of data and the purpose of processing. For example:

• Account information will be retained as long as your account is active and for a reasonable period thereafter for customer service and legal purposes.
• Location data may be retained for six months to provide location history features, unless you choose to delete it earlier.
• Usage data may be retained for an aggregated and anonymized period for analytical purposes.

Once the retention period expires, your personal data will be securely deleted or anonymized.

9. Your Rights

In compliance with the GDPR, you have the following rights regarding your personal data:

• Right of access: You have the right to be informed of and request access to the personal data we collect and process about you.
• Right to rectification: You have the right to request that we correct or update your personal data if it is inaccurate or incomplete.
• Right to erasure ("right to be forgotten"): You have the right to request that we delete your personal data under certain circumstances.
• Right to restriction of processing: You have the right to request that we temporarily or permanently stop processing all or some of your personal data under certain circumstances.
• Right to object: You have the right to object, at any time, to the processing of your personal data for certain reasons, including direct marketing.
• Right to data portability: You have the right to request a copy of your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
• Right not to be subject to automated decision-making: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
• Right to withdraw consent: If we are processing your personal data based on your consent, you have the right to withdraw that consent at any time. The withdrawal of your consent will not affect the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, please contact us using the contact information provided below. We may require you to verify your identity before processing your request. You also have the right to lodge a complaint with a supervisory authority in your country if you believe that our processing of your personal data infringes the GDPR.

10. Cookies and Similar Technologies

Cookies are small text files that are placed on your device by websites that you visit. We use cookies and similar technologies to:

• Determine the size and habits of our audience on the website and mobile application.
• Authenticate users and maintain session information (Session Cookies).
• Remember user preferences and settings (Persistent Cookies).
• Understand how users interact with our website and mobile application to improve their experience (Persistent Cookies).

You can control cookies through your browser settings. However, disabling certain cookies may affect the functionality of our website and mobile application.

11. Children's Privacy

Our mobile application is not directed towards children under the age of 18. We do not knowingly collect personal data from children without verifiable parental consent. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete that information as soon as possible.

12. Changes to this Privacy Policy

We reserve the right to modify this Privacy Policy at any time without prior notice. We will post the updated Privacy Policy on our website and mobile application and will indicate the date of the latest revision. Your continued use of our services after the posting of a revised Privacy Policy constitutes your acceptance of the changes. We encourage you to review this Privacy Policy periodically for any updates.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: info@palgps.com
The owner of this website and the application is: PalGPS
VAT ID: 562510180
Registered office: Almadares Steet, Beit Sahour