We respect your privacy. Below we explain what data we collect through strefasamochodow.pl, why we collect it and what rights you have. This document fulfils the information obligation under Art. 13 GDPR.
1. Data controller
The controller of your personal data is [Nazwa firmy], registered office at [adres], NIP (tax ID) [NIP], KRS [KRS] (“we” or the “Controller”).
Contact regarding personal data: kontakt@strefasamochodow.pl, phone [TELEFON], or by post to our registered office. [If a data protection officer has been appointed: their contact details]
2. What data we collect
Form data: first name, phone number, email address, whether you are financing the car as a business or privately, your preferred contact method, the car model you are interested in and the content of your enquiry.
Data from further conversations: if you decide to prepare a financing or insurance application, we will ask for the data required by the financing institution or insurer, e.g. company details, identification data or income information. We will always tell you why it is needed.
Data collected automatically: IP address, device and browser information, and cookie data, as described in section 9.
3. Purposes and legal bases of processing
- Contacting you in response to your request and preparing a financing or insurance proposal: Art. 6(1)(b) GDPR (steps taken at your request before entering into a contract).
- Forwarding your enquiry to partners (banks, leasing companies, rental companies, insurers) to obtain offers: Art. 6(1)(b) GDPR [or consent, Art. 6(1)(a), to be decided by a lawyer].
- Information about new services (e.g. service, detailing), if you sign up for notifications: your consent, Art. 6(1)(a) GDPR and Art. 398 of the Polish Electronic Communications Law.
- Handling complaints, establishing and pursuing claims and defending against them: our legitimate interest, Art. 6(1)(f) GDPR.
- Compliance with legal obligations, e.g. accounting and tax: Art. 6(1)(c) GDPR.
- Website statistics and analytics: your consent given in the cookie banner, Art. 6(1)(a) GDPR.
4. Data recipients
Your data may be received by:
- financing partners and insurers to whom we send an enquiry for an offer on your behalf: [list of partners or a statement that the list is available on request]. If you enter into a contract with a partner, it becomes a separate controller of your data;
- IT service providers we use: hosting, email, CRM system, analytics tools [provider names], acting under data processing agreements;
- accounting and law firms, to the extent necessary for their services;
- public authorities, where required by law.
5. Transfers outside the EEA
As a rule, we do not transfer data outside the European Economic Area. If any provider processes data outside the EEA, this is done on the basis of a European Commission adequacy decision or standard contractual clauses. [to be verified once tools are selected]
6. How long we keep data
- data from an enquiry that did not result in a contract: for [12 months] from the last contact;
- data related to a concluded contract: for the period required by tax and accounting regulations and until the limitation period for claims expires;
- data processed on the basis of consent: until consent is withdrawn;
- data processed on the basis of legitimate interest: until an effective objection is raised.
7. Your rights
You have the right to:
- access your data and receive a copy;
- rectify your data;
- erase your data;
- restrict processing;
- data portability;
- object to processing based on legitimate interest;
- withdraw consent at any time, without affecting the lawfulness of processing before its withdrawal;
- lodge a complaint with the President of the Polish Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw).
To exercise your rights, write to kontakt@strefasamochodow.pl.
8. Voluntary provision of data and decisions
Providing data is voluntary, but without it we cannot contact you or prepare a proposal. We do not make decisions about you based solely on automated processing. Financing institutions may assess creditworthiness or risk according to their own rules, as described in their documents.
9. Cookies
The website uses cookies:
- necessary: for the website and forms to work properly; the website will not work without them;
- analytics: for anonymous visit statistics [tool name], only with your consent;
- marketing: [if used: to measure advertising effectiveness, only with consent].
You can change your consent at any time in the cookie settings available in the website footer or in your browser settings.
10. Changes to this privacy policy
We may update this policy, e.g. when regulations or tools change. The current version is always available on this page, and we will announce significant changes on the website.