Last updated: May 28, 2026
Privacy policy
Altivo (altivo.pro) is a tool for designing long sections of utility networks. Below we explain what data we process, why, and how we honour your rights under the GDPR.
Data controller
The controller of your personal data is KBM Projekt Bartosz Kiliński, ul. Szybowcowa 16/65, 54-130 Wrocław, Poland, VAT ID PL8992617267. For matters concerning personal data, contact us at [email protected] or +48 508 226 216.
What data we process
Account: first name, last name (or company name), email, hashed password, interface language. Billing: data needed to issue proof of purchase and payment history (amounts, dates, status). Payment card details are processed solely by the payment provider and are not shared with us. Projects: data you enter in the app (points, profiles, settings). Technical: logs (IP address, browser type, timestamps) and cookies required to run the service. Providing your data is voluntary but necessary to create an account, use paid features, and handle payments — without it we cannot provide the service.
Purposes and legal bases
Providing the service and managing your account — Art. 6(1)(b) GDPR (performance of a contract). Handling payments and billing and issuing proof of purchase — Art. 6(1)(b) and (c) GDPR (legal obligation). Ensuring security and improving the service — Art. 6(1)(f) GDPR (legitimate interest). Handling complaints and pursuing claims — Art. 6(1)(f) GDPR. Analytics and traffic measurement (Google Analytics) — Art. 6(1)(a) GDPR (your consent given in the cookie banner). We do not use your data for advertising profiling, nor do we make decisions about you based solely on automated processing that produces legal effects (Art. 22 GDPR).
Data recipients
We entrust data only to trusted providers acting on our behalf under processing agreements, in line with the GDPR: Hetzner Online GmbH — hosting and database (Germany/EU); Stripe Payments Europe Ltd. — payment processing; Brevo (Sendinblue SAS) — transactional email (France/EU); wFirma — issuing invoices and proof of purchase; Google Ireland Ltd. / Google LLC — traffic statistics (Google Analytics and Google Tag Manager); CookieYes Limited — cookie banner and consent management. Some of these providers (including Google) may process data in the USA. Such transfers take place under the European Commission's adequacy decision (EU-U.S. Data Privacy Framework) for certified entities, or under Standard Contractual Clauses approved by the European Commission.
Retention period
We keep account data for as long as you hold an account. After deletion, we retain billing data for the period required by tax law (generally 5 years) and delete or anonymise the rest.
Your rights
You have the right to access, rectify, erase, restrict and port your data, and to object to processing. To exercise these rights, email us at the contact below — we will respond within 30 days. You also have the right to lodge a complaint with a supervisory authority — in Poland this is the President of the Personal Data Protection Office (uodo.gov.pl).
Cookies
We use cookies strictly necessary to run the service (e.g. keeping you signed in) — these do not require consent. If we use analytics tools, the related cookies are set only after you give consent in the cookie banner; you can withdraw consent at any time in your browser settings. Most browsers let you block and delete cookies.
Security
We apply appropriate technical and organisational measures to protect your data: encrypted connections (HTTPS), password hashing, and restricted access to personal data.
Changes to this policy
We may update this policy. We will announce material changes in advance by publishing the new version on this page together with the update date.
Questions? Reach us at [email protected]