Privacy policy

PRIVACY POLICY

Confidentiality and security are core values of Barcelona Smart Technologies, S.L.
(URBIOTICA) and as such we are committed to ensuring the privacy of our customers’
personal data at all times and to not gathering unnecessary data.
Below, we provide all the necessary information on our Privacy Policy relating to the personal data that we collect, setting out:

• Who the controller of your data is.
• What personal data we process.
• The purposes for which we collect the data we request from you.
• What the legal basis for their processing is.
• How long we keep them for.
• To which recipients your data are communicated.
• What your rights are.

Who is the controller of your data?

URBIOTICA is the controller of the data processed on this website:

Company name: Barcelona Smart Technologies, S.L. (URBIOTICA)
Tax identification code (CIF): B66849514
Address: Guitart 43-2º-1ª, 08014 Barcelona, Spain
Contact: [email protected]

For projects with U-Spot VISIO and U-Flow VISIO

• The organizations, bodies or companies that contract the U-Spot VISIO service and/or the U-Flow VISIO service are the controllers of the images collected by the video cameras in the
parking areas, given that the video cameras belong to the customers that contract the
services and the images are stored in their own servers.

• URBIOTICA is the processor of the images received from the customer’s cameras, which are necessary for the U-Spot VISIO and U-Flow VISIO services, given that these data are stored and processed in the servers of the customer or URBIOTICA (as established) and are deleted once processed and the next image has been received.

• In the case of U-Spot VISIO, the license plate and faces of natural persons are  nonymized to guarantee their privacy. Non -anonymized images are not stored because they are not required for the functioning of U-Spot VISIO.

• In the case of U-Flow VISIO, the captured images have a very low resolution, ensuring that neither people nor license plates can be identified.

• The organizations, bodies or companies that contract the U-Flow VISIO service and/or the U-Spot VISIO service are the controllers of the personal identification data of the staff that
manage the software.

• In this case, URBIOTICA is the processor of the data, given that the data are deleted when the
provision of the project ends.

For projects that use the ParkTime app

• Data are jointly processed with the ParkTime app by URBIOTICA and the organizations and
bodies that contract the app’s service.

• URBIOTICA is responsible for the management and maintenance of the users that use the
application, given that these data are independent of the project in which they are used.

• The organizations and bodies that contract the service control the data on the declaration of
occupancy of the parking spaces corresponding to the contracted project.

• For this function, URBIOTICA is the processor, given that the declaration data are deleted when the project is no longer provided.

For projects that use the ParkCtrl app

• The organizations, bodies or companies that contract the ParkCtrl app’s service are the controllers of the images collected with mobile devices in the parking areas, since the images are captured by the parking attendants using the mobile phones of the clients who contract
the services.

• URBIOTICA is the processor of the images received from mobile devices taken by the parking attendants. This data is stored and processed on URBIOTICA’s servers and is deleted
according to specifications when it is no longer necessary for the provision of the service.

• The organizations, bodies or companies that contract the ParkCtrl app service are the controllers of the personal identification data of the staff that manage the ParkCtrl app.

• In this case, URBIOTICA is the processor of the data, given that the data are deleted when the
provision of the project ends or is no longer necessary to comply with legal or contractual
requirements.

Who will look after your data at URBIOTICA?

URBIOTICA has appointed a Data Protection Officer to be responsible within the company for
compliance with data protection regulations.
You can contact URBIOTICA’s Data Protection Officer by:

• By email: [email protected]
• By mail: Guitart 43-2º-1ª, 08014 Barcelona, Spain

Who are the data subject groups?

The personal data processed are those of:

• People who have provided their data on the various forms on the website to make enquiries or seek information about our services and activities.

• People who have requested communications about URBIOTICA’s latest activities, services
and/or promotions.

• Users who visit the website.

• Users of the ParkTime application.

• Users of the parking lots with video cameras managed by U-Spot VISIO.

• Users of the parking lots with video cameras managed by U-Flow VISIO.

What personal data do we process?

Projects with U-Spot VISIO
The following types of data are processed with the U-Spot VISIO software:

• Data of natural persons who appear in the images:
    -Image of the natural person
    -License plate of the vehicle

• Identification data of the project administrators:
    -Full name
    -Email address (acts as identification credential)
    -Project in which the data are registered
    -Preferred language

Images with natural person data are anonymized on the servers as part of the parking space
identification process, in such a way that identification is not possible.
Under no circumstances does U-Spot VISIO collect data or monitor the location of users using
geolocation techniques.

For projects that use the ParkTime app or ParkCtrl app

The following types of data are processed with the application:

• Identification data of the citizens who use the service
    -Name
    -Email address (acts as identification credential)
    -Project in which the data are registered
    -Type of spaces to be used

• ParkCtrl: data from the citizens who use the regulated parking areas
    -License plate
     -Image of the vehicle

• Professional data for loading and unloading spaces
    -Company
    -Tax identification number (NIF) of the company or self-employed person
    -License plate of the vehicle

• Specific data for spaces reserved for people with reduced mobility
    -European parking card number

• Space occupancy data
    -Occupied space identifier
    -Period of use

• Activity registration data
    -Registration date

    -IP of the device (or identifier of the device)

Additionally, data required by third parties that provide services used by the application may be
collected:

• To show the current position on a street map using Google Maps.
    -Current position according to GPS
    -IP of the cell phone
    -Other data that Google Maps may collect
(https://policies.google.com/privacy?hl=en-US)

Under no circumstances does the ParkTime app collect data or monitor the location of users using geolocation techniques. It only saves the Point of Measure (POM) that identifies the space or group of spaces occupied when the user declares occupancy.

Projects with U-Flow VISIO

The following types of data are processed with the U-Flow VISIO software:

• Data of natural persons who appear in the images:
    -Low-resolution image of the natural person that does not enable their identification
    -Low-resolution image of the license plate of the vehicle that does not enable its
identification

• Identification data of the project administrators:
    -Full name
    -Email address (acts as identification credential)

    -Project in which the data are registered
    -Preferred language

What are the purposes and legal basis of the personal data we use?

At URBIOTICA we process personal data to meet information needs or respond to your requests.
These personal data are processed for the legitimate purposes set forth below.

• Response to requests for information or contact
At URBIOTICA we will use the contact details you have provided to respond to
your requests and queries with respect to our products and services, whether
they are submitted using the form available on the website, the online chat or
sent to the published email addresses.

Legal basis:
    -URBIOTICA’s legitimate interest for this data processing, taking into account the
reasonable expectations of the data subjects in receiving a response to their requests.
    -Consent freely given by the data subject upon sending their data using the form provided specifically for this purpose.

Processed data:
    -Identification data: Full name
    -Contact data: Contact email address and telephone number

• Commercial communications sent via any channel, including electronically
URBIOTICA will process the supplied contact details to inform and advise data subjects who
have expressly requested such information or advice. Accordingly, URBIOTICA will process the
personal data of the data subjects to send out informative newsletter about any events,activities, news, new developments and promotions related to URBIOTICA’s activity that may be of interest to them.

Legal basis:
    -The consent also considered to be expressly given in the case of sending data via the specific form where the users can request the reception of newsletters.

Processed data:
    -Identification data: Full name

    -Contact data: Email address

• Website visit analytics
URBIOTICA makes use of various techniques to collect information that can be used to obtain
analytical data on visits to and navigation of the pages of our websites.
These analytics are supported by the use of external services with their own privacy policy:
    -Google Analytics (https://policies.google.com/technologies/partner-sites)

It is important to highlight that, as their privacy policies indicate, these companies may
combine the navigation data with their internal records in order to use them for the personalization of advertisements, even without a registered account for their services.

Processed data:
    -Online identifiers, including identification cookies

    -Customer identifiers
    -Information contained in the HTTP headers of requests submitted via the internet such as the type of device, operating system and browser from which the pages are visited.
    -Information provided by the browser, such as the preferred language and time zone.
    -Geographic information discerned from the IP address
    -Website navigation data: pages visited
Further information at:  

https://policies.google.com/technologies/partner-sites
https://privacy.google.com/businesses/adsservices/

Legal basis:
o URBIOTICA’s legitimate to obtain analytical information about the use of the website by visitors.

In addition to the above, URBIOTICA may process personal data for other purposes. In this case, the data subject will receive the necessary information in relation to such processing and URBIOTICA will request consent where necessary.

For projects with U-Spot VISIO

The U-Spot VISIO software is used to provide a free parking space management service in public
parking lots. The application allows parking lot managers to check free spaces using an algorithm that analyses the data of the cameras installed in the parking lot.

U-Spot VISIO also has an optional control functionality that, if contracted, provides the managers of regulated parking lots with information about the limits set by the organization, and if the
established limit may involve a fine, the parking lot managers can send the relevant data to the authorities.

In general, the lawfulness of the processing is based on URBIOTICA’s legitimate interest in providing the contracted service.

Beyond this legitimate interest, the following conditions should be met in relation to the
processing of the data of the users of the parking lot.

• The processing is circumstantial but inevitable for the functioning of the U-Spot VISIO
software, which makes it possible to identify parking spaces in the public space where the
installation of other types of technology would not allow the service to be viable
• The personal data pertaining to faces and license plates are anonymized and under no circumstances are used for purposes other than the identification of free parking spaces.

Under no circumstances will the data for the identification of free spaces be used to gather information
on the habits of the users or to draw up behavior profiles of identifiable users.

For projects that use the ParkTime app

As joint processor
• URBIOTICA processes the data necessary for the purpose of managing the list of users of the
ParkTime app and retaining the data necessary for its use.
This processing is legitimate because it is necessary for the execution of an agreement to which
the data subject is a party. It is assumed that upon the user’s acceptance of the terms and conditions of use of the app, a contractual relationship is established between the two parties
even though use of the app is free of charge.
Through the integration of third-party services, the geolocation data will also be used to show the current location on a map. This purpose is based on the consent given by the user to activate this functionality.

• The organizations and bodies offering regulated parking spaces that contract the service use
the ParkTime app data with the purpose of enabling the people who control the regulated spaces to check that the spaces are occupied pursuant to the established regulations. Under
no circumstances are the data used for fining purposes.
In the case of public administrations and bodies, this processing is necessary to comply with a mission undertaken in the public interest or in the exercise of public powers granted to the
controller.
Likewise, the processing is legitimized by the fact that use of the ParkTime app is voluntary and based on the contractual nature of the relationship established between the two parties upon acceptance of the conditions of use of the app.
The data collected may also be used for the purpose of drawing up statistical studies on the occupancy of available spaces, as long as the data are duly anonymized and aggregated.

For projects with U-Flow VISIO

U-Flow VISIO software provides a parking space management service that makes it possible to verify
the occupancy of the parking area using an algorithm that analyses the data of the cameras installed
at the entrances and exits of the parking lot.
In general, the lawfulness of the processing is based on URBIOTICA’s legitimate interest in providing
the contracted service.
Beyond this legitimate interest, the following conditions should be met in relation to the
processing of the data of the users of the parking lot.

• The processing is circumstantial but inevitable for the functioning of the U-Flow VISIO
software, which makes it possible to identify vehicles at the entrances and exits of the regulated parking area, where the installation of other types of technology would greatly increase the cost of the service.
• The personal data, faces and license plates, of the images cannot be identified, and under no circumstances are used for purposes other than the verification of the occupancy of the regulated parking area.

Under no circumstances will the data to verify the occupancy be used to gather information on the habits of the users or to draw up behavior profiles of identifiable users.

For projects with ParkCtrl app

The ParkCtrl app allows for the management of regulated parking spaces, facilitating verification of
space occupancy in accordance with the regulations established by the organizations and companies
that manage these parking spaces.
In general, the lawfulness of the processing is based on URBIOTICA’s legitimate interest in providing
the contracted service.
Beyond this legitimate interest, the following conditions should be met in relation to the
processing of the data of the users of the parking lot.

• The processing is legitimate for the identification of vehicles in regulated spaces, where the installation of other types of technology would greatly increase the cost of the service.
• Personal data from license plates and captured images are not used for any purpose other than verifying that the spaces are occupied in accordance with established regulations.

In the case of public administrations and organizations, this processing is necessary for the fulfillment
of a task carried out in the public interest or in the exercise of public powers conferred on the data controller.

For how long will URBIOTICA retain the data?

In general, the data will be retained for as long as necessary to comply with the purpose for which they
were requested and to determine any possible liabilities that may arise from this purpose and from the
processing of the data.
This means that URBIOTICA will retain the personal data of the data subjects for as long as their
relationship with us lasts and, where applicable, for as long as necessary to formulate, exercise or
defend potential claims or to comply with any legal obligations arising from applicable legislation.
In the case of data collected by third parties such as Google, the terms established by them in their
respective privacy policies will be applicable along with the cookie persistence set forth in our Cookie
Policy.
Once this period has ended, URBIOTICA undertakes to stop processing all the personal data and to
destroy them, lock them or anonymize them insofar as this is possible for the purpose for which they
are retained.

For projects with U-Spot VISIO

“Clean” images received for processing are deleted during the main parking space identification
process, generating as a result an anonymized image that makes it impossible to recover the “clean
image”.
The anonymized images are not stored and only the latest image received is held in the memory. When
a new image is received, the previous one is deleted and there is no way of recovering it.

For projects that use the ParkTime app

The registration data of the users will be retained for as long as the user is registered in the service.
Once the user cancels their registration, their data are locked and no longer processed.
Occupancy declaration data will be retained for a maximum period of 1 year, or for the period
established at the time of contracting and deemed appropriate to respond to potential claims. Once this period has ended, these data are deleted or disassociated so that it is not possible to identify a specific user when used for statistical purposes.

For projects with U-Flow VISIO

Processed images are not stored; only the last image received is kept in memory. When a new image is received, the previous one is deleted and cannot be recovered

For projects that use the ParkCtrl app

Once the user cancels their registration, their data are locked and no longer processed.
Occupancy declaration data will be retained for a maximum period of 1 year, or for the period
established at the time of contracting and deemed appropriate to respond to potential claims. Once this period has ended, these data are deleted or disassociated so that it is not possible to identify a specific user when used for statistical purposes.
The images and license plates are kept for the minimum period necessary to address potential
complaints, which has been set at one year. After this period, this data will be deleted.

To whom are the data communicated?

Personal data will not be transferred to third parties, unless this is necessary to respond to a request pursuant to legislation in force or the data subject has granted their consent.
We may also pass your data on to domestic or international companies that provide us with services that are related to our ordinary and administrative activity as processors within the framework of the provision of services, such as providers of email services, web service hosting, server hosting, SaaS management application services and cloud-based file archiving.
The provision of these services may involve the processing of personal data by companies located in
countries outside the European Economic Area (international data transfers). However, this will only be
with countries that offer a suitable level of protection or that have issued us with Standard Contractual Clauses (SCCs) in accordance with the European Commission decision on transfers of data from processor in the EU to controllers based outside the EU.
In the case of bodies in the United States, we ensure that they are covered EU-U.S. Data Privacy
Framework in accordance with Commission Implementing Decision EU 2023/1795 of July 10, 2023. You
can consult the companies covered by this framework by clicking the link below:
https://www.dataprivacyframework.gov/s/participant-search
The list of service providers associated with URBIOTICA’s website is presented below:

In relation to the provider of the services that support the U-Spot VISIO and U-Flow VISIO software,
the ParkTime append the ParkCtrl App provided by an infrastructure provider with the IaaS model, in
this case Amazon’s AWS service, which acts as processor.

     -The service terms include the Data Protection Agreement (DPA):
https://aws.amazon.com/service-terms/.
    -The contracted services are located in the European Union and include compliance with the
GDPR (https://aws.amazon.com/compliance/gdpr-center/).

In relation to the providers of the map viewing service, offered in the ParkTime app, for the location of the current position within a map based on the functionality provided by Google Maps. The activation
of this functionality is voluntary and based on the consent granted upon allowing the Google Maps service to gain access to the geolocation data.
     -As Google indicates in its privacy policy (https://policies.google.com/privacy?hl=en), the
information collected includes the unique identifiers, the type of browser and its configuration, the type of device and its configuration, the operating system, information about the mobile network (such as the name of the operator and the telephone number) and the version number
of the application. It also collects information about the interaction of the applications, browsers and devices with our services, such as the IP address, crash reports, system activity and the date, time and referrer URL of the request.

To determine the location with various levels of precision, it uses the following tools:

o GPS
o IP address
o Sensor data of the device
o Information about things near your device, such as Wi-Fi access points, cell towers,
and Bluetooth-enabled devices.

The types of location data it collects and how long it stores them depend in part on the device and account settings.

What are the rights of the data subjects when they supply us with
their personal data?

At any time, the data subject can exercise their rights of access, rectification, deletion and portability of the personal data, and those of opposing and limiting the processing of the personal data processed by URBIOTICA.
These rights may be exercised free of charge by the data subject, and, where applicable, by the person representing them, by means of a written and signed
request, accompanied by a copy of their national identity card or equivalent document that certifies their identity, sent to:

• By email: [email protected]
• By mail: Guitart 43-2º-1ª, 08014 Barcelona, Spain

Representation is to be demonstrated through documentation in writing and accompanied by a copy
of the national identify card or equivalent document that certifies the aforesaid representation.
In addition to the aforementioned rights, the data subject shall have the right to
withdraw their consent at any time through the previously described procedure,
without the withdrawal affecting the lawfulness of any processing that took placeprior to this  withdrawal. URBIOTICA may continue processing the personal data of the data subject
to the extent that it is permitted by the applicable law or there remains any other legal basis that justifies it.
Specifically, in the case of the service for the sending of commercial communications, the data subject
has the right to withdraw at any time their consent for the sending of commercial communications by
notifying URBIOTICA that they do not wish to continue receiving them. To this end, the data subject may either withdraw their consent in the manner described in the previous section or click the link included in each commercial communication to be removed from the electronic commercial
communication mailing list.

URBIOTICA reminds the data subject that they have the right to file a complaint with
the relevant supervisory authority (Spanish Data Protection Agency).

Updating your data

In order for us to keep your data updated, it is important that you inform us whenever
there has been any change to them, Otherwise we shall not be responsible for their
accuracy or for the repercussions of their processing.

Security in the processing and safeguarding of data

URBIOTICA states that it has applied the technical and organizational measures necessary to ensure and prove that its processing is in accordance with the current legislation and the rights of the data
subjects are protected.
To this end, it has implemented a Personal Data Protection Management System to determine and
apply the technical and organizational means at its disposal to prevent the loss, misuse, alteration,
unauthorized access and theft of the data facilitated by the users, without prejudice to the fact no security measures on the internet are invulnerable.
Additionally, the Service Security Policy document describes all the technical and organizational
measures to ensure the security of the personal data provided in relation to ensuring the permanent
confidentiality, integrity, availability and resilience of the processing systems and services.
URBIOTICA has also implemented internal controls to regularly verify, evaluate and assess the efficacy
of the technical and organization measures implemented to ensure the security of the processing.

Use of cookies

This website, like the majority of the websites on the internet, uses cookies to improve the user’s experience.

Our Cookie Policy contains information about what cookies are, what type of cookies this website
uses, how you can deactivate cookies in your browser and how you can specifically deactivate the
installation of third-party cookies.
Please carefully read our Cookie Policy before continuing to navigate our website.

Social share buttons

Our website contains functionalities related to social media such as buttons to share the content of the website on social media. These functionalities may collect your IP address, the page you are visiting on our website and they may install a cookie in order to operate correctly. Both the functionalities and the widgets of the social networks may be hosted by third parties or directly on our website. Your interaction with them is governed by the privacy policy of the company that offers them.

Amendment to the Privacy Policy

URBIOTICA may amend its Privacy Policy in accordance with the applicable legislation at any time. In all circumstances, you will be duly notified of any change to the Privacy Policy so that you remain informed of the changes made in the processing of your personal data and, should this be required by the applicable regulations, so that the data subject may confirm their consent.