Privacy Policy (Polityka prywatności)
Last updated: 4 June 2026
This Privacy Policy explains how DemidCars, a used-car dealership based in Kraków, Poland, processes the personal data of people who visit our website and use our contact / inquiry form, in accordance with Polish law and the EU General Data Protection Regulation (GDPR / RODO).
Data controller / Company details
1. Data controller (Administrator danych osobowych)
The controller of your personal data is DemidCars, a used-car dealership operating in Kraków, Poland. DemidCars sells verified vehicles from Europe on-site and imports cars to order. The exact business address, e-mail address and telephone number of the controller are shown on this page and in the Contact section of the website. Please use those contact details for any matter relating to the processing of your personal data.
2. What data we process (Jakie dane przetwarzamy)
When you use our contact / inquiry form, we process the data you provide in it: — your name; — your telephone number; — your e-mail address; — the content of your message. In addition, like most websites, our server automatically records standard technical data in its logs (for example IP address, date and time of the request, browser and device type). This data is used for the technical operation and security of the website and is not combined with the form data to identify you for any other purpose.
3. Purposes and legal grounds (Cele i podstawy prawne)
We process your personal data for the following purposes and on the following legal grounds under the GDPR (RODO): — to receive and answer your inquiry and to take steps at your request before entering into a contract — art. 6(1)(b) GDPR, and, where applicable, your consent given by sending the form — art. 6(1)(a) GDPR; — for our legitimate interests in handling correspondence with you, keeping records of contacts, and ensuring the security and proper functioning of the website — art. 6(1)(f) GDPR. Providing your data is voluntary, but it is necessary for us to respond to your inquiry — without it we cannot contact you back.
4. Data retention period (Okres przechowywania danych)
We keep your personal data only for as long as it is needed for the purpose for which it was collected. Data from the inquiry form is processed for the time required to handle your inquiry and any related correspondence. Afterwards it is deleted, unless we are required or entitled to keep it longer — for example to pursue or defend legal claims or to comply with a legal obligation, in which case it is kept for the period provided by law and then removed. Technical server logs are retained only for as long as needed for security and diagnostic purposes.
5. Recipients of the data (Odbiorcy danych)
We do not sell your personal data and we do not share it with third parties for their own marketing purposes. Your data may be made available only to entities that support us in operating the website and our business, in particular our hosting and IT service providers, who process the data on our behalf and under a data-processing agreement. Data may also be disclosed to authorised public bodies where this is required by law. We do not transfer your data outside the European Economic Area unless a recipient guarantees an adequate level of protection in line with the GDPR.
6. Rights of data subjects (Prawa osób, których dane dotyczą)
In connection with the processing of your personal data you have the right to: — access your data and obtain a copy of it; — rectify (correct) inaccurate or incomplete data; — erase your data ("right to be forgotten"); — restrict processing; — object to processing carried out on the basis of our legitimate interest; — data portability; — withdraw your consent at any time, where processing is based on consent (this does not affect the lawfulness of processing carried out before withdrawal). You also have the right to lodge a complaint with the supervisory authority — in Poland this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO).
7. Cookies (Pliki cookie)
Our website uses only essential / functional cookies that are necessary for the site to work correctly — for example a cookie that maintains the administrator's login session. We do not use marketing, advertising, profiling or third-party tracking cookies, and we do not build behavioural profiles of visitors. You can manage or delete cookies through your browser settings; please note that disabling essential cookies may affect how some parts of the website function.
8. Contact regarding your data (Kontakt w sprawie danych)
To exercise any of the rights described above, or to ask any question about how we handle your personal data, please contact us by e-mail at the address shown in the Contact section of the website. We will respond to your request without undue delay and within the time limits set out in the GDPR. We may ask you to confirm your identity before fulfilling a request, in order to protect your data.
This document is a template. Before publishing, we recommend having it reviewed by a lawyer and completing the company's full registration details.