Skip to content

Privacy policy

Document version: 2026-09-v1

  1. 1.Data controller

    The data controller is [controller's name], [registered address], VAT/tax ID: [tax ID number], email: [contact email address].

  2. 2.Scope and purpose of processing

    We process personal data submitted through contact forms and offer inquiries in order to prepare an offer, handle the inquiry and, once separate consent has been given, for marketing purposes. We also process technical data related to your use of the website in order to keep it secure (including protecting forms against bots and abuse), to compile anonymous visitor statistics and — only with your consent — for the analytics and advertising purposes described in section 7.

  3. 3.Legal basis for processing

    We process data on the basis of the data subject's consent (Article 6(1)(a) GDPR), and to the extent necessary to prepare and perform a contract — on the basis of Article 6(1)(b) GDPR. Website security and our own anonymous statistics are based on our legitimate interest (Article 6(1)(f) GDPR). Information is stored on or accessed from your device (e.g. cookies used by analytics and advertising tools) only with your consent, except where this is strictly necessary to provide the service, in accordance with the Polish Electronic Communications Law.

  4. 4.Recipients of data

    Data may be shared with partner dealers, leasing providers and insurers, solely to the extent necessary to prepare and deliver the selected financing offer. Recipients may also include the service providers we use to run the website: infrastructure (hosting, database), bot protection (Cloudflare) and — once you have given consent — providers of analytics and advertising tools: Google, Microsoft, Meta, TikTok, LinkedIn and X. Some of them may process data outside the European Economic Area under the terms set out in their privacy policies.

  5. 5.Data retention period

    We retain data for as long as necessary to handle the inquiry and for the period required by law, and, in the case of marketing consent, until it is withdrawn. The cookie storing your consent choices is kept for up to 180 days, the consent history for as long as necessary to demonstrate that consent was obtained, and events from our own statistics for up to 13 months (aggregated reports may be kept longer).

  6. 6.Rights of the data subject

    You have the right to access your data, rectify it, erase it, restrict its processing, transfer it, and object to its processing, as well as to withdraw your consent at any time.

  7. 7.Cookies, statistics and third-party tools

    Essential: the dmp_consent cookie remembers your consent choices (an anonymous identifier, the selected categories, the version of the consent text and the date), and our forms may be protected by Cloudflare Turnstile. Our own statistics work without cookies and without storing IP addresses: we count page views and events (e.g. viewing an offer, using the calculator, sending an inquiry) and distinguish visits using a cryptographic hash created with a salt that changes daily. Third-party analytics (Google Analytics 4, Microsoft Clarity) and marketing tools (Google Ads, Meta Pixel, TikTok Pixel, LinkedIn Insight Tag, X Pixel) run only if they are configured and you give your consent in the banner or in “Cookie settings”; until then their scripts are not loaded, and for Google services we use Consent Mode with consent denied by default. These tools may store cookies or similar data on your device. If you consent to marketing, information that a form was submitted may also be sent to Meta, TikTok and LinkedIn directly from our server (Conversions API) — your email address and phone number only as a SHA-256 hash, together with your IP address, browser information and an event identifier that prevents double counting. External media (Google Maps, embedded posts and videos) are loaded only after you consent — until then you will see a placeholder. You can change or withdraw your consent at any time in “Cookie settings” in the website footer; withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal. We keep a history of consent changes with an anonymous identifier so that we can demonstrate that consent was obtained.

  8. 8.Contact regarding data protection

    For matters relating to personal data protection, please contact: [contact email address].