Privacy Policy
Draft version draft-2026-10-08
This is a courtesy translation of the Polish text. If the two differ, the Polish version prevails.
Draft for approval
This document is a proposal of standard wording. Before publication, the owner must complete the controller's details and approve the text, ideally after consulting someone responsible for legal documents. It is not legal advice.
1. Data controller
The controller of your personal data is [TO BE COMPLETED: full registered name, legal form, tax ID (NIP)], with its registered office at [TO BE COMPLETED: registered office address], operating the HR Automotive workshop at Minerska 2A, 04-506 Warszawa. Contact about your data: biuro@hrautomotive.pl, tel. +48 722 220 660.
2. What data we collect
Through the form on the site you provide: your chosen way of contact (phone number or email address), optionally your first name, a description of your issue, the make and model of your car, its year, fuel type and your preferred date. We do not require a VIN or a registration number. We do not collect photos from people who send a request.
3. Purpose and legal basis
We process your data to respond to your request, contact you the way you chose, and agree the scope and date of the service (Art. 6(1)(b) GDPR: steps taken at the request of the data subject prior to entering into a contract), and for the controller's legitimate interest in handling inquiries and protecting against abuse (Art. 6(1)(f) GDPR). We do not send newsletters or marketing messages on the basis of a request.
4. Recipients and providers
We store data in the database of the infrastructure provider Supabase, and the site is hosted on the Vercel platform. We send the notification about a new request through a transactional email provider [TO BE COMPLETED: provider name, e.g. Resend]; the message contains the request number and topic, without full contact details. Providers may process data outside the European Economic Area on the basis of standard contractual clauses; [TO BE COMPLETED: Supabase project region and Vercel region].
5. Retention period
We keep requests for [TO BE COMPLETED: currently configured 365 days] after the matter is closed, unless a longer period results from legal requirements (for example accounting) or from the need to defend against claims.
6. Your rights
You have the right to access your data, to have it corrected or erased, to restrict its processing, to data portability, and to object to processing based on legitimate interest. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO). To exercise your rights, write to biuro@hrautomotive.pl.
7. Cookies and third-party tools
The site does not use cookies for marketing or analytics. Cookies are used only in the admin panel, to log in staff. The site embeds a Google map (Google Ireland Ltd.), which loads together with the page; Google may then process your IP address and set its own cookies in line with Google's privacy policy. [TO BE COMPLETED: decision on whether the map should require consent before loading]. We measure traffic with Vercel Web Analytics (Vercel Inc.). It sets no cookies and builds no personal profiles: it counts page views and clicks on the phone number, on directions and form submissions, together with the page address, the referring page, country, device type, operating system and browser. Visits are told apart by a hash computed from request data that is valid for one day. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR): knowing which pages help drivers find us. [TO BE COMPLETED: basis for transfer to the USA under the Vercel data processing agreement].
8. Providing data is voluntary
Providing your data is voluntary, but without a phone number or email address we will not be able to respond to your request. You can always call +48 722 220 660 instead of using the form.
