Privacy Policy
Effective date: 21 August 2026
1. Data controller
The controller of personal data is MIPROM Piotr Romański, ul. Antonia Vivaldiego 78/7, 52-129 Wrocław, Poland, NIP 8862784423.
For privacy matters, contact: kontakt@citylightmanager.pl.
2. Scope
This policy describes how we process personal data when you use the Citylight Manager website and mobile app (the “Service”).
3. Categories of data
Depending on how you use the Service, we may process: account and sign-in data (an identifier, email or other access method, and session data); company and relationship data in the Service; order data and work documentation, including completion photos and related information; advertising-site location data, including address, map position, and related catalogue materials; device location data when you use map or field-task features; and technical data needed to operate the Service, including preferences, data stored temporarily on the device, and, on the website, essential cookies.
4. Purposes and legal bases
We process data to provide and operate the Service, including accounts, orders, locations, and work documentation — on the basis of a contract (Article 6(1)(b) GDPR).
We also process data to keep the Service secure, reliable, and improving — on the basis of our legitimate interests (Article 6(1)(f) GDPR).
Device features such as camera, location, or photo library are used when you grant permission (Article 6(1)(a) GDPR). You can withdraw permission in your device settings.
5. Global location database
Advertising-site locations added in the Service may be used to build and improve a global database of advertising locations, independently of any particular account. This concerns physical placement sites, not profiling or tracking people. Account data and documentation of specific jobs are not used for this purpose.
6. Recipients and sharing
We do not sell personal data or share it with third parties for their own purposes, including marketing, advertising, or resale of databases.
Data may be entrusted to service providers acting on our instructions, to the extent needed to run the Service. These include providers of hosting and authentication, email delivery, map services, and app distribution (app stores).
7. Transfers outside the EEA
Some providers may process data outside the European Economic Area. In those cases we use safeguards required by law, including standard contractual clauses.
8. Retention
We keep data for as long as you use the Service, and thereafter as required by law or to protect legal claims. Execution photos and PDF reports are kept according to the plan: 14 days on Free, 60 days on Pro, and a custom period on Enterprise. After retention expires we delete the files; the app still shows that a photo existed. After an account is deleted, we delete or anonymise personal data, except where the law requires us to keep it. Locations included in the global location database may remain in a form detached from the account.
9. Account deletion
You can delete your account in the app profile settings, or by requesting deletion at kontakt@citylightmanager.pl.
10. Your rights
You have the right to access, rectify, erase, restrict, and port your data, and — where the law provides — to object to processing. Where processing is based on consent, you may withdraw it at any time, without affecting processing that took place before withdrawal. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO) in Poland, or with another competent supervisory authority.
You can exercise these rights in the app or by contacting us at kontakt@citylightmanager.pl.
11. Cookies
The website uses only cookies that are necessary for it to work, including remembering language preference. The mobile app does not use cookies.
12. Children
The Service is intended for business use and is not directed at people under 16.
13. Changes
This policy may be updated. The current version is published on the website and in the app.
