Privacy policy | BKF CarWash

The data controller is:

BKF limited liability company, headquartered in Skarbimierzyce (Skarbimierzyce 22, 72-002 Dołuje, Poland), registered in the Register of Entrepreneurs of the National Court Register maintained by the District Court Szczecin-Centrum in Szczecin, XIII Commercial Division of the National Court Register, under KRS number: 0000262269 (NIP: 7822370146, REGON: 300392077), hereinafter referred to as BKF.

Purpose of data processing

Data is processed to the extent necessary and exclusively for the purpose of providing services via BKF’s systems, websites and applications, specifically:

to manage customer accounts in connection with the conclusion and execution of the Service Agreement (Account) or to take actions at the request of a prospective Customer before its conclusion,
to process Orders / Reservations, confirm their submission and execute the concluded agreement,
to conclude and execute the Sales Agreement or the Reservation Agreement,
to accept and process complaints,
to facilitate ongoing communication, in particular to respond to your enquiries,
to conduct contests, including selecting winners and awarding prizes,
to present advertisements, offers, information or promotions (discounts) related to the Administrator’s products or services, intended for all recipients, including the newsletter service,
to assess and analyse Customer activity and information, including through automated processing of Personal Data (profiling), in order to present general offers or promotions (discounts related to the Administrator’s products or services), intended for all recipients, in a way tailored to the interests of a given Customer without influencing their decisions,
market and statistical analysis,
to pursue claims and defend against claims of the parties and third parties,
to comply with legal obligations arising from regulations, such as tax and accounting laws,
to correspond with Customers, including through forms and surveys.

Type of data

The range of Personal Data that may be processed by the Administrator includes, in particular:

data of Customers and their employees, such as name, email address, phone number, city, country, residence / business address / registered office and tax identification number,
personal data provided for participation in contests, use of the contact form or submitted during complaint processing, such as name, email address, phone number, city, country, residence / business address / registered office and tax identification number,
data obtained on the basis of the Customer’s online activity or mobile application usage, including data collected via the Website, the Application or other communication channels with the Customer, using cookies and similar technologies.

Basis for processing personal data

The Administrator processes data lawfully, collects it for specified, lawful purposes and does not subject it to further processing that is inconsistent with these purposes. Data is collected only to the extent adequate, necessary and required for the purposes for which it is processed. The Administrator does not process special categories of personal data.

The data subject has the right to request access to their personal data, its rectification, erasure or restriction of processing, as well as the right to object to processing in cases specified by law and the right to data portability. The data subject also has the right to lodge a complaint with the supervisory authority in case of unlawful processing of their personal data. If processing is based on the Customer’s consent, they have the right to withdraw consent at any time. However, withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

Providing Personal Data is voluntary, but may be necessary, for example, to place an Order and process it (conclude and execute a Sales Agreement) or to register an Account. The scope of data required to conclude the relevant agreement is always specified in advance on the Website (we indicate which data is necessary to conclude the agreement or use a particular functionality) or through other communication channels. The consequence of not providing Personal Data may be the inability to complete the above actions successfully.

To present general advertisements, offers or discounts intended for all Customers in a way tailored to the interests of a given user, the Administrator may analyse their preferences, for example by examining how often they visit the Website or which products they are interested in. This helps to better understand Customer expectations and adapt to their needs without significantly influencing their decisions. Thanks to advanced technologies, these actions are often performed automatically, ensuring that the content sent is up to date and that Customers can quickly familiarise themselves with it.

Storage period of personal data

Your personal data is stored until your User Account is deleted from the Service. The account may be deleted at your request, but also if you withdraw your consent to data processing, object to the processing of your personal data or request its erasure.

Only archived information on the transactions you have concluded will remain in our systems, as its retention may be necessary, for example, for your claims (e.g. under warranty) and to comply with the legal regulations applicable to us.

Recording of telephone conversations

Telephone conversations are recorded to ensure the highest quality of service.
All incoming and outgoing calls are subject to monitoring.
The legal basis for processing personal data is the consent of the calling person, expressed by continuing the conversation, or the consent given in the enquiry form (car wash configurator).
Recordings are stored for 30 days.
If a recording serves as evidence in legal proceedings, or if the Administrator learns that it may serve as evidence, the retention period is extended until the final conclusion of the proceedings.
Recorded conversations will be made available only to authorised persons and authorities.

Recipients of data

The list of recipients of Personal Data processed by the Administrator primarily depends on the range of services used by the Customer.

The list of data recipients also results from the Customer’s consent or legal provisions, and is specified in more detail by the actions the Customer takes on the Website and in the Application. BKF Partners may participate in the processing of Personal Data to a limited extent, in particular those who technically assist in operating the Website or Application efficiently, such as hosting or IT service providers, carriers or intermediaries handling order shipments, entities processing electronic or card payments on the Website and in the Application, software service providers, companies supporting the Administrator’s marketing campaigns, and legal or consulting service providers.

Cookies

The Website uses “cookies” – small files that allow the device used to browse the Internet (e.g. a computer or smartphone) to store information about that device and your choices. We divide cookies into the following categories:

Necessary – required for the Website to work properly, including to remember your cookie choices. They do not require consent and cannot be disabled.
Analytics – allow us to analyse how the Website is used (Google Analytics, Google Tag Manager). Loaded only after you give your consent.
Marketing – allow us to display personalised advertisements and measure their effectiveness (Meta Pixel, Google Ads). Loaded only after you give your consent.

You give (or refuse) consent to analytics and marketing cookies on your first visit to the Website, using the cookie banner. You can change your choice at any time by clicking “Cookie settings” in the page footer. You can also change your cookie settings in your web browser – this may, however, limit the functionality of the Website.

Plugins

Websites and Applications may contain plugins from other electronic service providers, such as Facebook, Instagram or Google. The electronic services provided by these platforms are based on the rules specified in their terms of use, while their privacy rules are determined by the privacy policies in effect on these portals.

Data protection statement for Google Analytics

Our websites may use web analytics services provided by Google Inc.: Google Analytics, Google Double Click and Google Tag Manager, which use cookies to analyse how users interact with websites. Information collected by cookies is transferred to Google servers only after you consent to analytics cookies (Google Consent Mode). Users can block the storage of cookies in their web browser. In such cases, however, full use of all website functions will not be possible.

Because of the mechanisms described above, the recipients of your data may include entities providing services outside the European Economic Area (EEA), in particular Google LLC, based in the USA. As the controller of your data, we ensure that we apply appropriate safeguards to data transferred to third parties outside the EEA and require the same of the third parties we work with.

Spam protection of forms (Cloudflare Turnstile)

Forms on the Website are protected against automated submissions by the Cloudflare Turnstile service, provided by Cloudflare, Inc., based in the USA. When a form is submitted, the service processes technical data, such as the IP address and information about the browser and device, solely to tell a human from a bot. The legal basis for processing is the Administrator’s legitimate interest in protecting the Website against abuse.

The recipient of your data may therefore be an entity providing services outside the European Economic Area (EEA). Cloudflare applies the standard contractual clauses approved by the European Commission. For details, see the Cloudflare privacy policy: cloudflare.com/privacypolicy.

Contact regarding personal data

You can submit any requests or enquiries regarding personal data:

by email: iod@bkf.pl,
by post: BKF Sp. z o.o., Skarbimierzyce 22, 72-002 Dołuje, Poland.