This policy explains what data we collect, why, on what legal basis and what you can do about it. We have written it so that it can be read without a lawyer — but without leaving out anything important.
1. Data controller
The controller of your personal data is BizonGarage, ul. Przykładowa 1, 00-000 Warszawa, tax ID (NIP) 0000000000.
Contact in data matters: sklep@bizongarage.pl, phone +48 530 525 958.
We have not appointed a data protection officer — in matters concerning processing, write directly to the address given above.
2. Purposes, legal bases and retention periods
| Purpose | Legal basis | For how long |
|---|---|---|
| Handling the order and delivery | art. 6(1)(b) of the GDPR — performance of a contract | until the order is completed, then for the limitation period for claims |
| Issuing and storing accounting documents | art. 6(1)(c) of the GDPR — legal obligation | 5 years counted from the end of the tax year |
| Operating the customer account | art. 6(1)(b) of the GDPR — performance of a contract for the provision of services by electronic means | until you delete the account |
| Handling enquiries from the contact form and quotation requests | art. 6(1)(f) of the GDPR — legitimate interest (replying to the enquiry) | 12 months from the last correspondence |
| Examining complaints and withdrawals from the contract | art. 6(1)(c) of the GDPR — legal obligation | until the complaint and limitation periods expire |
| Newsletter and marketing information | art. 6(1)(a) of the GDPR — consent | until consent is withdrawn |
| Visit statistics and improving how the store works | art. 6(1)(a) of the GDPR — consent to analytical cookies | until consent is withdrawn or the cookies expire |
| Pursuing and defending against claims | art. 6(1)(f) of the GDPR — legitimate interest | until the limitation period expires |
3. What data we collect
- Order data: full name, delivery address, e-mail address, phone number and, for an invoice, the company name and tax ID (NIP).
- Account data: e-mail address, password stored as an irreversible hash, saved addresses, order history, contents of the shortlist.
- Form data: the content of the message, contact details and, for a quotation, also the make, model, engine and planned power output of the car.
- Technical data: IP address, browser and system type, date and time of the visit — recorded in the server logs and with form submissions (spam protection).
Providing data is voluntary but necessary to conclude a contract, create an account or receive a reply to an enquiry. We do not profile customers in a way that produces legal effects and we do not take decisions about them solely by automated means.
4. Data recipients
We pass data only to entities without which the order cannot be completed:
- courier companies and parcel locker operators — to the extent of the data needed to deliver the parcel,
- payment operators (Przelewy24, Tpay, PayU) — to the extent needed to settle the transaction,
- the accounting office and the invoicing system provider — to the extent of the accounting documents,
- the hosting and e-mail provider — as a processor, on the basis of a data processing agreement,
- providers of analytical and marketing tools — only after consent has been given to the relevant cookie category,
- public authorities — where the obligation arises from legal provisions.
We do not sell personal data. We do not transfer it outside the European Economic Area, unless it is done by the provider of a tool we use with your consent — in that case the transfer is based on the standard contractual clauses approved by the European Commission.
5. Your rights
At any time you may exercise the following rights:
- access to your data — to find out what data about you we process and to receive a copy of it,
- rectification — to correct inaccurate data or complete incomplete data,
- erasure (the “right to be forgotten”) — subject to data we are required to retain under tax provisions,
- restriction of processing — for example while the accuracy of the data is being verified,
- objection — to processing based on a legitimate interest, including direct marketing,
- data portability — to receive the data in a machine-readable format and to transmit it to another controller,
- withdrawal of consent at any time — without affecting the lawfulness of processing carried out before the withdrawal.
It is enough to send the request to sklep@bizongarage.pl. We reply within one month; in complex cases the period may be extended by a further two months, of which we will inform you.
You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw.
6. Cookies
Cookies are small text files saved in your browser. We divide them into three categories and ask for consent to two of them.
Essential — always on
- maintaining the session and the contents of the basket across subpages,
- the token protecting forms against abuse (CSRF),
- remembering the selected language and your decision regarding cookies.
The store does not work without them, which is why they do not require consent — the basis is our legitimate interest in providing the service correctly.
Analytical — only with consent
- measuring the number of visits, the popularity of subpages and the paths taken through the store,
- detecting the points at which customers abandon their order.
The data is aggregated and serves solely to improve the store.
Marketing — only with consent
- tailoring advertisements on external services,
- measuring campaign effectiveness and limiting how many times the same advertisement is shown.
Managing consent
We save your choice locally in your browser. You can change it at any time: open cookie settings. You can also delete cookies from your browser settings — bear in mind that deleting the essential ones will log you out and empty your basket.
7. Security
- The connection to the store is encrypted with a TLS certificate.
- We store passwords only as irreversible hashes — nobody on the team can see them.
- Access to order data is limited to authorised persons, on named accounts.
- We make backups every day and store them in encrypted form.
8. Changes to the policy
We update the policy when the way the store works or the applicable provisions change. The date of the last update is shown at the top of the page. Changes that are material for account holders are announced by e-mail.
Legal note: the sales contract is concluded with a Polish seller, BizonGarage, and is governed by Polish law. This English text is a translation provided for convenience — in the event of any discrepancy, the Polish version of this document prevails.
