Privacy policy

1. Data controller

The controller of personal data is MAKE MORE GREEN SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, with its registered office at ul. Grzybowska 2 / 85, 00-131 Warszawa, NIP: 5214019382, REGON: 525300431, KRS: 0001035866.

2. Contact for privacy matters

For matters concerning personal data, you can contact us by email: biuro@azjaauto.com.

3. Sources of data

We receive data primarily directly from you: through forms, consultation bookings, the delivery tracking form, email correspondence, telephone calls or messages sent through a messaging service. For orders, data may also come from a person representing the customer, an advisor handling the order or documents required to provide the service.

4. Categories of data

We may process the following categories of data:

• identification and contact details, including your full name, email address and telephone number,
• the content of your enquiry, the consultation topic and your preferences regarding the car, finance or delivery,
• details of the selected vehicle, the order number, order status and delivery information, where needed to serve the customer,
• billing and tax information and documents required to enter into or perform a contract,
• contact or marketing consents, where given,
• basic technical data relating to use of the website, such as the IP address, browser type, device settings, session identifiers, cookies and data stored in localStorage.

5. Purposes and legal bases

• handling enquiries, contact with an advisor and preparing an offer — Article 6(1)(b) GDPR (RODO) where the contact is intended to lead to a contract, or Article 6(1)(f) GDPR (RODO) where we respond to a general enquiry,
• booking a consultation, creating a calendar event, sending confirmation and a link to an online meeting — Article 6(1)(b) GDPR (RODO) or Article 6(1)(f) GDPR (RODO),
• verifying delivery status using the order number and email address — Article 6(1)(b) GDPR (RODO) or Article 6(1)(f) GDPR (RODO),
• fulfilling an order, after-sales service and organisational contact — Article 6(1)(b) GDPR (RODO),
• billing, accounting, taxes and obligations arising under the law — Article 6(1)(c) GDPR (RODO),
• safeguarding claims, retaining evidence, website security and preventing misuse — Article 6(1)(f) GDPR (RODO),
• analytics and marketing using optional tags or cookies — Article 6(1)(a) GDPR (RODO) where consent is required, or Article 6(1)(f) GDPR (RODO) for basic, essential statistics on the operation of the service,
• marketing contact by email or telephone — based on consent given, where such consent is required by specific legal provisions.

6. Recipients of data

Data may be received by organisations that help us operate the service and serve customers: providers of hosting, email, IT systems, calendar and online meeting systems, analytics tools, accounting, legal, finance, payment, transport, customs clearance or delivery services. Data may also be shared with entities authorised under the law.

When booking a consultation, the website may use Google Calendar and Google Meet to check availability, create an event and send a meeting confirmation. Public pages may use Google Tag Manager and analytics or marketing tools in accordance with the user’s consent settings.

7. Transfers outside the EEA

If we use tools from providers that may process data outside the European Economic Area, data transfers are subject to the safeguards required by the GDPR (RODO), in particular standard contractual clauses, adequacy decisions or other appropriate mechanisms.

8. Retention period

We retain data for as long as necessary to handle the matter or fulfil the contract or order, and subsequently for the period required by law or the applicable limitation period for claims. Data from requests for offers and consultation bookings is retained for as long as needed to handle the contact and maintain the subsequent business relationship, unless you first make a valid request for deletion and there is no other basis for continued processing. We retain billing data for the period required by tax and accounting regulations. Data processed on the basis of consent is retained until that consent is withdrawn, while information about the consent itself may be retained to demonstrate that it was given or withdrawn.

9. Rights of data subjects

The person to whom the data relates has the right to access it, receive a copy, have it rectified or erased, restrict processing, obtain data portability, object to processing based on legitimate interests and withdraw consent at any time where processing is based on consent. Withdrawing consent does not affect the lawfulness of processing carried out before its withdrawal.

10. Complaint to the supervisory authority

If you believe that your data is being processed unlawfully, you may lodge a complaint with the President of the Personal Data Protection Office at ul. Stanisława Moniuszki 1A, 00-014 Warszawa.

11. Voluntary provision of data

Providing data is voluntary, but it may be necessary to respond to an enquiry, prepare an offer, arrange a meeting, display delivery status or fulfil an order. Without contact details, we cannot respond, and without the data required for an order, it may not be possible to enter into or perform the contract.

12. Automated decisions

We do not make decisions about users based solely on automated processing that would produce legal effects or similarly significant effects on the user.