Privacy policy

This policy explains how ZALAR SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ (“Zalar”, “we”, “us”) uses personal data when you visit zalar-pl.com, send a request through the form, write to us or call us. It is written under Regulation (EU) 2016/679 (General Data Protection Regulation, “GDPR”) and the Polish Act of 10 May 2018 on the protection of personal data.

1. Controller

The controller is ZALAR SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, ul. Legionów 8, 05-091 Ząbki, Poland, KRS 0001267873, NIP 1251816099, REGON 545809403. Email: zalarspzoo@gmail.com, phone: +48 697 921 640.

2. What data we process

• Requests (form, email or phone): your name, email address and/or phone number, the city if you give it, the make, model and year of the car, what you need (printed wrap kit, PPF kit, paint), the parts you choose, your colour or design notes and anything you write in your message.
• Correspondence: the content of emails and calls about your request.
• Technical data: when the site is delivered, our hosting provider processes your IP address, browser type, the page requested and the time of the request, for security and delivery of the site.

When you press “Send request” in the form, the details you entered are sent to our website and stored in a database hosted by Cloudflare so that we can reply to you. To protect the form from automated spam, a one-way coded (hashed) form of your IP address is stored with the request and used only to limit how many requests can be sent in a short time. If the form cannot be sent, it offers to prepare an email to zalarspzoo@gmail.com instead, which you send from your own email account or app.

3. Purposes and legal bases

• To reply to your request and prepare an offer — Article 6(1)(b) GDPR (steps taken at your request before entering into a contract).
• To answer other questions, keep our correspondence in order and keep the website secure — Article 6(1)(f) GDPR (our legitimate interests in running the business and the site).
• To keep accounting and tax records where an order follows — Article 6(1)(c) GDPR (legal obligation).

4. How long we keep data

We keep requests and correspondence for as long as needed to deal with the request. Requests sent through the form are deleted from the website database automatically 12 months after they arrive. If no order follows, we delete the rest of the correspondence within 12 months of our last contact. If an order follows, records are kept for as long as Polish accounting and tax law requires. Hosting logs are kept by the provider for a short period for security purposes.

5. Who receives data

Cloudflare, Inc. hosts and delivers this website and stores the requests sent through the form, as our processor and on our behalf. Your email provider and ours deliver the emails you send us. If an order follows, the carrier that delivers the parcel receives the name, address and phone number needed for delivery. We do not sell personal data and do not share it for marketing.

6. Transfers outside the EEA

Cloudflare may process technical data and stored requests outside the European Economic Area, including in the United States. Such transfers rely on the EU-US Data Privacy Framework where the recipient is certified, or otherwise on the Standard Contractual Clauses adopted by the European Commission.

7. No cookies, no tracking

The website sets no cookies and uses no analytics, advertising or tracking tools. There is no profiling and no automated decision-making. See the Cookie policy.

8. Your rights

Under Articles 15–22 GDPR you have the right to access your personal data, to have it corrected or erased, to restrict its processing, to data portability and to object to processing based on our legitimate interests. Giving your data is voluntary, but without contact details we cannot reply to a request. To use any of these rights, contact us at zalarspzoo@gmail.com. We reply within one month.

9. Complaints

You have the right to lodge a complaint with the supervisory authority: the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.

10. Changes

We may update this policy when the website or our processing changes. The date at the top shows the latest version.