Privacy Policy
[effective date: 14.01.2024]
- Administrator
- Personal data processing process
- Provision of services electronically
- Final Provisions
Administrator of the website https://columbauto.cz, hereinafter referred to as "Web", and administrator of personal data:
- users of the Website, i.e. people communicating with the administrator through contact forms and contact information listed on the Website, as well as people entering opinions about the administrator and comments under posts published by the administrator,
- the persons to whom the administrator provides services within the scope of his business activity is Columb Auto Trade spółka z ograniczoną odpowiedzialnością with its registered office in Białystok at Warszawska Street 6 lok. 32 (15-063 Warsaw), entered in the register of entrepreneurs of the National Court Register maintained by the District Court in Białystok, 12th commercial department of the National Court Register under KRS number: 0000853055, with NIP number: 9662141632 and REGON number: 386672708, with a share capital of 50,000 PLN, hereinafter: we.
We process the personal data provided to us in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons in connection with the processing of personal data and on the free movement of such data and on the repeal of Directive 95 /46/EC (General Regulation on the Protection of Personal Data) (OJ EU L 2016, No. 119, p. 1), hereinafter referred to as: GDPR, Act of 10 May 2018 on the Protection of Personal Data (Collection of Laws from of 2018, item 1000, as amended), hereinafter: the Personal Data Protection Act, as well as other normative acts of national law and the European Union.
In order to ensure the transparency of the personal data processing process, as well as to respect the informational autonomy of the persons whose data we process, the application of Article 13 Sections 1 and 2 of the GDPR, below we provide information about the processing in the following order:
- Purpose of processing, legal basis and period of storage of personal data,
- Recipients of personal data,
- transfer of personal data outside the European Economic Area,
- Security of personal data.
1. Purposes of processing, legal basis and period of retention of personal data
| Purposes and legal basis of processing personal data or legitimate interest of the controller | The period of storage of personal data |
| Provision of information and logistics services or mediation in the purchase of vehicles | |
|
Article 6 Section 1 Letter b GDPR,
take steps to conclude and fulfill a contract for the provision of services - a contract for the purchase and import of a car, a contract for cooperation in the provision of information and logistics services or other contracts concluded within the framework of the business activity operated by the administrator
|
Until the contract is completed |
|
Article 6 Section 1 Letter f GDPR,
i.e. our legally justified interest in the processing of personal data of persons designated by the client to conclude or fulfill a contract with us, e.g.: representing the client when concluding a contract, conducting negotiations, properly fulfilling obligations arising from the contract or financial settlement
|
5 years from the end of the calendar year in which the contract was fulfilled |
|
Article 6 Section 1 Letter c GDPR,
i.e. fulfillment of the obligation to keep the documents making up the accounting records in accordance with the provisions of tax laws and accounting regulations
|
5 years from the end of the calendar year in which the contract was fulfilled |
| Website use - use of cookies | |
|
Article 6 Section 1 Letter a and f GDPR,
i.e. our legitimate interest expressed in the use of cookies necessary for the proper functioning of the website and your consent to the use of all other cookies, including those used to facilitate the transmission of data over the Internet and to enable the collection and analysis of information about website traffic. For more information, see the Cookie Policy.
|
Until you object or withdraw your consent |
| Communication with website users | |
|
Article 6 Section 1 Letter f GDPR,
i.e. our legitimate interest expressed in communication with website users, including answering questions sent to us, as well as, if necessary, other actions in accordance with the user's request (e.g. vehicle)
|
Until the matter is resolved in relation to the query/request we receive |
|
Article 6 Section 1 Letter f GDPR,
i.e. our legitimate interest in enabling communication and exchange of views between users posting comments under posts published on the Website
|
10 years from the date of publication of the comment |
|
Article 6 Section 1 Letter f GDPR,
i.e. our legitimate interest in maintaining business relations with people who are interested in our activities (e.g. expressions of willingness to become a dealer)
|
Until an objection is filed |
| Providing feedback on administrators | |
|
Article 6 Section 1 Letter f GDPR,
that is, our legitimate interest in allowing Web users to express opinions about the administrator and the services he provides
|
Until an objection is filed |
| Claims | |
|
Article 6 Section 1 Letter f GDPR,
i.e. our legitimate interest in pursuing our civil claims, including compensation for damages suffered, and defending against your potential claims
|
Until the statute of limitations for civil claims expires |
2. Recipients of personal data
We only share the provided personal data with three groups of subjects. Primarily, it is our employees and collaborators who operate the Website and provide services on our behalf who must have access to the collected data in order to perform their job duties. We grant appropriate authorization to each person involved in the processing of personal data.
We also regularly share personal data provided by us with processing entities that cooperate with us, whose services we use to perform our activities more efficiently, e.g. IT service providers, legal, tax and accounting services, auditing companies. In such a case, data is transferred on the basis of signed personal data processing authorization contracts in which we oblige our suppliers to ensure an adequate level of security or other legal instruments subject to European Union law.
In certain situations, we may also transfer the data we process to other recipients. However, we do so only to the extent necessary and in justified cases or with the consent of the data subject. This mainly concerns the processing of payments (banks), communication with social network sites with which our website is integrated (e.g. Instagram, Telegram) or taking action in accordance with an inquiry we receive.
3. Transfer of personal data outside the European Economic Area
Since the services provided by us include the mediation of the purchase of vehicles from the United States of America or the implementation of information and logistics activities in this context, we would like to inform you that the personal data provided to us will be transferred outside the European Economic Area, i.e. to a third country, in which we ensure appropriate protection of personal data using standard data protection clauses approved by the European Commission.
You can obtain more information about the security measures used by contacting us using the contact details provided on this page or via the contact form.
4. Rights related to the processing of personal data
In connection with the processing of personal data, website users have the following rights:
| Legal basis for processing | ||||
| Forces | consent to the processing of personal data (Article 6 paragraph 1 letter a) GDPR) | conclusion and performance of the contract (Article 6 paragraph 1 letter b) GDPR) | fulfillment of a legal obligation (Article 6 paragraph 1 letter c) GDPR) | legitimate interest of the administrator (Article 6, paragraph 1, letter f) GDPR) |
| right to withdraw consent | YES | NO | NO | NO |
| the right to access your personal data | YES | YES | YES | YES |
| the right to correct, delete or limit the processing of personal data | YES | YES | YES | YES |
| the right to portability of personal data | YES | YES | NO | NO |
| the right to object to the processing of personal data | NO | NO | NO | YES |
You can exercise your right to withdraw your consent at any time. However, revocation of consent does not affect the legality of processing carried out on the basis of consent before its revocation.
To exercise the above rights, please contact us at the contact details listed below in point IV.
You also have the right to file a complaint with the supervisory authority - the chairman of the Office for Personal Data Protection.
5. Consequences of not providing personal data
| Legal basis for processing | Consequences of not providing personal data |
|
consent to the processing of personal data
(Article 6(1)(a) GDPR)
|
The provision of data is voluntary but necessary to achieve the purposes of the processing; failure to provide data makes it impossible to achieve these goals |
|
conclusion and performance of the contract
(Article 6(1)(b) GDPR)
|
The provision of data is voluntary but necessary to conclude the contract; failure to provide data prevents its closure |
|
fulfillment of a legal obligation
(Article 6(1)(c) GDPR)
|
The processing of personal data is a legal requirement imposed by law; data storage is necessary in accordance with tax and accounting legislation |
|
the administrator's legitimate interest
(Article 6(1)(f) GDPR)
|
Providing data for communication purposes, issuing opinions about administrators and publishing comments under posts is voluntary, but necessary to achieve the purposes of processing. |
6. Security of personal data
Ensuring the security of the personal data we process is our priority. That is why we take the greatest possible steps to ensure that the processed personal data is properly secured. The technical and organizational measures used to secure personal data are in accordance with the requirements of the applicable provisions of the GDPR, as well as an adequate level of the potential risk of data leakage, which we continuously evaluate.
Consent to providing services electronically
According to the provisions of Art. 10 section 2 of the Act of July 18, 2002 on the provision of electronic services (consolidated version: Collection of Laws from 2017, item 1219, as amended), hereinafter: UŚUDE, sending marketing content, including business information electronically, requires the interested party's consent to receive it. Such person must also consent to the use of telecommunications terminal equipment and automated calling systems, a requirement imposed by the provision of the Act of 16 July 2014 - The Telecommunications Act (Consolidated: Laws 2016, Item 542) , next: PT.
We would like to inform you that the expression of both of the above consents is given by providing your e-mail address and/or telephone number in the designated places in the contact forms.
At the same time, we would like to point out that the expression of consent mentioned above applies only to the sending of informational content to the e-mail address and/or telephone number provided by you. You can revoke the consents in question at any time. You can do this by contacting us on the contact details below. Withdrawing any consent will prevent us from further communicating with you related to the services we provide.
The provisions of this Privacy Policy are subject to change. The new privacy policy will be posted on the website along with the effective date.
To the extent not modified by this Personal Data Protection Policy, the provisions of the GDPR, UODO, UŚUDE, PT and the Act of April 23, 1964 - Civil Code (consolidated text: Collection of Laws from 2017, item 459, as amended) apply.
Any questions or concerns regarding this Privacy Policy should be directed to [email protected], by phone at 799 097 860 or by mail at our headquarters.
