Policy privacy

GDPR INFORMATION CLAUSE

1. Data Controller.
   At optimacars.eu, we are very keen to ensure that your privacy is fully respected and that your personal data is protected in line with the requirements of GDPR.
   
   We have created this Privacy Policy to explain to you what our processing of your personal data entails, indicate the legal basis for the processing, and outline the rights of data subjects.
   
   Under the Act of 18 July 2002 on the provision of electronic services and the Act of 16 July 2004 Telecommunications Law and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons concerning the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (GDPR). In accordance with Article 13(1) and (2) of the Regulation, I inform you that:
   
   the Controller of your personal data is the company OPTIMA Paweł Powała running its business at the address: Majdan ul. Racławicka 7, 05-200 Wołomin, NIP (VAT Identification Number): 1251700215, REGON (National Business Registry Number): 384835454.
   
   
2. What is personal data, and what does its processing consist of?
   According to the definition indicated in Regulation EU 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons in relation to the processing of personal data and on the free movement of such data and repealing Directive 95/4/EC (RODO), personal data is any information that allows an individual to be identified, directly or indirectly. This type of data includes, among other things, data identifying the User (e.g. name, surname, home address, email address, telephone number, photo), as well as data specifying the User's preferences (e.g. concerning the types of products selected) and demographic and geolocation data (e.g. gender, age, location). Personal data also includes financial and transactional data (e.g. payment or payment card data, information on orders, purchases, complaints and returns) and commercial information (e.g. information on potential interest in an offer). Our processing of your personal data is carried out according to the processing process. These include the following processes:
   
   User registration on the site – for this purpose, we will process your personal data as part of creating your account, identifying you and granting you access to particular features and products. The legal basis for processing this data is article 6. 1. f GDPR. We will process the data necessary for this process for as long as you hold registered user status (i.e. until you decide to unregister from our online shop),
   
   Performance of the agreement - for this purpose, we process your data, among other things, to:
   1. inform you about updates to your order or provide you with information related to the products you have ordered,
   2. manage payments for purchased products,
   3. manage any exchanges or returns after purchase,
   4. manage requests for product availability,
   5. to reserve products,
   6. to invoice and issue receipts for purchases made,
   7. to manage and use gift cards.
   The legal basis for processing this data is art. 6. 1. b GDPR.
   Providing us with personal data is voluntary and is a condition for registering on the Portal and for the Service Provider to provide the Service.
   
   
3. What rights do you and other data subjects have?
   You have the right to access the content of your data and the right to rectify your data, the right to erase your data, the right to restrict processing, the right to withdraw your consent to the processing of your data at any time, without affecting the legality of previous processing, i.e. performed before withdrawing your consent, the right to receive a copy of your data, the right to data portability.
   The above rights concerning the Controller should be addressed by email to: info@optimacars.eu.
   The Controller shall reply to your request without undue delay, but no later than within 30 calendar days.
   You also have the right to lodge a complaint with the supervisory authority, the President of the Office for Personal Data Protection, if you consider that our processing of your personal data violates the law, in accordance with the Data Protection Regulation of 27 April 2016. (GDPR).
   If the User gives additional consent to the provision of marketing information by electronic means, the Controller may provide the User with commercial information within the meaning of the Act of 18 July 2002 on the provision of electronic services (consolidated text Journal of Laws of 2017, item 1219), using electronic means of communication, in particular by sending commercial information to the email address or mobile phone number provided by the User.
   The transfer of personal data entered into the form takes place using the secure SSL protocol. The Controller provides you with the possibility to change, modify or delete your personal data by contacting us by email at: info@optimacars.eu or by post at the previously provided address of the company's registered office.
   
   
4. Sharing of personal data.
   The recipients of your personal data will be, in accordance with the applicable legal provisions on the protection of personal data, in particular: authorised employees and associates of the Controller with the help of whom the Service is provided, or other entities, if this is necessary for the aforementioned purposes.
   The Controller shares the data of www.optimacars.eu website users with cooperating service providers with whom there are personal data processing agreements signed. Service providers entrusted with the data include, but are not limited to, email and server hosts, postal, courier, transport and delivery service providers, technology and analytics providers, customer service providers, marketing agencies and other providers and partners in the provision of marketing and advertising related services (e.g. social networks).
   To maximise the efficiency of the services provided, some of the service providers listed are based in countries outside the European Economic Area. Given the possibility of your data being transferred outside the EEA, we have implemented additional safeguards in the form of, among other things, standard contractual clauses and appropriate supplementary measures. You can find out more about the security features we use by contacting us.
   The legal basis for processing the data necessary to take action on your request or demand is art. 6.f GDPR, art.6.1.b GDPR, art.6.1.c GDPR. We will process the data necessary for this process for the time necessary to handle your request or demand.
   
   
5. Cookies.
   Our website uses cookies.
   These are small text files sent by a web server and stored by your browser software. When the browser reconnects to the site, the site recognises the type of device the User is connecting from. The parameters allow only the server that created them to read the information contained in them. Cookies, therefore, facilitate the use of previously visited sites. The information collected includes IP address, browser type, language, operating system type, time and date information, location, and information submitted to the site via a contact form. We use the data we collect to monitor and see how users use our sites to improve the site and provide a more efficient and seamless navigation experience. We monitor user information using the Google Analytics tool, which records user behaviour on the website. We use cookies to ensure the highest standard of comfort on our website, and the data collected is used to optimise operations. You can disable or restore the collection of cookies at any time by changing the settings in your browser.
   The User can delete cookies at any time using the functions available in the web browser they are using.
   Restricting the use of cookies may affect some of the functionality available on the Website.
   
   
6. Google Analytics.
   The website uses Google Analytics, a web analytics service. Its supplier is Google Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Google Analytics uses so-called "cookies", text files which are stored on your computer and enable an analysis of your website use.
   The storage of Google Analytics cookies takes place on the basis of Article 6(1)(f) of the Data Protection Regulation (DPA). The Controller has a legitimate interest in analysing user behaviour both to optimise its online offering and its advertising.
   The Service User can consult Google's privacy policy at: https://policies.google.com/privacy?hl=pl
   If the Service User does not want their information to be collected in this way, they can, for example, change their browser settings.
   The Controller informs that, in this case, the Service User's data is subject to transfer outside the European Economic Area.
   
   
7. Changes to the Privacy Policy.
   This Privacy Policy is subject to change at our discretion. We will inform all users through available communication channels if we make changes.
   
   Thank you for reading our Privacy Policy.