1. Controller
The controller of your personal data is DiagsoCar – Krzysztof Sokołowski, ul. Zawady 44D, 97-400 Bełchatów, Poland, NIP 7692256327, REGON 544180660. Contact on all data protection matters: diagsupport@diagsocar.com.
2. What data we process
- identification and contact data: first and last name, e-mail address, phone number, address;
- order data: products, amounts, payment status, order number, declarations made at checkout (we never see full card numbers – they are handled only by Stripe);
- data needed for a specific service, e.g. the vehicle VIN or files you send us (FA/SVT, D-Flash);
- tax ID (if you request an invoice);
- content of communication with us (e-mail, WhatsApp, Telegram, live chat);
- technical data: IP address, browser data, and data stored in cookies or similar technologies as described in the Cookie Policy, including your language preference.
3. Purposes and legal bases
- concluding and performing the contract – orders, remote services, delivery of digital content, contact about the order (Art. 6(1)(b) GDPR);
- accounting and tax obligations, e.g. invoices (Art. 6(1)(c) GDPR);
- handling complaints and withdrawals, establishing, pursuing or defending claims, securing the Shop and preventing payment fraud – our legitimate interest (Art. 6(1)(f) GDPR);
- live chat, analytics and marketing tools – your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time without affecting the lawfulness of processing carried out before withdrawal.
4. Recipients
- the hosting provider (Hostinger) and IT service providers;
- Stripe Payments Europe, Limited – payment processing and fraud prevention;
- our accounting office;
- providers of the communication channels you choose (e-mail, WhatsApp, Telegram, SMS);
- LiveChat (Text S.A.) – the customer chat widget, only after functional consent;
- Google (Google Ads), if implemented – only after marketing consent;
- content delivery networks used to load page resources (e.g. the Tailwind CSS CDN), which receive your IP address when a page loads.
5. Transfers outside the EEA
Some recipients (e.g. Stripe, Google or communication providers) may process data outside the European Economic Area. Such transfers are based on an adequacy decision of the European Commission (e.g. the EU-US Data Privacy Framework for certified companies) or on standard contractual clauses approved by the Commission.
6. Retention period
- contract data – for the duration of the contract and then until any claims become time-barred;
- accounting documents – for the period required by tax law (5 years from the end of the tax year);
- data processed on the basis of consent – until you withdraw your consent;
- cookies and similar technologies – for the periods stated in the Cookie Policy.
7. Your rights
You have the right to access your data, to rectification, erasure and restriction of processing, to data portability, to object to processing based on our legitimate interest, and to withdraw consent at any time. To exercise your rights, contact diagsupport@diagsocar.com.
You also have the right to lodge a complaint with a supervisory authority – in Poland the President of the Personal Data Protection Office (PUODO), or the authority in the EU country where you live or work.
8. Is providing data mandatory?
Providing data is voluntary but necessary to place and perform an order – without it we cannot conclude or perform the contract.
9. Automated decision-making
We do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you.
10. Cookies
We use cookies and similar technologies as described in the Cookie Policy. You can change your choice at any time: .
11. Security and changes
We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss or destruction. This Privacy Policy may be updated; the current version is always available on this page.
This Privacy Policy has been prepared as a draft and requires a final legal review before publication.