Privacy policy

Privacy Policy and Cookie Policy

Table of Contents:

1. Privacy Policy:
2. Key terms.
3. Information about the Data Controller.
4. Personal data processing activities, including the purposes, legal bases, scope and duration of such processing.
5. Disclosure of personal data.
6. Rights of data subjects.
7. Security system.
8. Cookie Policy.
9. Analytics tools.

1. Privacy policy fulfillment.autopartner.com

The purpose of this policy is to provide information on what data is processed and how it is processed as part of the processes related to the operation of the fulfillment.autopartner.com website, as well as who to contact regarding such matters.

Should you require further information, please do not hesitate to contact us:

• by email:
• for matters relating to personal data protection, please email: dpo@autopartner.pl
• for technical matters relating to the operation of the website, please email: webmaster@autopartner.com
• korespondencyjnie: Auto Partner S.A. z siedzibą w Bieruniu,43-150 Bieruń, ulica Ekonomiczna 20.

1. BASIC TERMS:

User – any individual using thefulfillment.autopartner.comwebsite or the services available via the Website;

Personal data – any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

GDPR – Regulation (EU) (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.

SERVICE/Application/Website – fulfillment.autopartner.com

PERSONAL DATA CONTROLLER

The controller of your personal data is Auto Partner S.A., with its registered office in Bieruń (43-150) at 20 Ekonomiczna Street, entered in the Register of Entrepreneurs of the National Register of Entrepreneurs maintained by the District Court for Katowice — East, 8th Commercial Division, under KRS number 0000291327, maintained by the District Court for Katowice, NI 634-001-10-17.

• PERSONAL DATA PROCESSING PROCEDURES

Users’ personal data is processed for the following purposes:

1. USE OF THE WEBSITE – DATA COLLECTED BY THE WEBSITE AND MOBILE DEVICES

With regard to Users visiting the Website, the Controller also processes data necessary to ensure the ability to use the Website and its stable operation – including, in particular, enabling Users to log in to the Website using their credentials, verifying their validity, and administering the Website – as well as data necessary to ensure the security of the Website – including countering attempts at unauthorised access, misuse and breaches of system integrity.

The data collected may include, amongst other things: IP address, software and hardware parameters of the device used by the User, pages viewed, mobile device identification number and other data relating to devices and system usage, as well as other information collected via cookies or other similar technologies.

Personal data is processed whilst using the website (data collected by the website and mobile devices) for purposes arising from legitimate interests pursued by the Controller or by a third party (Article 6(1)(f) of the GDPR), which is to ensure that the Website operates correctly, stably and securely.

Providing your personal data is entirely voluntary; however, failure to do so may restrict access to certain features or complicate the process of accessing the services offered by the Controller.

Data processed for this purpose will be retained for the period necessary to fulfil the relevant interest or until the User lodges a valid objection to the processing of their data. In the case of cookies, data is stored until the relevant cookie expires or is deleted by the User. With regard to optional cookies, personal data will be processed until consent is withdrawn.

• PRESENTATION OF THE FULFILLEMNT SERVICE

The Controller processes the User’s personal data for the purpose of presenting the FULFILLEMNT service, including responding to enquiries, presenting a tailored commercial offer in accordance with the needs of the interested party contacting the Controller, and for the purpose of establishing a business relationship for the provision of FULFILLEMNT services, including placing an order, and the conclusion and performance of a service contract between the Controller and the User. This includes, in particular:

• responding to enquiries,
• preparing a commercial offer,
• maintaining further communication regarding fulfilment services,
• contacting the User by email or telephone in connection with the preparation of a commercial offer,
• asserting claims and defending against claims relating to the FULFILLMENT service offered.[BL1] 

The personal data collected and processed may include, amongst other things: first name and surname, the User’s address (country, street, house and flat number, town/city and postcode), email address, and telephone number. In addition, if an order is placed by a person carrying on a business, the personal data collected and processed may also include: tax identification number (NIP), company name, business address (country, street, house and flat number, town and postcode). In the case of product personalisation, the Controller processes additional data such as the specific characteristics of the goods covered by the fulfilment service, as well as information on the quantity of goods stored, the User’s area of operation and the intended delivery locations.

Personal data is processed for the above-mentioned purposes on the basis of:

• Article 6(1)(b) of the GDPR, i.e. necessity for the performance of a contract to which the data subject is a party, or to take steps at the request of the data subject prior to entering into a contract,
• Article 6(1)(c) of the GDPR, i.e. compliance with a legal obligation to which the Controller is subject – in particular, obligations arising from the Act of 26 July 1991 on personal income tax and the Act of 15 February 1992 on corporation tax,
• Article 6(1)(f) of the GDPR, i.e. the legitimate interests pursued by the Controller, which consist of establishing, pursuing or defending against claims by Users,
• Article 6(1)(a) of the GDPR in respect of optional data – i.e. the User’s consent.

The provision of personal data for this purpose is voluntary; however, the processing of such data is necessary for the conclusion and performance of the contract and for taking steps prior to entering into the contract. Refusal to provide personal data will hinder, or even prevent, the conclusion and performance of the contract or the taking of steps prior to its conclusion, which may result in the inability to fulfil the order in whole or in part.

Data processed for this purpose will be retained for the following periods:

• data processed on the basis of consent – until such time as consent is withdrawn. Withdrawal of consent does not affect the lawfulness of processing carried out prior to its withdrawal.
• for the duration of the contract, as well as for the period during which claims relating to the contract may arise, arising from the provisions of the Civil Code, tax law or other legal provisions, or where justified, until the User objects to our processing of personal data,
• data processed on the basis of a legitimate legal obligation incumbent on the Controller as specified by the relevant legal provisions – in accordance with the legal obligation in question.
• data processed on the basis of the Controller’s legitimate interest – for the period necessary to fulfil that interest or until the User lodges a valid objection to the processing of the data.

Where a User contacts us on behalf of other persons or provides the details of other persons as parties interested in the FULFILLMENT service, the User is obliged to provide the aforementioned persons with information regarding the Controller’s personal data processing practices, as set out in this Privacy Policy. In the above situation, it should be noted that the personal data of the persons on whose behalf an enquiry was made to the Controller were obtained from the person making the enquiry regarding the service.

• CONTACT WITH USERS (CONTACT FORM)

As part of the Website’s operation, the Controller also processes Users’ personal data for purposes related to ensuring direct contact between the Controller and Users via contact forms or communication channels (helpline, contact email), which enables them to obtain the information they need more quickly or to receive assistance, and in particular for the purposes of:

• recording messages received via the contact form,
• responding to Users’ enquiries,
• managing forms available on the Website, e.g. contact forms.

In order to facilitate contact, the Controller processes personal data including, in particular: first name and surname, email address, telephone number or other contact details (if provided by the User).

Personal data is processed on the basis of:

• Article 6(1)(b) of the GDPR, i.e. necessity for the performance of a contract to which the data subject is a party, or to take steps at the request of the data subject prior to entering into a contract,
• Article 6(1)(f) of the GDPR, i.e. the legitimate interests pursued by the Controller, which consist of the efficient handling of correspondence with Users not relating to the User’s offer.

Consent to the processing of the User’s personal data and the provision of such data is entirely voluntary; however, failure to provide such data or to give consent will make it impossible to contact the User or to provide them with the necessary information or assistance.

Data collected for this purpose will be processed:

• for the duration of the contract, as well as for the period during which claims relating to the contract may arise, arising from the provisions of the Civil Code, tax law or other legal provisions, or where justified, until the User objects to our processing of personal data,
• data processed on the basis of the Controller’s legitimate interest – for the period necessary to pursue that interest, i.e. to respond to the User or until the User lodges a valid objection to the processing of data.

• HANDLING COMPLAINTS AND ESTABLISHING, PURSING AND DEFENDING CLAIMS[BL2] 

The User’s data may also be processed for the purpose of handling complaints, as well as establishing, pursuing and defending claims relating to the operation of the Website.

The data collected may include, amongst other things: the User’s first name and surname, address, email address, as well as other data specified in the complaint.

As part of this activity, Users’ personal data is processed on the basis of Article 6(1)(f) of the GDPR, i.e. on the grounds that the processing of personal data is necessary for the purposes arising from the legitimate interests pursued by the Controller, namely the examination of complaints and the establishment, pursuit and defence of claims.

The provision of the User’s personal data for the above purpose is voluntary; however, failure to provide such data may prevent the User’s complaint from being processed or complicate the process of exercising their rights.

Data processed for this purpose will be retained for the period necessary to fulfil the relevant interest or until the User lodges a valid objection to the processing of their data.

• CONDUCTING STATISTICAL ANALYSES

The Controller also processes personal data for analytical purposes (conducting analyses of enquiries regarding the service), the development and improvement of the Website and its adaptation to Users’ needs, as well as for remarketing. This may include data used to determine how many Users have visited the website, how they arrived at it, and what topics they were interested in. This mechanism can be disabled in your browser settings.

Personal data is processed whilst using the website (data collected by the website and mobile devices) for purposes arising from legitimate interests pursued by the Controller or by a third party (Article 6(1)(f) of the GDPR), which are to improve the functioning of the Website and to strive to improve the quality of the products offered and services provided. With regard to optional cookies, personal data is processed on the basis of the User’s consent (Article 6(1)(a) of the GDPR).

Providing your personal data is entirely voluntary; however, failure to do so may restrict access to certain features or complicate the process of accessing the services offered by the Controller.

Data processed for this purpose will be stored until the User withdraws their consent or until it is no longer necessary for this purpose, but for no longer than 26 months. In the case of cookies, data is stored until the relevant cookie expires or is deleted by the User. With regard to optional cookies, personal data will be processed until consent is withdrawn.

• DISCLOSURE OF PERSONAL DATA
• Users’ personal data may be disclosed to entities cooperating with the Controller solely to the extent necessary to fulfil the processing purposes set out in this Privacy Policy.
• Recipients of the data may include, in particular:

• IT and hosting service providers responsible for maintaining the Website and technical infrastructure,
• entities providing services relating to the security of ICT systems,
• entities providing legal, advisory or audit services,
• authorities or entities to whom the data will be disclosed on the basis of the data subject’s consent,
• providers of marketing and analytics tools,
• entities belonging to the group of companies to which Auto Partner S.A. belongs, in the context of activities related to the business conducted by Auto Partner S.A. and solely in connection with the fulfilment of the purposes set out above, as well as on the basis of an appropriate agreement.
• public authorities or entities authorised to obtain data pursuant to statutory provisions.
• The aforementioned entities process data as:
• data processors acting on behalf of the Controller,
• independent data controllers.
• Personal data is not transferred to third countries or international organisations, unless this is necessary for the use of services provided by technology providers. The level of protection of personal data outside the European Economic Area (EEA) differs from that provided by European law. For this reason, the Controller transfers personal data outside the EEA only where necessary, and with an adequate level of protection, primarily through:
• cooperation with entities processing personal data in countries in respect of which a relevant European Commission decision has been issued confirming an adequate level of protection for Personal Data;
• the use of standard contractual clauses issued by the European Commission;
• the application of binding corporate rules approved by the competent supervisory authority.

The Controller shall always inform Users of its intention to transfer personal data outside the EEA at the time of collection.

The Controller does not sell Users’ personal data nor does it make it available to third parties for marketing purposes.

• RIGHTS OF DATA SUBJECTS

The Controller hereby informs you that, where processing is based on the User’s consent, the provision of personal data is voluntary. The User has the right to refuse to provide data; however, this may result in the inability to use certain features of the Website.

The User has the right to withdraw their previously given consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to its withdrawal. You may withdraw your consent to the processing of personal data by contacting us at the following email address: dpo@autopartner.pl.

Użytkownikom Strony fulfillment.autopartner.com przysługuje także prawo do:

• access their data and receive a copy of it,
• rectify (correct) their personal data,
• lodge a complaint with the President of the Personal Data Protection Office if they consider that their personal data is being processed in a manner inconsistent with data protection legislation.

In accordance with the provisions of the GDPR or other legislation on the protection of personal data, and in the cases specified by such legislation, you shall also have the right to:

• object to the processing of personal data,
• restrict the processing of personal data,
• erase personal data,
• transfer personal data.

If you have any queries regarding the rights to which you are entitled, or the possibilities or methods of exercising them, as well as in any other matters relating to the protection of personal data, please contact us:

• by email: dpo@autopartner.pl
• by post: Auto Partner S.A., ul. Ekonomiczna 20, 43-150 Bieruń (with ‘ODO’ marked on the envelope).
  • SECURITY SYSTEM.

The Controller carries out ongoing risk assessments to ensure that is processed by the Controller in a secure manner – ensuring, first and foremost, that only authorised persons have access to the data and only to the extent necessary for the performance of their duties.

The Controller ensures that all operations involving Personal Data are recorded and carried out only by authorised staff and associates.

The Controller takes all necessary measures to ensure that its subcontractors and other cooperating entities guarantee the application of appropriate security measures whenever they process personal data on behalf of the Controller.

The Controller shall implement appropriate technical and organisational measures to ensure the security of personal data in accordance with Article 32 of the GDPR. In particular:

1. Connection encryption – all data transmitted via the Website is protected by an SSL/TLS certificate, which prevents it from being intercepted by unauthorised persons.
2. Anti-abuse systems – measures are in place to prevent automated access and to stop mass and unauthorised activity on the website.
3. Firewalls and security systems – network traffic directed to the website is filtered and monitored to block attempts at unauthorised access, DDoS attacks or other security threats.
4. Content delivery networks – these are used to ensure the website operates quickly and to protect against overload and attacks.
5. Event monitoring and logging – the website’s systems record basic information about events (e.g. IP address, date and time of login, technical errors), which serves to ensure the security and integrity of the system and may be used for the purposes of investigating and defending against claims.

The Data Controller ensures that:

• the security measures in place are proportionate to the risks associated with data processing,
• data is stored in systems protected against unauthorised access,
• access to data is restricted to authorised persons who are bound by a duty of confidentiality,
• technical solutions are regularly updated and tested for effectiveness.

Automated decision-making and profiling:

The Controller does not make automated decisions regarding users that would produce legal effects on them or similarly significantly affect them. Profiling takes place solely through the use of cookies and similar technologies – for the purpose of analysing website traffic, tailoring content and advertisements to the user’s preferences, and improving the quality of our services. This profiling does not lead to decisions that produce legal effects on the user.

1. COOKIES

The Controller informs you that, whilst using the Website, small pieces of information – in particular text files known as ‘cookies’ – are stored on your device. ‘Cookies’ contain IT data such as: the User’s IP address, the name of the website from which they originate, the duration for which they are stored on the User’s end device, a record of device parameters and statistics, and a unique number. ‘Cookies’ are sent to the Website’s server via the web browser installed on the User’s device.

Cookies and similar technologies are not used to identify the User, and the User’s identity is not determined on the basis of them. Cookies and similar technologies may only constitute personal data when combined with other unique identifiers or other information enabling the identification of that natural person.

The Controller uses cookies to provide services, to tailor the website to users’ individual preferences, and for statistical and advertising purposes. This mechanism can be disabled in your browser settings. Using the website without changing your browser settings constitutes consent to the storage of cookies on your device.

‘Cookies’ are used on the Website in particular for the following purposes:

• to maintain the technical integrity and continuity of the session between the Website’s server and the User’s end device;
• optimising the User’s experience of the Website’s web pages and adapting how they are displayed on the User’s device;
• ensuring the security of use of the Website;
• collecting statistics on visits to the Website to help improve its structure and content;

Depending on their lifespan, the cookies used by fulfillment.autopartner.com can be divided into:

• session cookies – cookies stored on the User’s device until the User logs out or leaves the Website;
• persistent – files stored on the User’s device until the User deletes them or until the cookie expires on the date specified in the cookie’s specification.

The Controller and other entities providing services on its behalf (e.g. analytical and statistical services) use cookies for various purposes, which can be divided into the following categories:[BL3] 

• those necessary for using the Website,
• functional cookies, which enable the User’s preferences to be remembered, e.g. video player settings, recently viewed YouTube videos or the ability to share content on other devices[BL4] ,
• cookies containing data entered by the User (session ID) for the duration of the session;
• authentication cookies used for services requiring authentication for the duration of the session;
• cookies used to ensure security, e.g. those used to detect authentication fraud;
• session cookies for media players (e.g. Flash player cookies), for the duration of the session;
• cookies that facilitate the use of the website;
• persistent cookies used to personalise the User’s interface for the duration of the session or slightly longer;
• analytical cookies used to monitor website traffic, i.e. data analytics – these are cookies used to analyse how the User uses the Website, and to compile statistics and reports on the Website’s performance;
• Performance cookies, used to monitor and ensure the stability of the website’s operation, e.g. saving the session status in Google Analytics or unique identifiers in Microsoft Advertising;

• cookies used to log in to the Website via social media platforms;
• Advertising cookies are used to display personalised adverts and to measure the effectiveness of marketing campaigns.

Cookies enable sessions to be maintained, ensure the website functions and displays correctly, allow users to return to previously viewed pages, and enable the display of: maps showing how to get there, videos hosted on YouTube, and the integration of the website with social media.

THIRD-PARTY COOKIES

Third-party cookies are used exclusively for analytical and advertising purposes. Each cookie is described in terms of its purpose and provider, and you may withdraw your consent to their use at any time.

MANAGING COOKIES

On your first visit, a cookie information banner is displayed, allowing you to accept, customise or reject non-essential cookies. You can change your cookie settings at any time via the icon located in the bottom corner of the page. Cookies have a specified retention period; those that are not session cookies are automatically deleted. Third-party cookies are described in terms of their purpose and provider, and the User may withdraw their consent to their use at any time.

Most browsers automatically store cookies on the User’s device. Users may also manage the storage of cookies themselves, for example by changing their browser settings or deleting stored cookies. The level of protection against cookies can be set in each browser, up to and including the complete blocking of cookies. However, disabling or deleting cookies may mean that some features of our website do not work as intended. Cookies may be necessary for certain features of the fulfillment.autopartner.com website to function.

Information on how to disable cookies can be found using the help function in your browser. Disabling or deleting cookies applies only to the browser in which this action was performed. You will therefore need to repeat the process of disabling or deleting cookies in other browsers.

1. GOOGLE ANALYTICS

The fulfillment.autopartner.com website uses services that enable the analysis of how you use the website (hereinafter ‘analytics tools’) by utilising cookies. You may change your cookie settings at any time by adjusting your browser’s privacy settings.

GOOGLE ANALYTICS

Google Analytics is a statistics system that collects data on users visiting the website.

When analysing website traffic, Google Analytics collects data such as:

• how the user arrived at the website (via a search engine, a link from another site, or by manually entering the website address into their browser),
• the user’s physical location (country, city),
• what software the user is using (operating system, browser, type of device),
• how the user behaved on the website (how long they stayed on a particular page, how many pages they visited).

For detailed information on the principles under which Google Analytics collects and processes data, please visit: ‘How Google uses data collected when you use our partners’ websites and apps’ (available at www.google.com/policies/privacy/partners/ or at any other URL that Google may provide from time to time). You can opt out of Google Analytics by installing the plug-in provided by Google:: https://tools.google.com/dlpage/gaoptout.

CHANGES TO THE PRIVACY POLICY

In order to update the information contained in the Privacy Policy and to ensure its compliance with applicable legislation, the Privacy Policy may be amended. In the event of any changes to the content of the Privacy Policy, the date of the last update shown at the end of the document will be amended. The Controller recommends that Users review the provisions of the Privacy Policy on a regular basis.

This document was last updated on 2025-09-17.

---