Privacy policy
The Privacy Policy in version 2.0 is valid from February 21, 20125.
§ 1 General information
1 It is informative, is not a contract or regulations.
2. All expressions and words saved using a capital letter (e.g. website, customer, etc.) should be understood in accordance with the content of the website regulations.
3. In the event of any discrepancy between this Privacy Policy and the consent to the processing of personal data provided by a natural person, the legal basis for determining the scope of the administrator's actions are voluntarily expressed consent or legal provisions that apply in a given actual situation.
§ 2 Personal data Administrator
3 540768941 (hereinafter: Administrator).
2. In all issues related to the protection of personal data, we encourage you to contact the above-mentioned address or via the e-mail address: [Email Protected]
3. To the indicated address, you can also send a request to provide information on what personal data we have about you and for what purposes we process it.
4. The Administrator informs that he stores correspondence for statistical purposes and to improve the GDPR assistance system, as well as in the scope of complaints and made on the basis of applications of possible decisions on administrative interventions in the indicated customer account. Addresses and data collected in this way will not be used for communication for the purpose other than the implementation of the application, in particular they will not be used for marketing purposes and transferred to third parties.
5. In the case of contact with the Administrator in order to perform specific activities (e.g. submitting a complaint), the Administrator may again ask the person to provide data, including personal data, e.g. in the form of a name, surname, address of residence, e-mail address, to confirm his identity and enable the return contact in a given case and perform the requested action. Providing this data is not mandatory, but may be necessary to perform activities or obtain information that interests a person.
6. If you have agreed to use cookies (cookies) by us, data administrators obtained on the basis of your online activity may also be our trusted partners.
§ 3 obtaining data and the purpose of their processing
1. We process personal data in accordance with the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and in the case of the free flow of such data and repealing Directive 95/46/EC, (hereinafter: GDPR) and other currently applicable data, during the processing of specific data, the provisions of the law for the protection of personal data.
2. According to the content of the indicated legal acts, information about the identified or identified physical person is considered personal data. Identified a natural person is a person who can be directly or indirectly identified, in particular on the basis of an identifier such as name, identification number, location data, internet identifier or one or several special factors specifying physical, physiological, genetic, mental, economic, cultural, cultural or social identity of a natural person.
3. We ensure that the data obtained from you is confidential, secure and processed only when necessary. We process data in accordance with the law, in a reliable and transparent manner for the data subject. We process only such data and only with such content that is necessary because of the legitimate purpose, i.e. the reason for processing. Personal data is collected with due diligence and properly protected against access to them by unauthorized persons. We use appropriate and adequate security measures and a state of technical knowledge to protect personal data against accidental loss and unauthorized access, use, change or disclosure. We store personal data in a way that allows you to identify the data subject for a period of no longer than necessary for the purposes for which these data is processed.
4. The Administrator obtains information about personal data as follows:
- by ordering a service on the Website by the Customer;
- by registering a customer account;
- through the voluntary subscription to the newsletter service;
- by voluntarily entered in the e-mail, contact form or in the Chata window;
- by sending a complaint, application, inquiries or a letter of a different nature;
- by voluntarily entered in an e-mail sent in connection with the desire to establish cooperation;
- by posting product opinions;
- through cookies, pixels or similar internet technologies.
5.
18
7. Each time the scope of the required data to conclude an appropriate contract is previously indicated on the Website (we mark data whose provision is necessary to conclude a contract/use a specific functionality) as part of other communication channels with a visitor or a customer or in the Regulations. The consequence of not personal data may be the inability to effectively use the functionality of the website, e.g. the inability to place an order.
8. Your personal data is obtained by the Administrator for the following purpose:
| Processing purpose | Legal basis | Legitimate purpose, if it exists |
|---|---|---|
| Conducting statistics. | art. 6 para. 1 lit. F GDPR. | Having information about the statistics of our activities, which allows us to improve our business. |
| Conducting marketing activities of own products and services without using electronic means of communication. | art. 6 para. 1 lit. F GDPR. | Conducting marketing activities promoting conducted activities. |
| Conducting marketing activities of own products and services using electronic means of communication, including profiling. | art. 6 para. 1 lit. f GDPR, where these activities, due to other applicable provisions, are carried out only on the basis of consents (Article 6 (1) lit. and GDPR). | Conducting marketing activities promoting operations using e-mail addresses. Presenting ads, adapting discounts and promotions. |
| Placing opinions on the website. | art. 6 para. 1 lit. And the GDPR. | Product satisfaction test. |
| Service of applications managed using chat, contact form, e-mails, complaints, other applications. | art. 6 para. 1 lit. And the GDPR; art. 6 para. 1 lit. C GDPR. | Providing response to applications and queries directed using a chat or in a different form, including storage of sensitive applications and answers given to maintain the accountability principle. Service of applications, response to consumer complaints. Plowing claims, including from third parties, defense by them. |
| Customer account service. | art. 6 para. 1 lit. B GDPR. | Conclusion and implementation of a contract for the provision of services (account) or taking action at the request of a future customer before its conclusion. |
| Conclusion and implementation of the service contract | art. 6 para. 1 lit. B GDPR. | Conclusion and implementation of a service contract or taking action at the request of a future customer before its conclusion. |
| Archiving of sales documents. | art. 6 para. 1 lit. C GDPR. | Fulfillment of legal obligations arising from provisions, e.g. tax and accounting, especially in the case of paid contracts. |
9. In the case of an adult customer or adult person visiting the website, with his additional consent, personal data may also be processed in order to present, create, grant, and realize the ads dedicated to a given client, offers or promotions (discounts) regarding the services of administrator and his partners, as well as possible adapted to his preferences (profiling) as a result Clear legal effects or in a similar way to significantly influence him, e.g. through a short -term discount dedicated only to such a person on a specific product that he recently viewed on our website (an option not available for people who are not adults or are adults but did not agree to such action).
10. Newsletter. If you want to sign up for our newsletter, you must provide us with your e-mail address via the newsletter registration form. Providing data is voluntary, but necessary to use the newsletter service. The data provided to us during the entry to the newsletter is used to send a newsletter, in which we inform about the company's activities, current collection, promotions and discounts. The legal basis for processing in this situation is your voluntary consent expressed when signing up to the newsletter. In this case, your data is processed to cyclically send the newsletter, and the basis for processing is art. 6 para. 1 lit. And the GDPR, or your consent resulting from the desire to receive a service. The data will be processed for the time of the newsletter functioning, unless you give up receiving it before, which will permanently delete your data from the database. In addition, you can rectify your data saved in the newsletter database at any time, as well as request their deletion by giving up receiving the newsletter. You also have the right to transfer data contained in art. 20 GDPR. The newsletter database is properly secured by the administrator. The newsletter as a database is supported by an external entity. The sent email messages contain links to hidden pictures (so -called tracking pixel). In addition to its basic function, which is counting the e -mail openings, it is also optionally used to identify the client and conduct marketing activities.
11. E-mail contact, contact form, chat. By contacting us via e-mail and contact form, you provide us with your e-mail address as a message sender address. In addition, you can also include other personal data in the content of the message, this also applies to the chat. Providing data is voluntary, but necessary to make contact with us. In this case, your data is processed to contact you, and the basis for processing is art. 6 para. 1 lit. And the GDPR, or your consent resulting from the desire to contact us. The legal basis for processing after contact is justified in the form of archiving correspondence for internal needs (Article 6 (1) (C of the GDPR). The content of correspondence may be subject to archiving and we are not able to clearly determine when it will be removed, however, it will be a deadline not longer than 5 years. You have the right to demand the presentation of the history of correspondence you conducted with us (if it was archived), as well as demand its removal, unless its archiving is justified due to our superior interests.
12. Opinions. To add your opinion about the service, you must fill out the form.
In this case, your data is processed to enable the opinion, and the basis for processing is art. 6 para. 1 lit. And the GDPR, or your consent resulting from the desire to post your entry on our website.
The data will be processed during the operation of the opinion on the website, unless you ask you to delete your opinion before, which will delete your data related to the database's opinion.
You can correct your data at any time in the opinion, as well as request their deletion. You also have the right to transfer data contained in art. 20 GDPR.
13. Customer account. By setting up a customer account on our website, you provide us with your e-mail address and the name user is voluntary, but necessary to effectively register the customer's account. Then in the customer's panel you can also provide your name, address details and vehicle data (registration number and VIN), and in the case of entrepreneurs also the NIP number and company. In this case, your data is processed to keep a customer account, and the basis for processing is art. 6 para. 1 lit. B GDPR. The data will be processed for the time of having a customer account, unless you ask you to delete it before, which will delete your data from the database. At any time, you can rectify your data assigned to the customer's account, as well as request their deletion. You also have the right to transfer data contained in art. 20 GDPR. As part of creating a customer account, you can - but you do not have to - agree to subscribe to the newsletter service.
§ 4 Categories of personal data
The personal data administrator may process the following categories of personal data:
- Personal data provided in the form when registering a customer account, placing orders on the Website, in particular: e-mail address, name and surname, telephone number, tax identification number [NIP] username, vehicle data (registration number and VIN);
- Personal data supplemented by the User when using the customer's account, in particular: name and surname; e-mail address; residence address [street, house number, premises, postal code, town, country], vehicle data (registration number and VIN), and in the case of customers who are not consumers additionally the company name and tax identification number [NIP];
- Personal data necessary to place an order, in particular: name and surname; e-mail address; contact phone number; residence address [street, house number, premises, postal code, town, country], vehicle data (registration number and VIN), and in the case of customers who are not consumers additionally the company name and tax identification number [NIP];
- Personal data provided to use the newsletter, provided when using the chat, posting and sent via e-mail; or forwarded when submitting complaints, complaints or applications, in particular: name and surname; e-mail address; contact phone number; address [street, house number, premises, postal code, town, country], bank account number;
- Personal data provided to take part in competitions/promotional campaigns: name and surname; e-mail address; contact phone number; residence address [street, house number, premises, zip code, town, country];
- Other data, in particular obtained on the basis of customer activity on the Internet, including obtained via the website or other communication channels with the client, using cookies and similar technologies.
§ 5 recipient of personal data
1 According to our knowledge, all entities to whom we entrust the processing of personal data guarantee the use of appropriate protection measures and security of personal data required by law.
2. Your personal data of the Administrator may transfer:
- to state authorities or other entities authorized on the basis of legal provisions, in order to perform obligations on us;
- Administrator partners may participate in the processing of personal data to a limited extent, in particular who technically help to efficiently run a website (e.g. they support us in sending e-mails, and in the case of advertising activities-also in marketing campaigns), hosting service providers or ICT services, entities supporting electronic payments or payment card payments on the website, companies that service software, support the administrator in marketing campaigns as well as providers of legal and advisory services as well as external accounting;
- In addition, we can share fully anonymized data (those that cannot identify you) to the entities we cooperate with.
3. As part of marketing (advertising) activities, the Administrator uses the services of third parties that use cookies, pixels or marketing functions similar to cookies on the website. The catalog of these entities has been specified in detail in § 8 of this policy.
4. Due to the nature of the Services Administrator on the Website, the Administrator transfers your data to the relevant public administration bodies or other entity offering the vignette of the country where you want to buy a vignette. This process of transferring personal data is necessary for the implementation of the service contract. This applies in particular to information about the vehicle (registration number and VIN). The basis for transferring the client's personal data in such a situation is art. 6 para. 1 letter B of the GDPR.
§ 6 Archiving of personal data
1 After this period, the Administrator will safely delete your personal data.
2. We store the data for the periods indicated below:
| Data related to the sales procedure. | 10 years |
|---|---|
| Data for marketing purposes. | In the case of data processing based on consent - until it is withdrawn. In the case of data processing on the basis of a legitimate purpose - until the objection is raised. |
| Data provided using chat, e-mail, contact form. | For a period of 3 years to maintain the accountability principle. |
| Data contained in opinions. | In the case of data processing based on consent - until it is withdrawn. In the case of data processing on the basis of a legitimate purpose - until the objection is raised. |
| Personal data related to cookies and similar functions. | Until these files are deleted using the page / browser / device settings (with the deletion of files is not always the same as the removal of personal data obtained through these files - then personal data will be deleted until the objection is raised). |
| Data provided during the complaint procedure and other procedures related to customer claims. | 6 years. |
| Other data category (except for data from cookies, about which more in our cookies policy). | 5 years. |
3. In each case, personal data will also be stored if the law (e.g. accountants or tax) will oblige the Administrator to process them; We will store personal data longer in the event that the customer has any claims against the administrator, in order to pursue claims by the Administrator, or to claim or defend against third party claims, for their limitation period specified in the law, in particular the Civil Code.
4. In depending on the scope of personal data and the purposes of their processing, they may be stored for different periods. In each case, a longer period of storage of personal data decides.
§ 7 powers, access and update of personal data, complaints
Pursuant to art. 15 GDPR You have the right to obtain personal data from the administrator whether your personal data is processed.
If the administrator processes your personal data, then you have the right to:
- access to personal data;
- obtaining information on the purposes of processing, categories processed personal data, about recipients or categories of recipients of this data, planned storage period of your data or about the criteria for determining this period, about the rights of your person on the basis of the GDPR and about the right to lodge a complaint to the supervisory authority, with the source of these data, with automated decision making, including profiling, including with the transfer of this data outside the European Union;
- obtaining copies of your personal data.
In addition, you may ask you to correct your personal data (Article 16 GDPR), delete personal data (Article 17 GDPR), oppose the processing of personal data (Article 21 GDPR) and, if technically feasible, ask for the transfer of shared personal data of another organization (Article 20 of the GDPR).
In connection with the right to be forgotten, the Administrator will update or delete your data, unless he has the legal obligation to preserve them for the purposes of conducting business or maintaining compliance with the law. In some cases, you have the right to demand limiting the processing of personal data (Article 18 of the GDPR). You can also contact the Administrator in case of reservations about how to collect, store or use personal data.
The administrator is immediately trying to consider all demands regarding the above -mentioned operations on your personal data, but no later than within 30 days of receipt of the request. Due to the complicated nature of the request, the Administrator has the right to consider your demands within a period exceeding 30 days, which the user will inform before.
The administrator strives to final examination of complaints, but if you are still dissatisfied with the answer, you can file a complaint to the supervisory authority dealing with the protection of personal data of the local data protection body. In Poland, the supervisory body within the meaning of the GDPR is the President of the Office for Personal Data Protection.
§ 8 The processing of personal data in an automated manner, cookies policy
1. Our website, like almost all other websites, uses cookies, i.e. cookies. Cookie policy applies to both the clients of the website and people visiting the website, i.e. users who review the content of the website but do not make purchases.
2. Cookie policy is a document that is an integral part of this Privacy Policy. The content of Cookies is here.
3. The website also uses functionality similar to cookies. Therefore, individual provisions of cookie policy should also be referred to these technologies accordingly.
4. Selected cookies process your personal data. The processing of personal data from cookies or similar technologies on our website is carried out for the purposes of ensuring the functioning of the website, adapting the website to preferences to visitors and customer, or analytical goals. Processing is based on our legitimate interest. The legal basis for the processing of personal data for advertising purposes will be your additional consent, expressed by making a choice and selecting a checkbox during the process of consent to cookies.
5. When a visitor uses the website, cookies are used to identify their browser or device - cookies collect various types of information that, as a rule, does not constitute personal data. Some information, depending on their content and method of use, may, however, be associated with a specific person-assigning certain behaviors to a specific visitor or client, e.g. by linking them to the data provided during the account registration on the website or a specific email address-and thus be considered personal data.
6. In relation to information collected by cookies, which may be associated with a specific person, the provisions of the Privacy Policy of the Website relate to personal data, in particular regarding the rights of the data subject, apply.
7. The dormitory uses profiling. Thanks to cookies used on the website, it is possible for the Administrator to get to know the preferences of the visitor/customer - e.g. by analyzing how often he visits the website and whether and what products he buys. The analysis of internet behavior helps better understand the customs and expectations of customers and visitors and adapt to their needs and interests. Thanks to this technology, it is possible to present to visitors ads tailored to their needs and interests and prepare for adult visitors who agreed, better promotions and surprises.
§ 9 Changes in the Privacy Policy
1. These Privacy Policy Rules 2.0. They apply from 21.02.2025.
The Administrator declares that he has the right to change this document for important reasons, including:
- changes to applicable regulations, in particular in the field of GDPR, the law of electronic communication, electronic services and regulating consumer rights, influencing the rights and obligations of the administrator or the rights and obligations of the data subject;
- Development of functionality or electronic services caused by the progress of internet technology, including the implementation of new IT, technological or technical solutions on the website, affecting the scope of this Privacy Policy.
3. The Administrator undertakes to inform users about any changes in advance, allowing you to read the content of the changed document, e.g. by placing the text of a uniform privacy policy on the main website of the website.
4. In the case of users using the newsletter function, if the Administrator makes fundamental changes in the content of the privacy policy, then he will inform users about them using e -mail. In the event of any objections to changing the policy, the user has the right to stop using the newsletter by sending a request to write from the newsletter or by asking to delete his personal data.
Previous version of the Privacy Policy:
Privacy policy 1.0 in force from 01.01.2024. until 20.02.2025