Privacy Policy | autosterowniki

1. Data Controller

The controller of your personal data is Wojciech Sala, operating an unregistered business activity (działalność nierejestrowana) under the name autosterowniki, with the address: Karmelicka 11/6, 00-155 Warsaw, Poland.

Contact regarding personal data matters:

Email: kontakt@autosterowniki.pl
Phone: +48 516 157 681

2. Legal Basis and Purpose of Processing

We process your personal data on the following legal bases:

Performance of a contract (Art. 6(1)(b) GDPR): We process your data to perform the SRS module repair service, including: accepting the order, communication regarding the repair, return shipment of the module, and handling complaints.
Consent (Art. 6(1)(a) GDPR): Based on your voluntary consent, we process data collected by analytical cookies (Google Analytics) and marketing cookies (Facebook Pixel). You may withdraw your consent at any time.
Legitimate interest of the controller (Art. 6(1)(f) GDPR): We process your data for the purpose of pursuing or defending against claims, as well as for analytical and statistical purposes (improving service quality).
Legal obligation (Art. 6(1)(c) GDPR): We process your data to the extent required by tax and accounting regulations.

3. Scope of Collected Data

In connection with providing our services, we collect the following data:

Required data:

Phone number
Email address
First and last name
Delivery address or Paczkomat code (for return shipment)

Optional data (helps us with the repair):

Vehicle brand
Vehicle model
Vehicle year of manufacture

Technical data collected automatically:

IP address
Browser and operating system type
Date and time of page visits
Anonymous analytics data (Vercel Analytics – no cookies, no personal data)

4. Data Recipients

Your data may be shared with the following entities:

InPost S.A. – for the purpose of shipping via Paczkomat parcel lockers
Courier companies – if courier delivery is selected
Vercel Inc. – website hosting and anonymous traffic analytics (Vercel Analytics, no cookies)
Email service provider – for sending order confirmations
Google Ireland Limited – as part of the Google Analytics service (website traffic analysis)
Meta Platforms Ireland Limited – as part of the Facebook Pixel service (marketing purposes)

We do not transfer your data to third countries (outside the European Economic Area) or international organizations, unless it is necessary for the performance of the service and is carried out on the basis of appropriate safeguards (e.g., Standard Contractual Clauses). This applies in particular to Google Analytics and Facebook Pixel services, whose providers may process data on servers in the USA.

5. Data Retention Period

We retain your data for the following periods:

Data related to order fulfillment – for the duration of the contract and the warranty period (up to 1 month after repair)
Accounting and tax data – for 5 years from the end of the tax year in which the tax obligation arose
Data processed on the basis of legitimate interest – until an effective objection is raised or the purpose of processing ceases
Technical data (server logs) – for a maximum of 14 days

6. Your Rights

Under the GDPR, you have the following rights:

Right of access: You have the right to obtain confirmation as to whether we process your data, and access to it.
Right to rectification: You have the right to request correction of inaccurate data or completion of incomplete data.
Right to erasure: You have the right to request deletion of your data ("right to be forgotten") when there is no legal basis for further processing.
Right to restriction of processing: You have the right to request restriction of data processing in certain cases.
Right to data portability: You have the right to receive your data in a structured format and to transfer it to another controller.
Right to object: You have the right to object to the processing of data based on legitimate interest.

To exercise your rights, contact us at kontakt@autosterowniki.pl or by phone at +48 516 157 681.

7. Right to Lodge a Complaint

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office (UODO) in Poland.

Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland
www.uodo.gov.pl

8. Cookies

Our website uses cookies for the following purposes:

Essential: Cookies necessary for the proper functioning of the website (e.g., language preferences, remembering your cookie choice).
Analytical: Cookies used to analyze website traffic in order to improve service quality. We use Google Analytics – a tool provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google Analytics collects anonymous data about website visits, such as: pages viewed, visit duration, traffic source. Data may be transferred to Google servers in the USA based on Standard Contractual Clauses.
Marketing: Cookies used for marketing and remarketing purposes. We use Facebook Pixel – a tool provided by Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland). Facebook Pixel collects data about user interactions with the website to display personalized advertisements. Data may be transferred to Meta servers in the USA based on Standard Contractual Clauses.

Analytical and marketing cookies are only installed after obtaining your consent. You can change your preferences at any time by deleting cookies from your browser – on your next visit, you will be asked for consent again.

You can manage cookies in your browser settings. Disabling essential cookies may affect the functionality of the website.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or destruction. The website uses an encrypted SSL/TLS connection.

10. Changes to This Privacy Policy

We reserve the right to amend this privacy policy. We will inform you of any significant changes by updating the date on this page. We recommend checking this page regularly.

11. Voluntary Provision of Data

Providing personal data is voluntary but necessary for the performance of the repair service. Without the required data (phone number, email address, shipping details), we will not be able to fulfill the order.