1. Legal information
1.1 The privacy of your personal data is of key importance to us. This privacy policy (the “Privacy Policy”) is intended to help you understand how we process information collected about you when you browse our website, when you provide your data through our websites, and when you use the services of our self-service workshop.
1.2 P4 SERVICE spółka z o.o. acts as the controller of your personal data for the purposes specified in Section 3 of this document.
1.3 At present we have not appointed a Data Protection Officer. If one is appointed, the information will be available on our website.
2. Collection of information
2.1 We collect personal data which, in accordance with applicable legal regulations, in particular with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the “GDPR”), contain information that can be used to identify you: your name and surname, telephone number, e-mail address, registration number and make of your car, as well as the personal data indicated in point 4 (the “Personal Data”).
Information you provide to us:
2.2 You may be asked to provide us with selected Personal Data via forms available on our websites and/or when you contact us and/or during selected events, for the purposes specified in Section 3 of this document. The Personal Data you entrust to us may include your name and surname, e-mail address, and any other information you provide to us while browsing the website or contacting us.
2.3 We may collect your data when you visit our website, submit an enquiry through our pages, submit a registration form, or when you contact us.
2.4 We may collect your data while you use the services of the self-service workshop. This concerns data obtained from you by our authorised employee before the service, as well as your image recorded by the CCTV system present in the self-service workshop.
3. Processing of personal data
3.1 We may process your Personal Data for the following purposes:
- enabling registration on our websites;
- responding to an enquiry you have sent;
- providing the information you requested;
- enabling you to use the services of our self-service workshop;
- accepting and settling your payment;
- ensuring the safety of you and other users of the self-service workshop by recording your image through CCTV (security cameras).
Processing of your Personal Data for the purposes listed in Section 3 is necessary to fulfil your request, and therefore your prior consent is not required.
3.2 We may also process your Personal Data for marketing purposes, however this requires your prior separate consent.
3.3 Providing us with Personal Data is voluntary but necessary for the purposes described in this Section 3; if you do not provide us with your Personal Data, you will prevent us from taking action to carry out the tasks listed above.
4. Accepting payments
Accepting a payment from you as remuneration for our services involves processing your personal data. We must record the payment in our IT systems and account for it appropriately in our accounting and tax records. In addition, we analyse selected data to prevent payment-related fraud or to establish whether such fraud has occurred, and we defend ourselves against any unjustified claims or pursue our own justified claims.
Depending on the payment channel you choose, we process data such as:
- name and surname,
- company (business) information,
- address,
- payment account number, name of the entity maintaining it (e.g. the bank),
- e-mail address,
- telephone number,
- IP address,
- alphanumeric payment identifier assigned by the payment service provider,
- amount and currency of the payment,
- time of payment authorisation by the payment service provider,
- information provided in the payment title,
- selected payment card data (varying depending on the payment service provider),
- personal data contained in complaints, applications, enquiries concerning the contract,
- other data provided to us as part of a possible complaint, application or enquiry.
With regard to data analysed to prevent fraud or to determine whether fraud has occurred, all data relating to the given payment transaction (see above) or the Account may be processed, as well as 3-D Secure information.
Providing the data is voluntary. If you do not provide us with the data we have marked as required for a given payment channel, or which our partner (e.g. the payment service provider) has marked in this way, you will not be able to make the payment.
Legal bases for processing the data:
- proper performance of the contract and provision of our services,
- fulfilment of legal obligations, including keeping the required accounting and tax records,
- pursuit of our legitimate interests; analysing data to prevent fraud or to determine whether fraud has occurred, and establishing, pursuing or defending against claims.
Processing period, including data retention:
- the period of service provision,
- the limitation period for any claims,
- the period for keeping accounting and tax records required by law (5 full calendar years + 1 year due to the limitation period for tax liabilities).
5. Transfer of personal data
We will not transfer your personal data outside the European Economic Area.
5.1 We may transfer your Personal Data in accordance with the law or as set out below:
(a) Third parties (service providers, suppliers). Where your Personal Data has been provided in order to take part in activities, events, initiatives or competitions, it may be processed by service providers and/or insurance companies. The said Third Parties are subject to confidentiality agreements and other legal provisions prohibiting them from using the information we provide for any purposes other than carrying out operations strictly related to a specific task, unless you have expressly consented or granted prior permission. The Third Parties will act, unless stated otherwise, as Personal Data Processors.
(b) As permitted or required by law. In certain situations, on the basis of a valid court order, a summons, a government investigation or other legally defined circumstances, we may be obliged to transfer your Personal Data. In addition, we reserve the right to report to the relevant authorities any actions which we, in good faith, consider unlawful or in breach of applicable regulations. We may disclose certain Personal Data if, in our opinion, such disclosure is necessary to protect the rights, property and safety of others and ourselves, or to detect, prevent or otherwise address fraud, security or technical issues.
6. CCTV monitoring
For the safety of our customers, we have introduced CCTV monitoring covering all workstations of the self-service workshop.
We collect the following personal data via video cameras:
- video data of individuals (appearance, approximate age, gender, behaviour, registration number), the location of the recording (camera field of view, camera location), the vehicle’s registration plate;
- in cases other than real-time monitoring, the time of the recording is also captured (date, time, start/end of the recording).
Data is collected automatically upon entering the premises of the self-service workshop. Processing is carried out for one of the following purposes:
Site security. CCTV monitoring is used for protection purposes, to be able to document criminal acts or breaches of the law. The legal basis for processing is the legitimate overriding interest of the Data Controller in achieving this purpose (Art. 6(1)(f) GDPR).
Access control. CCTV monitoring is carried out for the purpose of controlling authorised access; the legal basis for processing is the legitimate overriding interest of the Data Controller in achieving this purpose (Art. 6(1)(f) GDPR).
Video recordings are generally stored for a maximum of 30 days and then deleted. Longer retention may be necessary in individual cases where the recordings are needed to prosecute breaches of the law, to establish, pursue and defend claims, and to protect or secure evidence.
In the event of an incident, recordings made for site protection purposes will be assessed, and the following personal data will additionally be collected: the identity of individuals (to the extent recognisable from the recording), the role of individuals (e.g. perpetrator, victim, witness). The above data may be transferred to the following recipients, provided it is proportionate and necessary in the individual case:
- the relevant authorities or courts (to secure evidence in criminal cases),
- the relevant authorities or courts (to secure evidence in civil cases),
- insurance companies (solely to handle insurance-related matters).
7. Information regarding profiling for marketing purposes
We do not carry out profiling based on your personal data, i.e. the automated assessment of certain personal factors relating to you.
8. Retention period of your personal data
We will retain your data until you withdraw your consent to the processing of personal data or until the legal obligation to retain the information ceases.
9. Your rights related to the processing of personal data
You have the following rights:
- the right to withdraw consent,
- the right of access to your personal data,
- the right to request rectification of your personal data,
- the right to request erasure of your personal data,
- the right to request restriction of the processing of your personal data,
- the right to data portability — the right to receive your data from us in a structured, commonly used, machine-readable format; you may transmit this data to another controller or request that we transmit it on your behalf, where technically feasible.
To exercise the above rights, please contact us (contact details below).
10. The right to lodge a complaint with the authority
You also have the right to lodge a complaint with the supervisory authority responsible for the protection of personal data, i.e. the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).
11. Where we store your personal data
Your Personal Data will be stored on IT servers registered in the European Union.
12. Third-party privacy policies
We are not responsible for the privacy policies published on other websites or in applications, and we recommend that you review all relevant rules, terms and privacy policies provided by third parties before you provide them with information about yourself.
13. How to contact us
If you have any questions or concerns regarding the Privacy Policy, or if you wish to review or edit your Personal Data or request the deletion of Personal Data stored in our databases and actively used, please contact us at the e-mail address: brutalnypodnosnik@gmail.com
“Cookies” policy
While you browse our websites, we may collect information that allows us to identify your computer and its browser or any other mobile device you use to browse websites. This information is collected by installing small text files called “Cookies”, as well as other similar technologies (together, “Cookies”). On your next visit to our websites, the previously stored Cookies allow us to recognise your browser. Cookies may store your unique identifiers, user preferences and other information as described in our Cookies Policy.
“Cookies” are computer data stored on users’ end devices and intended for use of websites. In particular, they are text files containing the name of the website they originate from, the time they are stored on the end device, and a unique number. The Service does not automatically collect any information other than the information contained in cookies.
The operator uses cookies to:
- adapt the website content to the individual preferences of the user — first of all, these files recognise the user’s device in order to display the page according to their preferences;
- create anonymous statistics, excluding the possibility of identifying the user.
Cookies used by the website operator’s partners are subject to their own privacy policies. To safeguard the data entrusted to us, we have developed internal procedures and guidelines designed to prevent unauthorised access to the data. We monitor their implementation and continuously verify their compliance with the relevant legal acts — the GDPR, the Personal Data Protection Act, and the Act on Providing Services by Electronic Means.
By default, web browsing software usually allows cookies to be placed on the User’s end device. These settings can be changed by the User so as to block the automatic handling of cookies in the browser settings or to be informed each time they are sent to the user’s device. Users of the Service may change their cookie settings at any time. Detailed information about the options and methods of handling cookies is available in the software (browser) settings.
The Service operator informs that changes to the settings in the user’s browser may prevent the Websites from functioning correctly.
