Privacy policy

1. Data controller

The controller of your personal data is MASTERMOTORS NON PROFIT sp. z o.o., registered office in Kraków, ul. Henryka Siemiradzkiego 19/1, 31-137 Kraków, entered in the Register of Entrepreneurs of the National Court Register (KRS) under number 0001203095, kept by Sąd Rejonowy dla Krakowa-Śródmieścia w Krakowie, XII Wydział Gospodarczy Krajowego Rejestru Sądowego, NIP (tax ID) 6812115512, REGON 543144052, share capital 5 000,00 zł.

The MASTERMOTORS workshop operates at ul. Jasnogórska 135A, 31-358 Kraków. For any matter concerning personal data, write to [email protected] or call +48 791 136 823.

2. What data we process

• Contact form data: first name, phone number and, if you provide them, the selected service and your message (e.g. car make and model, description of the fault).
• Data from contact by phone, e-mail or messengers (WhatsApp, Facebook, Instagram) - to the extent you share it with us.
• Repair-related data: vehicle details (make, model, registration number, VIN, mileage) and invoicing details.
• Technical data: IP address, browser and device type, date and time of the visit - recorded in server logs and by site protection services.
• Data from cookies and similar technologies - described in the Cookie policy.

3. Purposes and legal bases

• Replying to your enquiry, preparing a quote and booking a visit - Art. 6(1)(b) GDPR (steps taken at your request before entering into a contract) and, for ordinary correspondence, Art. 6(1)(f) GDPR (our legitimate interest in handling enquiries).
• Performing the repair or service - Art. 6(1)(b) GDPR.
• Issuing invoices and keeping accounting records - Art. 6(1)(c) GDPR in connection with tax and accounting laws.
• Handling complaints and warranty claims, and establishing, pursuing or defending legal claims - Art. 6(1)(f) GDPR.
• Keeping the site secure and preventing abuse (server logs, bot protection) - Art. 6(1)(f) GDPR.
• Visit statistics (Google Analytics via Google Tag Manager) and marketing and ad measurement (Google Ads, Meta Pixel) - as far as cookies and identifiers are concerned, only on the basis of your consent, Art. 6(1)(a) GDPR in connection with Art. 399 of the Polish Electronic Communications Law.

4. How long we keep data

• Enquiries that did not lead to an order - up to 12 months from the last contact.
• Data related to a completed service - for the duration of the service, then until the warranty period and limitation periods for claims expire.
• Invoices and accounting documents - 5 years from the end of the calendar year in which the tax payment deadline passed.
• Server logs - no longer than 30 days, unless needed to investigate a security incident.
• Data processed on the basis of consent - until you withdraw it; the lifetime of individual cookies is described in the Cookie policy.

5. Who we share data with

We do not sell data. We share it only with providers that help us run the site and the workshop, and only to the extent necessary:

• Contabo GmbH (Germany) - the server that hosts the site.
• Cloudflare, Inc. - content delivery network, connection encryption and attack protection.
• Telegram - the messenger through which form submissions reach workshop staff.
• Resend, Inc. - sending e-mail notifications about new enquiries.
• Google Ireland Limited - e-mail (Gmail) and Google Tag Manager with Google Ads and Google Analytics tags; Google analytics and advertising cookies are set only after you consent.
• Meta Platforms Ireland Limited - Meta Pixel (cookies and events only after you consent to marketing cookies; events may be passed through a Meta Conversions API gateway running on Amazon Web Services), and handling messages on Facebook, Instagram and WhatsApp if you contact us there.
• Accounting office, law firm and IT service providers - where needed for bookkeeping, legal support or system maintenance.
• Public authorities - where required by law.

6. Transfers outside the European Economic Area

Some providers (Cloudflare, Resend, Google, Meta, Amazon Web Services, Telegram) may process data outside the EEA, including in the United States. Such transfers rely on a European Commission adequacy decision (EU-US Data Privacy Framework) or on standard contractual clauses approved by the European Commission. You can request information about the safeguards by writing to [email protected].

7. Your rights

You have the right to:

• access your data and obtain a copy,
• rectify inaccurate or incomplete data,
• erasure ("right to be forgotten"),
• restriction of processing,
• data portability for data processed on the basis of a contract or consent,
• object to processing based on our legitimate interest,
• withdraw consent at any time - without affecting the lawfulness of processing before withdrawal; you can change cookie consent with the "Cookie settings" button in the page footer,
• lodge a complaint with the President of the Polish Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl).

To exercise your rights, write to [email protected]. We will reply without undue delay and no later than within one month.

8. Do you have to provide data

Providing data is voluntary. However, without your name and phone number we cannot reply to a form enquiry, and without vehicle and invoicing details we cannot carry out and settle the repair.

9. Automated decisions and profiling

We do not make decisions about you based solely on automated processing that would have legal effects. If you consent to marketing cookies, Meta may use information about your visit to tailor the ads you see.

10. Changes to this policy

We may update this policy, e.g. when providers or laws change. The current version is always available on this page. The Polish version is legally binding.