Privacy Policy + Cookies

I. General Provisions

1. This Privacy Policy defines the manner of collecting, processing and storing personal data necessary for the provision of services by electronic means through the website at the domain www.pojazdy.ch (hereinafter: the Service).

2. The administrator of Users' personal data is MDM PROSTA SA. with its registered office at ul. Chmielna 2/31, 00-020 Warsaw, NIP: 5253068775 (hereinafter: the Administrator).

3. Personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter: GDPR).

4. Data collected by the Administrator will be:

  • processed in accordance with the law,
  • processed for clearly defined purposes and not subject to further processing incompatible with those purposes,
  • substantively correct and adequate in relation to the purposes for which they are processed,
  • stored no longer than necessary to achieve the purpose of processing.

II. Purpose and Legal Basis for Data Processing

1. The Administrator processes personal data necessary for the provision and development of the services offered through the Service and its individual functionalities.

2. Personal data will be processed for the following purposes:

  • account registration, verification of the User's identity and performance of the electronic services agreement in accordance with the Act of 18 July 2002 on the provision of services by electronic means, in particular by providing access to the User's account – based on acceptance of the Terms and Conditions (Art. 6(1)(b) GDPR);
  • communication with the User in order to provide them with necessary information and to build positive and reliable relations with them, which constitutes the Administrator's legitimate interest (Art. 6(1)(f) GDPR);
  • promotion by the Administrator of its own products and/or services and those of its Partners by sending marketing information (newsletter) by electronic means, provided the User has consented to receive such notifications via email (Art. 6(1)(a) GDPR);
  • providing access to information about news from the industry directly related to the Administrator's activities, provided the User has consented to receive such notifications via email (Art. 6(1)(a) GDPR),
  • analytical and statistical purposes based on the Administrator's legitimate interest in verifying the activity of Users and their preferences for optimizing the services and products and the functionalities of the Service (Art. 6(1)(f) GDPR);
  • possible establishment, pursuit or defense of claims based on the Administrator's legitimate interest in protecting its rights (Art. 6(1)(f) GDPR).

3. In each of the cases mentioned above (para. 2), providing data is voluntary, but necessary to conclude a contract or use other functionalities of the Service.

III. Personal Data Processing Period

1. Personal data will be processed for the period during which the person remains an active User of the Service (has a User account), and after that time for the period necessary to comply with legal regulations, pursue or defend against potential claims, but no longer than 3 years counted from the date of termination of the electronic services agreement.

2. Data processed on the basis of consent will be processed until the consent is withdrawn, with the reservation that the withdrawal of such consent does not affect the lawfulness of the processing carried out before such withdrawal.

IV. Processing Information

1. Personal data, depending on the purpose of processing, may be disclosed to:

  • entities affiliated with the Administrator,
  • entities cooperating with the Administrator,
  • subcontractors, in particular entities providing and servicing selected IT systems and solutions,
  • entities handling online payments,
  • entities providing courier and postal services,
  • law firms.

2. Personal data processed by the Administrator will not/will be transferred outside the European Economic Area or to international organizations.

V. Rights of Data Subjects

1. The Service User has the right to:

  • access the content of their personal data,
  • rectification of data,
  • erasure of data,
  • restriction of data processing,
  • data portability,
  • object to processing carried out on the basis of the Administrator's legitimate interest,
  • withdraw consent at any time without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal

2. The User has the right to lodge a complaint with the President of the Personal Data Protection Office if they consider that the processing violates their rights and freedoms.

3. In the data processing process, there is no automated decision-making, including profiling.

VI. Cookies

1. The Service does not automatically collect any information, except for information contained in cookies.

2. Cookies (so-called \"biscuits\") constitute IT data, in particular text files, which are stored in the end device of the Service User and are intended for use with the Service's websites. Cookies usually contain the name of the website from which they originate, their storage time on the end device and a unique number.

3. The entity placing cookies on the Service User's end device and accessing them is the Service operator AUTA XYZ Kacper Łysiak with its registered office at ul. Spokojna 1013/18, 08-400 Sulbiny.

4. Cookies are used for the purpose of:

  • adapting the content of the Service's websites to the User's preferences and optimizing the use of websites; in particular, these files allow the Service User's device to be recognized and the website to be appropriately displayed, tailored to their individual needs;
  • creating statistics that help understand how Service Users use websites, which enables improving their structure and content;
  • maintaining the Service User's session (after logging in), thanks to which the User does not have to re-enter their login and password on each subpage of the Service;

5. The Service uses two basic types of cookies: \"session\" (session cookies) and \"persistent\" (persistent cookies). \"Session\" cookies are temporary files that are stored in the User's end device until they log out, leave the website or turn off the software (web browser). \"Persistent\" cookies are stored in the User's end device for the time specified in the cookie parameters or until they are deleted by the User.

6. The Service uses the following types of cookies:

  • \"necessary\" cookies, enabling the use of services available within the Service, e.g. authentication cookies used for services requiring authentication within the Service;
  • cookies used to ensure security, e.g. used to detect fraud in the area of authentication within the Service;
  • \"functional\" cookies, enabling the \"remembering\" of settings chosen by the User and personalization of the User interface, e.g. regarding the selected language or region from which the User comes, font size, website appearance, etc.;

7. In many cases, web browsing software (web browser) by default allows the storage of cookies on the User's end device. Service Users may change cookie settings at any time. These settings may be changed in particular to block automatic handling of cookies in web browser settings or to inform about their each placement in the Service User's device. Detailed information about the possibilities and ways of handling cookies is available in the software (web browser) settings.

8. The Service operator informs that restrictions on the use of cookies may affect some functionalities available on the Service's websites.

VII. Final Provisions

1. The Administrator reserves the right to make changes to this Privacy Policy while ensuring that the rights of Users arising from this document will not be limited.

2. The User will be informed about all changes to the Privacy Policy through a notice available in the Service.