- Renault Parts
- Citroën Parts
- Peugeot Parts
- Dacia Parts
- Body parts
- Filters
- Lighting
- Engine and accessories
- Electrical system | Ignition
- Braking system
- Steering system
- Drive system
- Fuel system
- Exhaust system
- Suspension system | shock absorption
- Heating ventilation air conditioning
- Car blowers | Fans
- Air conditioning hoses
- Parking heaters
- Wipers and washers
- Interior fittings
- Additional equipment | Car accessories
- News
- Sale
Privacy policy
Privacy Policy CarFrance24.com (GDPR)
Effective date: 01.10.2025
We respect the privacy of users of our online store www.carfrance24.com (“Store”). This document explains what data we collect, for what purposes, on which legal basis, and what rights you have.
Table of Contents
-
Data Controller and Contact
-
Scope and Definitions
-
Categories of Data
-
Purposes and Legal Bases of Processing
-
Newsletter and Marketing Communication
-
Cookies and Analytics
-
Data Recipients
-
Transfers outside the EEA
-
Data Retention
-
Your Rights
-
Data Security
-
Changes to this Policy
-
Contact for Data Matters
1. Data Controller and Contact
Data Controller: CarFrance24.com, ul. Jesionowa 13, 43-300 Bielsko-Biała, Poland, Tax ID (NIP): 5471966348.
📧 Email: [email protected] | ☎️ Phone: +48 790 430 356
2. Scope and Definitions
We process personal data of users visiting the Store, making purchases, creating an account, subscribing to the newsletter, or contacting us.
We comply with the GDPR (EU 2016/679) and the Polish Personal Data Protection Act.
3. Categories of Data
-
Identification data: first name, last name, company/VAT number (for business purchases).
-
Contact and address data: email, phone number, delivery/billing address.
-
Transaction data: order number, payment method, amounts, statuses (we do not process full card data – these are handled by the payment operator).
-
Account data: login, encrypted password, order history.
-
Technical data: IP address, cookies/SDK identifiers, browser/device information, server logs.
-
Marketing preferences: consents, unsubscribes, email open history (if newsletter).
4. Purposes and Legal Bases of Processing
| Purpose | Legal Basis (GDPR) | Example Data |
|---|---|---|
| Order fulfillment and customer service | Art. 6(1)(b) – contract | identification, contact, address, transaction |
| Invoicing, taxes, warranty/complaints | Art. 6(1)(c) – legal obligation | identification, address, transaction, correspondence |
| Account creation and maintenance | Art. 6(1)(b) | email, login, password (hash), history |
| Direct marketing (own services) | Art. 6(1)(f) – legitimate interest | email, purchase history (segmentation without automated decisions) |
| Newsletter | Art. 6(1)(a) – consent | email, open/click data |
| Security and statistics (logs, fraud prevention) | Art. 6(1)(f) | IP, logs, cookie identifiers |
We do not make decisions based solely on automated processing, including profiling, that produce legal effects or significantly affect you (Art. 22 GDPR).
5. Newsletter and Marketing Communication
-
Subscription to the newsletter requires explicit consent.
-
Consent may be withdrawn at any time (link in the footer of each email or by contacting us).
-
Emails may include discount codes, product availability information, or updates about the Store.
6. Cookies and Analytics
The Store uses cookies and similar technologies for technical, analytical (e.g. Google Analytics), and internal marketing purposes.
You can manage or delete cookies in your browser settings.
Restricting cookies may affect certain Store functionalities (cart, login).
For more details, see our Cookies Policy (if available) or contact us.
7. Data Recipients
Data may be shared only to the extent necessary:
-
with payment operators (e.g. imoje / ING Bank Śląski S.A.),
-
with courier and postal companies (delivery),
-
with hosting and IT solution providers (Store maintenance, mailing),
-
with accounting offices, legal advisors – when required.
We do not sell your data to third parties for direct marketing.
8. Transfers outside the EEA
As a rule, data is not transferred outside the European Economic Area.
If we use providers outside the EEA, transfers are made only:
-
to countries covered by a European Commission adequacy decision, or
-
on the basis of Standard Contractual Clauses (SCCs) approved by the European Commission.
9. Data Retention
-
Tax/accounting documents – for the legally required period (usually up to 5 years).
-
Account data – until account deletion.
-
Transaction/complaint data – for the duration of rights (warranty/legal claims) and mandatory archiving period.
-
Newsletter/marketing – until consent is withdrawn or objection is raised.
-
Cookies/logs – up to 24 months or until deleted by the user.
10. Your Rights
You have the right to:
-
access your data,
-
rectify data,
-
erase data (“right to be forgotten”),
-
restrict processing,
-
data portability,
-
object to processing (including direct marketing),
-
withdraw consent at any time.
You also have the right to lodge a complaint with the supervisory authority: President of the UODO (uodo.gov.pl).
To exercise your rights: 📧 [email protected]
11. Data Security
We apply technical and organizational measures adequate to the risks, such as SSL/TLS certificates, password encryption, access control, backups.
We cooperate only with entities ensuring an appropriate level of data security.
12. Changes to this Policy
We reserve the right to update this policy.
In case of significant changes, we will inform you on the Store’s website and, if necessary, by email (if you consented to be contacted).
13. Contact for Data Matters
CarFrance24.com, ul. Jesionowa 13, 43-300 Bielsko-Biała, Poland
📧 Email: [email protected] | ☎️ Phone: +48 790 430 356
For consumer disputes, you may use the European Commission’s Online Dispute Resolution platform: ec.europa.eu/odr.