Effective from: 10 October 2026
1. Data controller
The controller of your personal data is iD - Mateusz Ozimkowski, Plac Kolanowszczyzna 15/51, 87-800 Włocławek, Poland, tax ID (NIP) 8883171482, REGON 540183264, operating under the ViralCars brand (the Controller).
Contact: e-mail kontakt@viralcars.pl, phone +48 880 743 673, post to the registered address. The Controller has not appointed a data protection officer.
2. Purposes, legal bases and retention periods
In accordance with Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) we inform you that we process your data for the following purposes:
- Concluding and performing the contract for the promotion of listings, and contact about the order. Basis: Article 6(1)(b) GDPR. Period: until the contract is performed and settled, then as in the points below.
- Fulfilling legal obligations, including issuing invoices and keeping accounting and tax records. Basis: Article 6(1)(c) GDPR. Period: 5 years from the end of the year in which the tax obligation arose.
- Establishing, pursuing and defending claims, and handling complaints and withdrawals from the contract. Basis: Article 6(1)(f) GDPR (the Controller’s legitimate interest). Period: until the claims become time-barred.
- Handling enquiries sent before a contract is concluded. Basis: Article 6(1)(b) or (f) GDPR. Period: until the correspondence ends, and if a contract is concluded, as in the first point.
- Ensuring the security and correct operation of the Website (server logs). Basis: Article 6(1)(f) GDPR. Period: as resulting from server settings, no longer than necessary.
- Analytics and marketing, only if such tools are switched on and you consent in the cookie window. Basis: Article 6(1)(a) GDPR. Period: until consent is withdrawn or the cookies expire.
3. Scope of data and source
We process the data you provide in the order form or in correspondence: full name, phone number, e-mail address, link to the listing, the note and invoice details. We also process data contained in your listing (for example photos, description and, if included, contact details) to the extent necessary to prepare the promotional material. We obtain the data directly from you.
4. Whether providing data is voluntary
Providing data is voluntary but necessary to place an order and perform the contract. Without it we cannot fulfil the order.
5. Recipients of data
- Stripe Payments Europe, Ltd. (payment processing),
- SEOhost, PERSKIMEDIA Szymon Perski (hosting and e-mail),
- an accounting office or accountant,
- social platforms on which we publish promotional material (TikTok, Instagram, Facebook) and WhatsApp, if you use it,
- public authorities, where required by law.
6. Transfers outside the EEA
Data may be transferred to countries outside the European Economic Area (for example the USA) by providers such as Stripe, Meta and TikTok. The basis is standard contractual clauses or a European Commission adequacy decision. You may obtain a copy of the safeguards by contacting the Controller.
7. Your rights
Within the limits of the GDPR you have the right to:
- access your data and obtain a copy,
- rectify your data,
- erase your data,
- restrict processing,
- data portability,
- object to processing based on the Controller’s legitimate interest, on grounds relating to your particular situation,
- withdraw consent at any time where processing is based on consent (withdrawal does not affect the lawfulness of processing before it),
- lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.
To exercise your rights write to kontakt@viralcars.pl. We will respond without undue delay and in any case within one month.
8. Automated decision-making
We do not make decisions about you based solely on automated processing, including profiling.