Privacy Policy
Privacy policy of the online store owned by CENTER CAR sp. z o.o., headquartered at Godzikowice 25, entered in the Register of Entrepreneurs of the National Court Register under KRS number 0001004642, NIP: 9121938810, REGON: 52375996400000, operating at the following website: centercar-silniki.pl
I. These Terms and Conditions apply to the trading and service activities of CENTER CAR sp. z o.o., headquartered in Godzikowice, conducted through the online store at the following website: centercar-silniki.pl
These Terms and Conditions have been prepared in accordance with national law and applicable European Union legislation, and users of the online store accept the rules and conditions under which CENTER CAR sp. z o.o., headquartered in Godzikowice, delivers goods or provides services.
1. The website administrator is CENTER CAR sp. z o.o., headquartered in Godzikowice.
2. The economic copyrights or contractual rights to the content and works published on the website belong to or are exercised by CENTER CAR sp. z o.o., headquartered in Godzikowice.
3. The website as a whole, as well as its separable parts, is protected by law, in particular by the provisions of the Civil Code, the Copyright and Related Rights Act, and the Act on Combating Unfair Competition.
4. CENTER CAR sp. z o.o., with its registered office in Godzikowice, does not grant anyone express or implied consent—in relation to the rights and items described in point 3 above—for their use, exploitation, publication or modification in any way, in particular in publications, presentations, websites or in any other manner covered by the Copyright Protection Act.
5. In the event of a breach of the prohibitions set out in point 4 and unlawful use of the rights or items referred to in point 3, CENTER CAR sp. z o.o., with its registered office in Godzikowice, or the holders of the economic copyrights to the works, will pursue their rights before the courts.
6. The User is entitled to use all content published on the website, provided that the protection referred to in point 3 is not infringed and that the content is used in accordance with the purpose of its publication.
8. Witryna wykorzystuje ciasteczka “Cookies”, które służą identyfikacji przeglądarki podczas korzystania z witryny. Ciasteczka nie zbierają żadnych danych osobowych. Zbierane dane jak np. rodzaj przeglądarki użytkownika, czas spędzony na stronie itd. są wykorzystywane przy analizie statystyk poszczególnych witryn i mogą być używane przez CENTER CAR sp. z o.o. z siedzibą w Godzikowicach do narzędzi marketingowych/reklamowych. CENTER CAR sp. z o.o. z siedzibą w Godzikowicach może udostępniać dane pozyskane dzięki plikom ,,cookies” dostawcom usług Google oraz Meta, i w celach: marketingowych.
9. Unless expressly stated otherwise, the offers presented on the website do not constitute offers within the meaning of the provisions of the Civil Code; as a rule, they are for informational purposes or constitute invitations to negotiate.
10. Any matters not regulated by this Privacy Policy shall be governed by the applicable provisions of law.
II. Personal Data Protection.
1. Personal data are processed by CENTER CAR sp. z o.o., with its registered office in Godzikowice, in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: GDPR), as well as national regulations on the protection of personal data of natural persons.
2. Personal data collected through all types of forms placed on the Administrator’s websites, including such information as: name and surname, contact telephone number, e-mail address, www address and company name, are used solely to identify the Customer, establish business contact with them, provide the Customer with free materials prepared by the Administrator, provide a quotation for services provided by the Administrator, conduct business negotiations with the Customer, and conclude and perform the agreement. If the Customer consents to this, the personal data provided by them will be used by the Administrator for the marketing of its own products and services or the marketing of products and services of third parties, as well as for monitoring traffic on the Administrator’s website (profiling).
3. Personal data collected through all types of forms placed on websites will be processed by the Administrator for the time necessary to provide Customers with free materials or a quotation for the Administrator’s services; for the duration of business negotiations aimed at concluding an agreement (but no longer than one year from the date on which the Customer received the commercial offer), and thereafter for the duration of the performance of the agreement or provision of the service, as well as for the period during which the Administrator is required to retain sales documents and until the expiry of all claims related to the given agreement.
4. Personal data collected through all types of forms placed on the Administrator’s websites are processed on the basis of the data subject’s consent (Article 6(1)(a) GDPR), as well as on the basis of Article 6(1)(b) GDPR, i.e. processing is necessary for the performance of an agreement to which the data subject is a party or for taking steps at the request of the data subject prior to entering into an agreement.
5. Customers of the Administrator may withdraw their consent to the processing of personal data at any time. Withdrawal of consent to data processing does not affect the lawfulness of processing carried out by the Administrator on the basis of consent before its withdrawal.
6. Consent may be withdrawn by the Customer by sending a statement to the e-mail address: kontakt@centercar-silniki.pl, with wording such as:
Acting on behalf of (name of entity) with its registered office at (registered office address), as its (position of the person making the statement, together with evidence of their authorisation to represent the entity)/ or I—name and surname, residential address—hereby withdraw my consent to the processing of my personal data by CENTER CAR sp. z o.o., with its registered office in Godzikowice.
7. The categories of recipients to whom the personal data of the Administrator’s Customers may be disclosed include, in particular: the Administrator’s employees, contractors and collaborating associates, accounting offices, law firms, statutory auditors, banks and insurers, national debt registers, courts and prosecutor’s offices, the Police and tax authorities, bailiffs, and entities purchasing or collecting debts.
8. CENTER CAR sp. z o.o., with its registered office in Godzikowice, does not and will not transfer Customers’ personal data to recipients in third countries or to international organisations.
9. CENTER CAR sp. z o.o., with its registered office in Godzikowice, processes Customers’ personal data using computer systems and software that ensure an appropriate level of security for the processing of such personal data, including encryption and anonymisation of transmitted information and periodic changes to system access passwords. The Administrator processes its Customers’ personal data outside the IT system using technical and organisational measures ensuring an appropriate level of security for the processing of personal data.
10. The data subject has the right to access the content of their data and to rectify or erase it (the right to be forgotten), restrict its processing, and the right to data portability, as well as the right to withdraw consent to its processing at any time without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal.
11. The data subject has the right to object to the processing of their data by the Administrator. The objection should be submitted to: kontakt@centercar-silniki.pl
12. If the data subject considers that the processing of their personal data by the Administrator infringes the provisions of the General Data Protection Regulation, they have the right to lodge a complaint with the President of the Personal Data Protection Office, ul. Stanisława Moniuszki 1A, 00-014 Warszawa.
13. In the event of a personal data breach, the Administrator shall, without undue delay and, where feasible, no later than 72 hours after becoming aware of the breach, notify the supervisory authority referred to in point 12, unless the breach is unlikely to result in a risk to the rights or freedoms of natural persons. Where notification to the supervisory authority is not made within 72 hours, the Administrator shall provide reasons for the delay. If the personal data breach is likely to result in a high risk to the rights or freedoms of natural persons, the Administrator shall, without undue delay, notify the data subject of the breach.
III. Principles of Personal Data Processing by CENTER CAR sp. z o.o., with its registered office in Godzikowice, as the Personal Data Administrator.
CENTER CAR sp. z o.o., with its registered office in Godzikowice, observes the following principles when processing personal data:
1. The principle of lawfulness, fairness and transparency of data processing, according to which data are processed by the Administrator lawfully, fairly and in a transparent manner for the data subject.
2. Purpose limitation of data processing—data are collected by the Administrator in a manner consistent with the purposes for which they are processed. Further processing for archiving purposes in the public interest, for scientific or historical research purposes, or for statistical purposes is not considered by the Administrator to be incompatible with the original purposes.
3. Data minimisation—the Administrator processes only the amount of data that is adequate, relevant and limited to what is necessary for the purposes for which it is processed.
4. Accuracy of processed data—the Administrator processes only accurate data and updates it where necessary. The Administrator takes all reasonable steps to ensure that personal data that are inaccurate in relation to the purposes of their processing are erased or rectified without delay.
5. Limitation of the period and purposes for which data may be retained—the Administrator retains data in a form that permits identification of the data subject for no longer than is necessary for the purposes for which the data are processed. The Administrator may retain personal data for a longer period if they are retained for statistical purposes. At the same time, the Administrator will implement appropriate technical and organisational measures to protect the rights and freedoms of the data subjects.
6. Ensuring the integrity and confidentiality of data processing—the Administrator processes data in a manner ensuring appropriate security of personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.
7. Accountability principle – CENTER CAR sp. z o.o. with its registered office in Godzikowice is responsible for complying with all the data processing principles listed in points 1–6 and is able to demonstrate such compliance. The Controller implements appropriate technical and organisational measures that ensure the highest level of security for the personal data it processes, in accordance with the principles set out above.
IV. Information obligations of the Personal Data Controller.
Depending on whether CENTER CAR sp. z o.o. with its registered office in Godzikowice collects data from the data subject or in a manner other than from the data subject, the EU General Data Protection Regulation imposes separate information requirements on the Controller.
Information obligations of the Personal Data Controller common to both situations where the data have been collected from the data subject and where they have been collected indirectly:
1. The obligation to provide the identity of the Controller, contact details, and the identity and contact details of the Controller’s representative.
2. The obligation to provide the contact details of the data protection officer (if one has been appointed).
3. The obligation to specify the purposes of processing personal data and the legal basis for processing.
4. The obligation to provide information about the recipients of personal data or the categories of recipients to whom the data will be disclosed.
5. The obligation to inform about the intention to transfer personal data to a third country or an international organisation, where applicable.
6. The obligation to specify the period for which personal data will be stored or, where this is not possible, to specify the criteria used to determine that period.
7. The obligation to provide information about the rights of data subjects.
8. The obligation to provide information about the right to lodge a complaint with a supervisory authority (the authority’s full name and address must be provided).
9. The obligation to inform the data subject whether providing personal data is a statutory or contractual requirement or a condition for entering into a contract, whether the data subject is obliged to provide the data, and what the possible consequences of failing to provide the data are.
10. The obligation to provide information about automated decision-making, including profiling
11. The obligation to inform about a new purpose of data processing other than the purpose specified in the original information:
Information obligations of the Controller where the data have not been collected from the data subject (i.e. indirectly):
In such a case, CENTER CAR sp. z o.o. with its registered office in Godzikowice must additionally inform the data subject about:
a) the categories of relevant personal data being processed – i.e. the type of data processed, such as first name, surname, address, date of birth, etc.,
b) the source from which the data originate and, where applicable, whether they come from publicly available sources.
Exemption from the information obligation for a Controller who has obtained data indirectly:
A Controller who has obtained data indirectly is not required to fulfil the information obligation if:
a) the data subject already has this information;
b) providing such information proves impossible or would require a disproportionate effort, in particular where data are processed for archiving purposes in the public interest, for scientific or historical research purposes, or for statistical purposes;
c) obtaining or disclosing the data is expressly regulated by European Union law or the law of the Member State to which the Controller is subject, which provides appropriate measures to protect the legitimate interests of the data subject; or
d) the personal data must remain confidential pursuant to an obligation of professional secrecy laid down in European Union law or the law of a Member State, including a statutory obligation of secrecy.
V. Obligation of transparent communication by the Controller with the data subject (Article 12 GDPR).
1. The Controller shall provide the data subject, in a concise, transparent, intelligible and easily accessible form, using clear and plain language – in particular where the information is addressed to a child – with all the information referred to in Articles 13 and 14 GDPR, and shall conduct all communication with the data subject under Articles 15–22 and 34 GDPR. The information shall be provided in writing or by other means, including, where appropriate, electronically. If requested by the data subject, the information may be provided orally, provided that the identity of the data subject is confirmed by other means.
2. Where the Controller has reasonable doubts concerning the identity of the natural person making a request referred to in Articles 15–21 GDPR, it may request additional information necessary to confirm the identity of the data subject.
VI. Deadlines for the Controller to fulfil information obligations.
1. Where personal data are obtained from the data subject, all the information indicated above should be provided to that person when the data are collected.
2. Where the Controller obtains data indirectly, it shall fulfil its information obligation within the following deadlines:
a) within a reasonable period after obtaining the personal data – no later than within one month – taking into account the specific circumstances of the processing of the personal data;
b) if the personal data are to be used for communication with the data subject – no later than at the time of the first such communication with the data subject; or
c) if the personal data are intended to be disclosed to another recipient – no later than when they are first disclosed.
VII. Obligations of the Personal Data Controller when processing personal data.
Taking into account the nature, scope, context and purposes of processing, as well as the risk of breaching the rights or freedoms of natural persons, with varying likelihood and severity of the threat, the Controller has implemented appropriate technical and organisational measures to ensure that processing is carried out in accordance with the GDPR and to be able to demonstrate this. These measures are reviewed and updated every six months.
The obligations of CENTER CAR sp. z o.o. with its registered office in Godzikowice as the Personal Data Controller arising directly from the GDPR include, in particular:
1. Data protection by design and by default – to fulfil this obligation, the Controller has implemented appropriate technical and organisational measures, such as pseudonymisation, designed to effectively implement data protection principles, such as data minimisation, and to provide processing with the necessary safeguards so as to properly protect the rights of data subjects.
2. Entrusting data for processing under a written agreement – the Controller uses only the services of processors that provide sufficient guarantees of implementing appropriate technical and organisational measures to protect the rights of data subjects.
Processing by a processor shall be carried out on the basis of an agreement or other legal instrument governed by European Union law or the law of a Member State and binding the processor and the Controller, specifying the subject matter and duration of the processing, the nature and purpose of the processing, the type of personal data and categories of data subjects, and the obligations and rights of the Controller.
3. Security of processing.
CENTER CAR sp. z o.o. with its registered office in Godzikowice has implemented and applies the following technical and organisational measures to minimise the risk of a breach of personal data protection:
a) pseudonymisation and encryption of personal data;
b) the ability to ensure the ongoing confidentiality, integrity, availability and resilience of processing systems and services;
c) the ability to rapidly restore the availability of and access to personal data in the event of a physical or technical incident;
d) regular testing, measuring and evaluating the effectiveness of technical and organisational measures intended to ensure the security of processing.
When assessing whether the level of security is appropriate, the Administrator takes into account, in particular, the risks associated with processing, especially those resulting from the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or unauthorised access to, personal data transmitted, stored or otherwise processed.
4. Reporting a personal data breach to the supervisory authority.
In the event of a personal data breach, the Administrator shall, without undue delay and, where feasible, no later than 72 hours after becoming aware of it, report the breach to the supervisory authority, unless the breach is unlikely to result in a risk to the rights and freedoms of natural persons. Where the notification to the supervisory authority is not made within 72 hours, the Administrator shall provide reasons for the delay.
If the personal data breach is likely to result in a high risk to the rights and freedoms of natural persons, the Administrator shall, without undue delay, notify the data subject of the breach.
5. Conducting data protection impact assessments.
Where a type of processing—in particular, using new technologies—is likely, taking into account its nature, scope, context and purposes, to result in a high risk to the rights and freedoms of natural persons, the Administrator shall, before processing begins, carry out an assessment of the impact of the envisaged processing operations on the protection of personal data.
6. Conducting prior consultations.
Where the data protection impact assessment indicates that the processing would result in a high risk if the Administrator did not take measures to minimise that risk, the Administrator shall, before processing begins, consult the supervisory authority on the possibility and means of processing.
VIII. Processing the data of minors.
As a rule, all activities of CENTER CAR sp. z o.o., with its registered office in Godzikowice, are directed at adults who are able to make decisions or influence their making. If the legal guardians of a minor learn that the minor has completed a form available on websites belonging to the Administrator, please contact the Administrator to have the data removed from the database or withdraw consent by sending an appropriate e-mail to: kontakt@centercar-silniki.pl
IX. Rights of users of websites belonging to CENTER CAR sp. z o.o., with its registered office in Godzikowice
The data subject:
a) has the right to obtain confirmation from the Administrator as to whether personal data concerning them are being processed and, where that is the case, has the right to access them and a range of information (Article 15 GDPR),
b) has the right to request that the Administrator rectify without undue delay personal data concerning them that are inaccurate (Article 16 GDPR),
c) has the right to request that the Administrator erase without undue delay personal data concerning them under specified circumstances (Article 17 GDPR),
d) has the right to request that the Administrator restrict the processing of data in specified cases (Article 18 GDPR),
e) has the right to receive, in a structured, commonly used and machine-readable format, personal data concerning them that they have provided to the Administrator,
f) has the right, in the cases specified, to transmit those personal data to another administrator without hindrance from the administrator to whom the data were provided (Article 20 GDPR),
g) has the right to object to the processing of personal data concerning them (Article 21 GDPR),
h) has the right not to be subject to a decision based solely on automated processing of their personal data, including profiling (Article 22 GDPR).
The personal data Administrator enables the data subject to exercise the above rights in accordance with the principles set out in the provisions of the EU Regulation on the protection of personal data.
X. Changes to the Privacy Policy.
CENTER CAR sp. z o.o., with its registered office in Godzikowice, reserves the right to amend this Privacy Policy by publishing an amendment to the current Privacy Policy or a new Privacy Policy on this website. If you have any further questions regarding the Privacy Policy, you can contact the Administrator at: kontakt@centercar-silniki.pl
