Privacy policy

1. Data controller

The controller of your personal data is [controller details].

2. What data we collect and why

When you send an enquiry, we process your full name, phone number, e-mail address, country and, optionally, the content of your message and the car you asked about. We use this data to prepare an offer for the car you are interested in and to contact you about your enquiry.

3. Legal basis

We process your data on the basis of your consent (Article 6(1)(a) GDPR) and to take steps at your request before entering into a contract (Article 6(1)(b) GDPR). You can withdraw your consent at any time; this does not affect the lawfulness of processing carried out before the withdrawal.

4. Recipients of the data

We may share your data with authorised car dealers only to the extent needed to prepare your offer, and with IT service providers acting on our behalf (hosting, e-mail delivery, CRM system).

5. How long we keep the data

We keep the data until you withdraw your consent or until your enquiry has been handled, and after that for the period required by law or needed to establish, exercise or defend legal claims.

6. Your rights

You have the right to access your data, to have it rectified or erased, to restrict its processing, to data portability and to object to processing. You also have the right to lodge a complaint with a supervisory authority: in Poland this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych); you can also contact the supervisory authority in the EU or EEA country where you live or work.

7. Protection against abuse

To protect the form against abuse, we store a pseudonymised, salted hash of your IP address. It is used only to limit the number of enquiries sent from one connection. The legal basis is our legitimate interest (Article 6(1)(f) GDPR).

8. Cookies and browser storage

We store your choice in the cookie banner in your browser's storage (localStorage, key za-consent) so that we do not ask again, and your language choice in the za_locale cookie so that we show the site in the language you chose. Both are needed for the site to work as you expect. Other cookies and identifiers are stored only with your consent (section 9). You can change your consent by clearing the site data in your browser.

9. Analytics (Google Analytics 4 and PostHog)

We collect visit statistics with Google Analytics 4 (Google Ireland Ltd.) and PostHog (servers in the EU) only with your consent given in the cookie banner (Article 6(1)(a) GDPR). In that case these tools store a random identifier in your browser (the _ga and _ga_* cookies and the PostHog identifier) and record page views and events such as viewing a car or sending an enquiry. Google Analytics runs in consent mode: until you consent, the tag does not store cookies or identify you, and advertising data and ad personalisation stay switched off permanently; IP addresses are anonymised. Events do not contain personal data from the form (your name, phone number, e-mail address or message). Without your consent analytics is not started; you can withdraw your consent by clearing the site data in your browser.

10. Error reporting (Sentry)

To detect and fix failures, we send technical error reports to the Sentry service. The reports do not contain form data, cookies, headers or user data. Error reporting runs without consent, on the basis of our legitimate interest in keeping the site secure and working (Article 6(1)(f) GDPR).

11. Contact

For questions about your personal data, contact us at: [controller details].