The administrator of the website at www.pimeyes.com is PimEyes sp. z o.o., with its registered seat in Wrocław, ul. Rodła 36, 54-530 Wrocław, e-mail address: [email protected] ("PimEyes").

PimEyes wants to ensure that your privacy is protected and this privacy policy relates how uses and protects any information provided to PimEyes when you use this website. Any information you provide will only be used in accordance with this privacy statement.

This Privacy Policy governs the manner in which PimEyes collects, uses, maintains and discloses information collected from users (each, a "User") of the https://pimeyes.com/ website ("Site"). This privacy policy applies to the Site and all products and services offered by PimEyes.

Personal identification information (personal data)

We may collect personal identification information from Users in a variety of ways, including, but not limited to, when Users visit our site, register on the site fill out a form respond to a survey, subscribe to the newsletter and in connection with other activities, services, features or resources we make available on our Site.

Users may, however, visit our Site anonymously.

We process personal data on the following principles:

Who processes Users' personal data?

PimEyes is the Controller of personal data.

What personal data do we process, for what purpose and on what legal basis?

  1. PimEyes processes the following personal data of User’s

    • e-mail address:

      • to create and maintain a User's account (Article 6 Section 1b of GDPR)
      • to provide the service via the Site (Article 6 Section 1b of GDPR) - in accordance with the Terms and condiotions of use
      • for the purposes of communication in matters related to the service (Article 6 Section 1b and f of GDPR)
      • to respond to the questions - by contacting us via e-mail for purposes other than using the services we provide, the User agrees to the processing by us of provided personal data in order to respond to the sent question (Article 6 Section 1a of GDPR)
      • for marketing purposes - if the User subscribes to our newsletter and thus agrees to the processing of personal data for the indicated purpose (Article 6 Section 1a of GDPR)
      • in order for the User to use other functionalities available on the Site, e.g. to complete the survey or use the contact form - if the User decides to use a given functionality, and thus agrees to the processing of personal data for the indicated purpose (Article 6 Section 1a of GDPR)
      • for purposes related to the payment process - on the terms set out in point 3 below;
    • face image

      • in order to perform the ordered service, PimEyes processes the User's face images provided by the User - face search is carried out using specific technical processing relating to the physical characteristics of a natural person (biometric data processing), based on the explicit consent to the processing of data expressed by the User before using the service (Article 9 Section 2a of GDPR)
  2. data on payments for services:

    • In order to provide Users with secure online payments, Pimeyes uses the services of an authorized external entity, which is responsible for the sale of the PimEyes service as a so-called merchant of records (more on payment methods for services can be found in the Terms and conditions of use). This entity, indicated for the Site, is the controller of the User's personal data processed in order to implement the payment process. The abovementioned entity discloses to PimEyes information about the status of payment, i.e. whether the payment made by the User using the given email address was successful or not, as well as information about the country from which the payment was made. Pimeyes processes this data to register payment for the service and, as a result, to perform the service (Article 6 Section 1b of GDPR).
    • The payment servicing entity also provides Pimeyes with User identification data, i.e. name and surname. The indicated personal data of the User may be processed by PimEyes for the purposes of the legitimate interests pursued by PimEyes (Article 6 Section 1f of GDPR), such as establishing, exercising or defencing of legal claims and for billing purposes.
  3. PimEyes processes the following personal data of business clients and/or contractors (being natural persons) and of persons acting in the name of or on their behalf:

    • data of clients and/or contractors or potential clients and / or contractors - basic identification data, contact details, as well as data related to the business, including in particular name and surname, company name, tax identification number, REGON, telephone number, e-mail address, bank account number:

      • for the performance of a contract or in order to take steps prior to entering into a contract (Article 6 Section 1b of GDPR)
      • for compliance with a legal obligation to which the controller is subject (Article 6 Section 1c of GDPR), in particular to keep tax records, issue and store invoices,
      • for the purposes of the legitimate interests pursued by PimEyes (Article 6 Section 1f of GDPR), such as establishing, exercising or defencing of legal claims.
    • personal data of persons acting in the name of or on behalf of our client/contractor or potential client/contractor - basic identification data, contact details, in particular name and surname, company name, telephone number, e-mail address; in case the data has not been obtained directly from data subject, it has been obtained by PimEyes from PimEyes’s client or contractor, or from the Internet websites of such client/contractor or from publicly available registers, e.g. KRS and are processed by PimEyes:

      • for the performance of a contract or in order to take steps prior to entering into a contract with entity in the name of or on behalf of which the data subject is acting, including for contact purposses – based on the legitimate interests pursued by PimEyes (Article 6 Section 1f of GDPR)
  4. Data collected in Pimeyes’s data base

    Pimeyes, like any Internet search engines, performs a service for the User, using its database. „Fingerprints” of faces found in the Internet and thumbnails of face images are collected in this data base only for the purpose of further searches. When searching the Internet for the purpose described above, Pimeyes never looks for a specific person, it only collects pictures available in the Internet and the information about the websites where they were found. Pimeyes does not establish the identity of persons whose photos are included in the database (who are hereinafter referred to as "unidentified entities" in this Policy).

    Pimeyes processes the data collected in the database based on art. 6 clause 1 lit. f) GDPR - processing is necessary for the purposes of the legitimate interests pursued by the administrator, which is the creation of a database based on publicly available sources, for the purposes of future service provision.

Personal data received from a source other than the data subject:

In some cases, PimEyes can obtain personal data not directly form data subject but from another controller. It may happen in the cases described above, i.e. when Pimeyes receives the contact details of persons acting in the name of or on behalf of PimEyes’s client / contractor or potential client / contractor and when PimEyes receives the Users' data from the payment servicing entity.

In the case of data of unidentified entities, processed in the Pimeyes’s database referred to in point 4 above, the data comes from publicly available sources. When collecting such data, Pimeyes respects the special rules of each website visited by PimeyesBot web robots and downloads data only from the sites whose robots.txt allows it.

Do we need your consent for data processing?

In the situations indicated above, i.e. based on the specified legal grounds for processing, and for the indicated purposes, we may process personal data without asking for consent. In the indicated cases - it is the User's consent that is the basis for the processing of personal data. If we want to use the data for other purposes for which the basis of processing resulting from applicable law does not apply, we must ask for the consent. The consent is always voluntary, and if granted - personal data will be processed only for the purpose indicated in the consent. You have the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. The consent can be withdrawn by sending relevant information to the e-mail address: [email protected] or in another manner specified in the content of the consent, on the occasion of its granting or on the occasion of carrying out activities based on the given consent.

Am I obliged to provide my Personal information?

Providing personal data is voluntary, however if you do not provide all the required personal data, it may result in the inability to conclude and perform the contract / use our services and/or other functionalities available on the Site and the inability to answer your query.

Do we share personal data with third parties?

As a rule - we do not disclose personal data to anyone. Based on the data processing agreement (pursuant to Article 28 GDPR), we entrust personal data to entities whose services we use in connection with data processing, e.g. IT service providers, accounting services - to the extent necessary for the proper performance of these services.

The service providers we choose, guarantee appropriate data security measures, including storage of personal data on servers located in the territory of countries belonging to the European Economic Area (EEA). We also use IT services in the field of e-mail hosting, therefore we entrust, providing adequate security measures, processing of personal data also to a non-EEA entity (from India) - based on standard contractual clauses approved by the European Commission (Decision 2010/87 / EU ). Details on the transfer of your personal data to third countries, the safeguards applied to such transfer, as well as a copy of such safeguards can be obtained by contacting us using the contact details provided in this Privacy Policy.

We may share generic aggregated demographic information not linked to any personal identification information regarding visitors and users with our business partners, trusted affiliates and advertisers for the purposes outlined above.


Personal data will not be processed for the purpose of automated decision-making.

How long your personal data will be stored?

The retention of your Personal Information takes place in accordance with legal retention requirements. As a rule, personal data will be stored for the duration of the service and after its completion - for the period necessary to establish, exerce or defend of legal claims and for compliance with a legal obligation to which PimEyes is subject (e.g. invoice issue and storage) - in accordance with the law. However, in some cases, we may store data for shorter period:

  1. In the case of data processing solely to respond your question - personal data will be deleted (along with correspondence / email sent via the contact form) within 12 months of the response / last contact;
  2. In the case of (and if) data processing based on the consent - data will be processed no longer than until such consent is withdrawn.
  3. Face images along with the "fingerprint" of face of unregistered Users are stored for 48 hours from the moment the User sends the photo. We procede this way so that the User can return to the search results at the indicated time (48 hours), and not only use them once. The URL, pointing to each of the search performed, is valid for 48 hours and it is during this period that the search data is stored.
  4. Data of unidentified entities are stored for 2 years.

What are Your rights?

The person whose personal data we process, has the right to request from us: to access personal data and to the rectification (amendment), to erasure of data (in limited cases indicated in Article 17 GDPR), to restriction of processing of data (in limited cases indicated in Article 18 GDPR), to data portability (in limited cases indicated in Article 20 GDPR); you can exercise your rights by sending us relevant information to the e-mail address: [email protected]

The person whose personal data we process, has the right to lodge a complaint with a supervisory authority -i.e. i.e. the President of the Personal Data Protection Office, if he/she considers that the processing of personal data concerning him/her violates the provisions of GDPR.

Your right to object the processing:

The person whose personal data we process, has the right to object to the processing when: (i) there are grounds relating to his/hers particular situation, and (ii) data processing is based on the necessity for purposes of the legitimate interest pursued by PimEyes. In case personal data are processed for direct marketing purposes, the data subject has the right to object at any time to processing of personal data concerning him/her for such marketing, to the extent that it is related to such direct marketing. The objection can be raised by sending relevant information to the e-mail address: [email protected]

DPO contact data:

The person whose personal data we process, can contact our Data Protection Officer by usiing the following e-mail address: [email protected].

Non-personal identification information

We may collect non-personal identification information about Users whenever they interact with our Site. Non-personal identification information may include the browser name, the type of computer and technical information about Users means of connection to our Site, such as the operating system and the Internet service providers utilized and other similar information.

Web Browser Cookies

Our Site may use "cookies" to enhance User experience. User's web browser places cookies on their hard drive for record-keeping purposes and sometimes to track information about them. User may choose to set their web browser to refuse cookies, or to alert you when cookies are being sent. If they do so, note that some parts of the Site may not function properly.

How We Use Collected Information

PimEyes collects and uses Users non-personal information for the following purposes:

How We Protect Your Information

We adopt appropriate data collection, storage and processing practices and security measures to protect against unauthorized access, alteration, disclosure or destruction of your personal information, username, password, transaction information and data stored on our Site. Sensitive and private data exchange between the Site and its Users happens over a SSL secured communication channel


Ads appearing on our site may be delivered to Users by advertising partners, who may set cookies. These cookies allow the ad server to recognize your computer each time they send you an online advertisement to compile non personal identification information about you or others who use your computer. This information allows ad networks to, among other things, deliver targeted advertisements that they believe will be of most interest to you. This privacy policy does not cover the use of cookies by any advertisers.

Google AdSense

Some of the ads may be served by Google. Google's use of the DART cookie enables it to serve ads to Users based on their visit to our Site and other sites on the Internet. DART uses "non personally identifiable information" and does NOT track personal information about you, such as your name, email address, physical address, etc. You may opt out of the use of the DART cookie by visiting the Google ad and content network privacy policy at http://www.google.com/privacy_ads.html ,

Changes to This Privacy Policy

PimEyes has the discretion to update this privacy policy at any time. When we do, revise the updated date at the bottom of this page. You acknowledge and agree that it is your responsibility to review this privacy policy periodically and become aware of modifications.

Your Acceptance of These Terms

By using this Site, you signify your acceptance of this policy. If you do not agree to this policy, please do not use our Site. Your continued use of the Site following the posting of changes to this policy will be deemed your acceptance of those changes.

Contacting Us

If you have any questions about this Privacy Policy, the practices of this site, or your dealings with this site, please contact us at:



[email protected]