Privacy Policy
Digital Resources SRL — Park2Go Mobile Application
Last updated: April 15, 2026 Effective date: April 15, 2026
1. Introduction
Digital Resources SRL ("we," "us," or "our") operates the Park2Go mobile application ("App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our App.
By creating an account or using the App, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the App.
Digital Resources SRL is the data controller responsible for your Personal Data. We are committed to compliance with the Republic of Moldova's Law No. 195 on Personal Data Protection (2024) and the General Data Protection Regulation (GDPR) where applicable.
This Privacy Policy is available at https://park2go.io/privacy-policy and within the App under Settings → Privacy Policy.
2. Definitions
- "Customer" — a registered user who searches for and books parking spaces through the App.
- "Provider" — the owner or operator of a parking location listed on the App. The contract for the parking service is concluded directly between the Customer and the Provider; Digital Resources SRL operates the App and acts as the Provider's commercial agent, as described in our Terms and Conditions.
- "Booking" — a confirmed reservation of a parking space for a specified time period.
- "Personal Data" — any information that directly or indirectly identifies a natural person.
- "Service" — all features and functionality provided through the Park2Go App.
3. Data We Collect
3.1 Information You Provide Directly
| Data Category | Specific Data | Purpose |
|---|---|---|
| Account Information | Full name, email address, password (stored as a cryptographic hash) | Account creation and authentication |
| Profile Information | Phone number, country code, date of birth, profile photo | User identification, customer support, age verification |
| Vehicle Information | Make, model, year, license plate number, color, vehicle type | Booking management and parking access |
| Booking Details | Selected parking location, check-in/check-out times, notes | Service delivery and booking management |
| Reviews & Ratings | Star ratings, written comments, uploaded images | Community feedback and quality assurance |
| Customer Support Messages | Chat messages, attachments | Issue resolution and support |
3.2 Information Collected Automatically
| Data Category | Specific Data | Purpose |
|---|---|---|
| Location Data | GPS coordinates (when permission granted) | Displaying nearby parking on the map, navigation |
| Device Information | Device type, operating system, app version | Technical support, compatibility, analytics |
| Usage Data | Features accessed, search queries, interaction timestamps | Service improvement and troubleshooting |
| Authentication Tokens | Access and refresh tokens (stored securely on-device) | Maintaining your logged-in session |
3.3 Information from Third Parties
| Source | Data | Purpose |
|---|---|---|
| Google OAuth | Name, email address (from your Google account) | Simplified account creation and login |
| Payment Processor | Transaction status, payment confirmation (we do NOT store full card numbers) | Processing payments for bookings |
4. How We Use Your Data
We process your Personal Data for the following purposes and legal bases:
4.1 Contract Performance (Art. 6(1)(b) GDPR)
- Creating and managing your account
- Processing and managing parking bookings
- Facilitating check-in/check-out at parking locations
- Processing payments on behalf of the Provider and transmitting booking confirmations
- Communicating booking reminders and status updates
- Enforcing community standards (see our Terms and Conditions)
4.2 Legitimate Interest (Art. 6(1)(f) GDPR)
- Improving App functionality and user experience
- Preventing fraud, abuse, and unauthorized access
- Maintaining platform safety and enforcing our Terms of Service
- Aggregated analytics to improve parking availability data
4.3 Legal Obligation (Art. 6(1)(c) GDPR)
- Tax and financial record-keeping
- Responding to lawful requests from authorities
- Compliance with Moldova's Law No. 195 on Personal Data Protection
4.4 Consent (Art. 6(1)(a) GDPR)
- Sending promotional communications (you may opt out at any time)
- Using your precise location while the App is in use
- Biometric authentication (fingerprint/face recognition for app login)
- Push notifications (you may revoke this permission at any time through your device settings)
4.5 Automated Decision-Making Certain actions within the App may involve automated processing, such as automatic booking expiration (when a Customer does not check in within 30 minutes) and automated enforcement escalation for repeated violations (see our Terms and Conditions). These automated decisions are based on objective, clearly defined rules described in this policy. You have the right to request human review of any automated decision that significantly affects you by contacting us at contact@park2go.io.
5. Data Sharing and Disclosure
We share your Personal Data only in the following circumstances:
5.1 Between Customers and Providers When you make a booking, the Provider — who is your contracting party for the parking service — receives your name, vehicle information (make, model, license plate), and booking time. This is necessary to grant you access to the parking facility. Providers do NOT receive your email, phone number, date of birth, or payment details.
5.2 Service Providers (Data Processors) We engage third-party service providers who process data on our behalf under Data Processing Agreements (DPAs) compliant with GDPR Article 28:
- Cloud Hosting (AWS) — data storage and infrastructure
- Payment Processor — a licensed payment service provider that carries out the technical processing of payment transactions (PCI-DSS compliant; they operate under their own privacy policy, which will be linked at checkout). We do not store sensitive payment data.
- Mapbox — map display and geolocation services (receives anonymized location queries)
- Email Service Provider — transactional emails (booking confirmations, password resets)
- Google OAuth — authentication services
These processors may use sub-processors. A current list of sub-processors is available upon request at contact@park2go.io.
5.3 Legal Requirements We may disclose your data if required by law, in response to valid legal process, or to protect the rights, property, or safety of Digital Resources SRL, our users, or the public.
5.4 Business Transfers In the event of a merger, acquisition, or sale of all or a portion of our assets, your Personal Data may be transferred as part of that transaction. We will notify you via email or a prominent notice in the App prior to your data being subject to a different privacy policy.
We do NOT sell your Personal Data to third parties.
6. Data Storage and Security
6.1 Storage Location Your data is stored on servers within the European Union (AWS eu-north-1 region, Stockholm, Sweden).
6.2 Security Measures We implement appropriate technical and organizational measures to protect your data, including:
- Passwords hashed with Argon2 (industry-standard cryptographic hashing)
- Authentication tokens stored in secure device keychain (not in plain storage)
- HTTPS/TLS encryption for all data in transit
- Role-based access controls for internal systems
- Separate database architecture isolating user identity, booking, and parking data
6.3 Data Breach Notification In the event of a personal data breach, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, in accordance with GDPR Article 33. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify affected users without undue delay, providing details of the nature of the breach, the likely consequences, and the measures taken to address it.
7. Data Retention
We retain your Personal Data for as long as your account is active or as needed to provide you with our services. Specific retention periods:
| Data Type | Retention Period |
|---|---|
| Account data | Duration of account + 30 days after deletion request |
| Booking history | 3 years after booking completion (for legal/tax purposes) |
| Payment transaction records | 5 years (legal/tax obligations) |
| Customer support messages | 1 year after resolution |
| Reviews | Until deleted by you or your account is removed |
| Location data | Not stored on our servers; used only in real-time |
After the applicable retention period, data is permanently deleted or irreversibly anonymized.
8. Your Rights
Under Moldova's data protection law and the GDPR (where applicable), you have the following rights:
- Access — Request a copy of the Personal Data we hold about you.
- Rectification — Request correction of inaccurate or incomplete data.
- Erasure ("Right to be Forgotten") — Request deletion of your Personal Data, subject to legal retention obligations.
- Restriction — Request that we limit processing of your data in certain circumstances.
- Data Portability — Receive your data in a structured, machine-readable format.
- Objection — Object to processing based on legitimate interest.
- Withdraw Consent — Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
How to exercise your rights:
- In-app: Settings → Profile → Delete Account
- Email: contact@park2go.io
- We will respond to your request within 30 days.
Account Deletion: You may delete your account at any time through the App or by contacting us. Upon deletion, we will erase your Personal Data except where retention is required by law (see Section 7). We also provide account deletion through a web-based process accessible at https://park2go.io/delete-account.
9. Children's Privacy
The App is not intended for use by individuals under the age of 18. We do not knowingly collect Personal Data from children under 18. If we become aware that we have collected data from a child under 18, we will take steps to delete such information promptly. If you believe that we have inadvertently collected data from a child, please contact us at contact@park2go.io.
10. Bookings, Cancellations and Provider Obligations
The rules governing bookings, cancellations, refunds, customer no-shows, and the obligations of Providers are contractual matters and are set out in our Terms and Conditions, not in this Privacy Policy.
For clarity on how this affects your data: booking, cancellation, and refund records are processed as described in Sections 4 and 7 above, and refunds are made exclusively to the payment method you originally used.
11. Community Standards
The conduct expected of users, the enforcement measures that may be applied, and the appeals process are set out in our Terms and Conditions.
For the purposes of this Privacy Policy: where an enforcement measure is applied, we record the incident, the measure taken, and the supporting evidence, on the legal basis of our legitimate interest in maintaining platform safety (Section 4.2). Where a ban is applied, we retain the minimum identifiers necessary to give effect to it. You may request human review of any automated decision as described in Section 4.5.
12. Location Services
The App uses your device's GPS to show nearby parking locations on an interactive map. Location data is processed in real-time and is not stored on our servers. You may revoke location permission at any time through your device's settings, though this will limit the App's ability to show you nearby parking options.
13. Biometric Data
If you enable fingerprint or face recognition login, biometric data is processed entirely on your device using your device's built-in secure hardware (e.g., Android Keystore). We do not collect, transmit, or store your biometric data on our servers.
14. Cookies and Similar Technologies
The App does not use browser cookies. We use secure on-device storage (encrypted keychain for tokens, local storage for preferences) to maintain your session and settings.
15. International Data Transfers
Your data is primarily stored within the EU (Sweden). If we need to transfer data outside the EU/EEA, we will ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, or transfer to countries with an adequacy decision.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new Privacy Policy in the App and, where appropriate, sending you an email notification. Your continued use of the App after the effective date of the revised Privacy Policy constitutes your acceptance of the changes.
17. Platform Role and Liability
Park2Go's role, the allocation of responsibility between the Provider and Park2Go, and the handling of complaints and disputes are set out in our Terms and Conditions.
In summary: the parking service is provided by the Provider, who is the Customer's contracting party and is responsible for the condition, safety, and availability of the parking space. Digital Resources SRL operates the App and acts as the Provider's commercial agent. Incidents involving property damage, personal injury, theft, or any matter of a criminal nature must be reported to the competent national authorities by the affected party.
18. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:
Digital Resources SRL Email: contact@park2go.io Appeals: contact@park2go.io
Supervisory Authority: If you are not satisfied with our response, you have the right to lodge a complaint with the National Center for the Protection of Personal Data of the Republic of Moldova (https://datepersonale.md). If you are located in an EU/EEA member state, you may also lodge a complaint with the supervisory authority in the country where you reside or work.
19. Governing Law
This Privacy Policy is governed by the laws of the Republic of Moldova. Any disputes arising from or in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the courts of the Republic of Moldova.