Privacy Policy + Cookies

1. This Privacy Policy defines the manner of collecting, processing and storing personal data necessary for the provision of electronic services via the website at www.autachf.pl (hereinafter: the Website).

2. The controller of Users' personal data is Kacper Łysiak, conducting business activity under the name AUTA XYZ Kacper Łysiak at: ul. Spokojna 1013/18, 08-400 Sulbiny (hereinafter: Controller).

3. Personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter: GDPR).

4. Data collected by the Controller will be:

• processed in accordance with the law,
• processed for specified explicit purposes and not further processed in a manner incompatible with those purposes,
• substantively correct and adequate in relation to the purposes for which they are processed,
• stored for no longer than is necessary to achieve the processing purpose.

1. The Controller processes personal data necessary for the provision and development of services offered via the Website and its individual functionalities.

2. Personal data will be processed for the following purposes:

• account registration, User identity verification and performance of the electronic services agreement in accordance with the Act of 18 July 2002 on the provision of electronic services, in particular by ensuring the possibility of using the User account – based on acceptance of the Terms and Conditions (Article 6(1)(b) GDPR);
• communication with the User in order to provide necessary information and build positive and reliable relationships with them, which constitutes the Controller's legitimate interest (Article 6(1)(f) GDPR);
• promoting the Controller's own products and/or services and those of its Partners by sending marketing information electronically (newsletter) if the User has consented to receiving such notifications via email (Article 6(1)(a) GDPR);
• providing access to information about news from the industry directly related to the Controller's activities, if the User has consented to receiving such notifications via email (Article 6(1)(a) GDPR),
• for analytical and statistical purposes based on the Controller's legitimate interest in verifying User activity and preferences to optimize services and products and the Website's functionalities (Article 6(1)(f) GDPR);
• possible establishment, investigation of claims or defense against them based on the Controller's legitimate interest in protecting its rights (Article 6(1)(f) GDPR).

3. In each of the cases listed above (section 2), providing data is voluntary, but necessary to conclude an agreement or use other Website functionalities.

1. Personal data will be processed for the period during which a person remains an active User of the Website (has a User account), and after this time for the period necessary to maintain compliance with legal provisions, pursue or defend against possible claims, but no longer than 3 years from the date of termination of the electronic services agreement.

2. Data processed on the basis of consent will be processed until the given consent is withdrawn, with the proviso that withdrawal of this consent does not affect the lawfulness of data processing carried out before such withdrawal.

1. Personal data, depending on the processing purpose, may be disclosed to:

• entities related to the Controller
• entities cooperating with the Controller,
• subcontractors, in particular entities providing and operating selected IT systems and solutions,
• entities handling online payments,
• entities providing courier and postal services,
• law firms.

2. Personal data processed by the Controller will not/will be transferred outside the European Economic Area or to international organizations.

1. Website User has the right to:

• access to the content of their personal data
• data rectification
• data erasure
• restriction of data processing
• data portability
• object to processing based on the controller's legitimate interest
• withdraw consent at any time without affecting the lawfulness of processing carried out on the basis of this consent before its withdrawal

2. The User has the right to lodge a complaint with the President of the Personal Data Protection Office in a situation where they consider that the processing violates their rights and freedoms.

3. Automated decision-making, including profiling, does not occur in the data processing process.

1. The Website does not automatically collect any information, except for information contained in cookies.

2. Cookies are IT data, in particular text files, that are stored in the Website User's end device and are intended for using the Website's pages. Cookies typically contain the name of the website from which they originate, their storage time on the end device and a unique number.

3. The entity placing cookies on the Website User's end device and accessing them is the Website operator AUTA XYZ Kacper Łysiak with registered office at ul. Spokojna 1013/18, 08-400 Sulbiny.

4. Cookies are used for:

• adapting the content of the Website's pages to the User's preferences and optimizing the use of web pages; in particular, these files allow recognition of the Website User's device and appropriate display of the web page, adapted to their individual needs;
• creating statistics that help understand how Website Users use web pages, which enables improvement of their structure and content;
• maintaining the Website User's session (after logging in), thanks to which the User does not have to re-enter their login and password on each Website subpage;

5. The Website uses two main types of cookies: "session cookies" and "persistent cookies". "Session cookies" are temporary files that are stored on the User's end device until logging out, leaving the website or closing the software (web browser). "Persistent cookies" are stored on the User's end device for the time specified in the cookie parameters or until they are deleted by the User.

6. The Website uses the following types of cookies:

• "necessary" cookies, enabling the use of services available within the Website, e.g., authentication cookies used for services requiring authentication within the Website;
• cookies used to ensure security, e.g., used to detect abuse in authentication within the Website;
• "functional" cookies, enabling "remembering" settings selected by the User and personalization of the User interface, e.g., regarding the selected language or region from which the User comes, font size, website appearance, etc.;

7. In many cases, software used for browsing web pages (web browser) allows cookies to be stored on the User's end device by default. Website Users can change cookie settings at any time. These settings can be changed in particular to block automatic handling of cookies in web browser settings or to inform about each instance of their placement on the Website User's device. Detailed information on the possibilities and methods of handling cookies is available in the software (web browser) settings.

8. The Website operator informs that restrictions on the use of cookies may affect some functionalities available on the Website's pages.

1. The Controller reserves the right to introduce changes to this Privacy Policy while ensuring that Users' rights arising from this document will not be limited.

2. Users will be informed about all changes to the Privacy Policy through a message available on the Website.