Privacy policy

Personal Data Processing Policy

We are responsible for processing the personal data entrusted to us in accordance with the principles set out in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ L 119, 4.05.2016, p. 1) (hereinafter referred to as GDPR). The following information clause has been established regarding the protection of personal data.

We process data in a fair, lawful, and secure manner, ensuring that processing does not infringe on rights or freedoms.

Data Controller

The Data Controller is the owner of the CCARS®️ brand – VOID sp. z o.o., headquartered in Warsaw (00-526), Poland, Tax Identification Number (NIP): 7011099951 (hereinafter: the Controller). The Controller can be contacted via email at biuro@ccars.pl.

Legal Basis for Data Processing

All personal data processing is based on an appropriate legal basis in accordance with applicable regulations. The Controller processes personal data:

• For the purpose of concluding and performing vehicle rental agreements and passenger transport services involving the data subject (legal basis: Article 6(1)(b) of the GDPR).
• To fulfill legal obligations arising from the nature of its business, such as issuing invoices and meeting accounting and tax obligations (legal basis: Article 6(1)(c) of the GDPR).
• For business communication related to offering the Controller’s products and services (legal basis: Article 6(1)(f) of the GDPR).

Confidentiality and Scope of Data Processing

All information provided to the Controller for service delivery is treated as confidential. The personal data processed include identification data: name, surname, email address, phone number, residential/business address, service start/end address, and tax identification number (NIP). Personal data will not be shared with other recipients except for:

• Entities authorized by law in response to a valid legal request.
• Entities processing data on behalf of the company, such as insurance companies, law enforcement, and emergency services.

Data Transfer Outside Poland

The Controller does not transfer data outside of Poland.

Voluntary Nature of Data Submission

Providing personal data is voluntary but necessary for contract execution and service delivery.

Data Retention Period

Personal data is processed until the expiration of the limitation period for claims arising from the concluded contract. Data processed for marketing purposes is stored until an objection to further processing is raised.

Data Subject Rights

The data subject has the right to:

• Access their personal data and obtain a copy.
• Rectify, restrict processing, transfer, or withdraw consent for data processing.

Right to File a Complaint

The data subject has the right to file a complaint with the President of the Personal Data Protection Office (PUODO).

Cookies Security Policy

To ensure the proper functioning of the CCARS.PL website (hereinafter referred to as the website), a cookies security policy is implemented. This policy is directed at website users and defines the type, scope, and method of using cookies, as well as the rights and obligations of users.

The administrator of cookies is the owner of the CCARS®️ brand – VOID sp. z o.o., headquartered in Warsaw (00-526), Poland, Tax Identification Number (NIP): 7011099951.

Cookies are files stored on the user’s device while browsing the website, saving and remembering data. Cookies enable the identification of the user’s device, allowing the website to adapt to the user’s preferences. These files are stored for a specific period, with the option of manual deletion from the browser at any time. When using the website, cookies are collected automatically and include information such as the operating system and browser data. This data may be recorded in server logs at the hosting operator and is used to optimize the website, create statistics, and customize displayed information according to user preferences.

The Administrator informs users that it is possible to browse the website without using cookies by enabling the appropriate settings in the user’s web browser. Consent to store and access cookies is provided by the user’s browser settings.

The Administrator also states that the website is encrypted with an SSL Certificate, ensuring encryption of website data. Cookies are collected automatically and include information such as the operating system and browser data. This data may be recorded in server logs at the hosting operator and is used to optimize the website, create statistics, and customize displayed information according to user preferences.