PRIVACY POLICY WEBSITE WWW.ALTEAUTOMOTIVE.EU

1. The protection of User's personal data is of the utmost importance to the Owner of this website. Every effort is made to ensure that Users feel safe when entrusting their personal data during the use of this website.

2. The User is an individual, legal entity, or an unincorporated legal entity vested with legal capacity, using electronic services provided within the website.

3. This privacy policy explains the principles and scope of processing User's personal data, their rights, as well as the obligations of the data administrator and provides information about the use of cookies.

4. The Administrator employs state-of-the-art technical means and organizational solutions to ensure a high level of protection for the processed personal data and to safeguard against unauthorized access.

I. PERSONAL DATA ADMINISTRATOR

The administrator of personal data is Alte Automotive Sp. z o.o., with its registered office at: Zakopiańska 112, 30-435 Kraków,, entered into the register of entrepreneurs maintained by the District Court for Kraków - Śródmieście in Kraków, Commercial Division XI, under the KRS number: 0001018363, NIP: 6751777637 (hereinafter referred to as the "Owner"). 

II. PURPOSE OF PROCESSING PERSONAL DATA

1. The Administrator processes User's personal data for the following purposes:

   • To take actions before entering into a contract and for the performance of a contract.
   • To fulfill legal obligations related to the settlement of concluded contracts and accounting, as well as archiving tax documentation.
   • For other purposes related to business activity, including the realization of legally justified interests associated with sending marketing information and exchanging information through prepared service surveys to assess service quality and the quality of services provided, as well as, if necessary, pursuing claims related to the conclusion of this contract or cooperation with economic intelligence agencies to verify the reliability and solvency of the Client.
   • Based on consent - for purposes specified in the content of the consent.

2. This means that this data is necessary, in particular, for:

   a. Registration on the website; b. Conclusion of a contract; c. Settlements; d. Delivery of goods ordered by the User or the provision of services; e. The use of all consumer rights (e.g., withdrawal from the contract, warranty).

3. The User may also give consent to receive information about news and promotions, which will result in the Administrator processing personal data to send the User commercial information, including new products or services, promotions, or sales.

4. Personal data is also processed to fulfill legal obligations imposed on the data administrator and to perform tasks in the public interest, including ensuring security and defense capability or storing tax documentation.

5. Personal data may also be processed for direct marketing of products, securing and pursuing claims, protecting against User or third-party claims, as well as marketing the services and products of third parties or their own marketing, which is not direct marketing.

III. TYPES OF DATA

1. The Administrator processes the following personal data, which are necessary for:

   a. Registration on the website:

   • Name and surname;
   • Email address.

2. b. Conclusion of purchases through the website:

   • Name and surname;
   • Gender;
   • Delivery address;
   • Phone number;
   • Email address.

3. c. Additional data provided by the User:

   • Date of birth;
   • PESEL number (in case of a request for an invoice);
   • NIP number (in case of a request for an invoice for a business entity).

4. In the case of contract withdrawal or complaint recognition, when the refund is made directly to the User's bank account, the Administrator also processes information about the bank account number for the purpose of refunding the payment.

IV. LEGAL BASIS FOR PROCESSING PERSONAL DATA

1.

1. Personal data is processed in accordance with the provisions of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), OJ L 119, 4 May 2016, p. 1–88, hereinafter referred to as "GDPR."

2. The Administrator processes personal data only after obtaining the User's prior consent, expressed at the time of registration on the website or at the time of confirming a transaction made on the website.

3. Giving consent for the processing of personal data is entirely voluntary, but failure to provide it prevents registration on the website and making purchases through the website.

V. USER RIGHTS

1. The User can request information from the Administrator about the scope of processing of their personal data at any time.

2. The User can request the correction or rectification of their personal data at any time. The User can also do this independently after logging into their account.

3. The User can withdraw their consent for the processing of their personal data at any time without specifying a reason. The request not to process data may pertain to a specific purpose of processing indicated by the User, such as withdrawing consent to receive commercial information, or it may pertain to all purposes of data processing. Withdrawing consent for all purposes of processing will result in the User's account being deleted from the website, along with all personal data processed by the Administrator. Withdrawal of consent does not affect previous actions.

4. The User can request the deletion of their data at any time without specifying a reason. The request to delete data does not affect previous actions. Deleting data means simultaneously deleting the User's account, along with all data previously stored and processed by the Administrator.

5. The User can express objection to the processing of their personal data at any time, both for all personal data processed by the Administrator and for a limited scope, for example, regarding the processing of data for a specific purpose. Expressing objection does not affect previous actions. Raising an objection will result in the deletion of the User's account, along with all data previously stored and processed by the Administrator.

6. The User can request a restriction on the processing of their personal data, either for a specific period or without a time limit but within a specific scope, which the Administrator must comply with. This request does not affect previous actions.

7. The User can request the transfer of their personal data to another entity. To do so, the User should send a request to the Administrator, indicating the name and address of the entity to which the User wants their personal data to be transferred and specifying the specific data the User wishes the Administrator to transfer. After the User confirms their request, the Administrator will electronically transfer the specified personal data to the designated entity. The confirmation of the User's request is necessary for data security and to ensure that the request comes from an authorized person.

8. The Administrator will inform the User of the actions taken within one month of receiving one of the requests mentioned in the preceding points.

VI. RETENTION PERIOD OF PERSONAL DATA

1. Generally, personal data is stored only for as long as necessary to fulfill contractual or statutory obligations for which they were collected. This data will be deleted immediately when its storage is no longer necessary for evidentiary purposes under civil law or due to a legal obligation to retain data.

2. Information related to agreements is retained for evidentiary purposes for a period of three years, starting from the end of the year in which the business relationship with the User was terminated. Data deletion will occur after the statutory limitation period for contractual claims has expired.

3. Additionally, the Administrator may keep archival information about transactions since their storage is related to claims that the User may have, for example, under warranty.

4. If no agreement has been concluded between the User and the Owner, the User's personal data is stored until the User's account on the website is deleted. The account can be deleted at the User's request, withdrawal of consent for the processing of personal data, or objection to the processing of this data.

VII. DATA PROCESSING DELEGATION TO OTHER ENTITIES

1. The Administrator may delegate the processing of personal data to entities cooperating with the Administrator, to the extent necessary for transaction fulfillment, such as preparing ordered goods, delivering shipments, or transmitting commercial information from the Administrator (the latter applies to Users who have consented to receive commercial information).

2. Apart from the purposes stated in this Privacy Policy, the personal data of Users will not be provided to third parties or transferred to other entities for the purpose of sending marketing materials from those third parties.

3. Personal data of website Users will not be transferred outside the European Union.

4. This Privacy Policy complies with the provisions arising from Article 13(1) and (2) of the GDPR.