Privacy policy

Data controller

The controller of your personal data is Krzysztof Pszonka, conducting business at Zielna 5/3, 65-374 Zielona Góra. Tax ID (NIP): 9251818398 · REGON: 080356200. We have not appointed a Data Protection Officer — for matters related to data processing you can contact the controller directly.

Contact: krzysztof@pszonka.org, tel. +48 660 714 436.

Scope of data collected

We process data necessary to provide services and technical data related to using the website:

• first name and surname, phone number, e-mail address
• vehicle data, registration documents
• information voluntarily provided in the contact form or correspondence
• IP address, browser identifier (user-agent), server logs

Purpose of processing

Your data is processed only for clearly defined purposes:

• preparation of an offer and performance of services (registration, excise, insurance, translations)
• communication with the client and handling enquiries
• fulfilment of legal obligations (tax, registration)
• possible pursuit or defence of claims
• website traffic analysis (with expressed consent)

Legal basis

The legal basis for processing is Article 6(1) GDPR:

• point b — performance of a contract or steps prior to entering into it
• point c — compliance with a legal obligation incumbent on the controller
• point a — your consent (e.g. for analytics, marketing)
• point f — legitimate interest (website security, pursuit of claims)

Voluntariness of providing data

Providing personal data is voluntary, but in some cases necessary to conclude a contract or perform a service:

• contact data (name, phone, e-mail) — necessary for communication and service performance
• vehicle data and registration documents — required for registration and excise
• additional data — entirely voluntary
• failure to provide mandatory data may prevent service performance

Retention period

We store data for the period necessary to achieve the purpose for which it was collected:

• contractual data and correspondence — up to 6 years from service completion (limitation period for claims)
• tax data — 5 years from the end of the year in which the tax obligation arose
• data processed on the basis of consent — until it is withdrawn
• technical data (server logs) — up to 30 days, unless security circumstances require otherwise

Rights of the data subject

You have the following rights under the GDPR:

• right of access to data and its rectification
• right to erasure of data ("right to be forgotten")
• right to restriction of processing and data portability
• right to object to processing, including for marketing purposes
• right to withdraw consent at any time (without affecting the lawfulness of processing before withdrawal)
• right to lodge a complaint with the President of the Polish Personal Data Protection Office (UODO) — the complaint is free of charge

Recipients of data

Your data may be transferred to entities supporting our business:

• offices (registration, tax, customs)
• insurers, sworn translators, law firms
• postal and courier operators
• hosting service provider and IT companies maintaining the website
• in case of contact via WhatsApp — Meta Platforms Ireland Ltd (WhatsApp privacy policy)

Transfer of data to third countries

Your data may be transferred outside the European Economic Area (EEA), in particular to the United States in connection with the use of services:

• Meta Platforms, Inc. (WhatsApp) — komunikacja z klientami
• Google LLC (Google Analytics) — analiza ruchu na stronie (przy zgodzie)

The transfer is based on standard contractual clauses (SCC) approved by the European Commission and additional technical safeguards.

Cookies and analytics

The website uses cookies divided into the following categories:

• Necessary — required for the proper functioning of the website (e.g. remembering theme preference); do not require consent
• Analytical — Google Analytics with IP anonymisation enabled; allow analysis of website traffic; require consent
• Marketing — used to personalise communication; require consent

You can manage cookie settings in your browser at any time. For details, see your browser settings.

Data security

We apply appropriate technical and organisational measures to ensure the security of your personal data:

• encryption of data transmission (SSL/TLS protocol)
• limiting access to personal data to authorised persons only
• regular backups and software updates
• secure password and authentication policy

Automated decisions

We do not use automated decision-making, including profiling, within the meaning of Article 22 GDPR. Your data is not used to make automated decisions that could produce legal effects concerning you or similarly affect you.