Effective from: 10 October 2026
1. General information
This Privacy Policy explains what personal data we collect when you use the viralcars.pl website (the Website), why we process it, on what basis, and what rights you have.
The controller of your personal data is iD - Mateusz Ozimkowski, Plac Kolanowszczyzna 15/51, 87-800 Włocławek, Poland, tax ID (NIP) 8883171482, REGON 540183264, operating under the ViralCars brand (the Controller).
Contact on data protection matters: e-mail kontakt@viralcars.pl, phone +48 880 743 673, postal address as above. The Controller has not appointed a data protection officer.
The detailed information required by Article 13 GDPR is in the document Personal data information notice. Rules for ordering services are set out in the Terms and Conditions.
2. What data we collect and why
We collect only the data needed to run the Website and fulfil orders:
- Ordering a service (order window on the Website): full name, phone number, e-mail address, link to the listing, an optional note and invoice details. Purpose: concluding and performing the contract, contact about the order, settlements.
- Contacting us (e-mail, phone, WhatsApp, messages on social profiles): the data you provide in your message. Purpose: answering your enquiry.
- Online payments: handled by Stripe. We do not receive your card number or authorisation data. We receive the payment confirmation, the amount and the e-mail address used for the payment.
- Technical data (server logs): IP address, date and time, requested address, browser type. Purpose: security and correct operation of the Website.
- Content of your listing (photos of the vehicle, description and, if included in the listing, contact details). Purpose: preparing the promotional material you ordered.
Providing data in the order form is voluntary but necessary to place an order. We do not make automated decisions and do not profile users.
3. Legal bases
We process data under Article 6(1) GDPR: point (b) (concluding and performing a contract and steps taken at your request before entering into it), point (c) (legal obligations such as tax and accounting) and point (f) (our legitimate interest: Website security, handling contact, establishing and defending claims). Details for each purpose are in the personal data information notice.
4. Recipients of data
Data may be entrusted or disclosed only to entities necessary to provide the services:
- Stripe Payments Europe, Ltd. (Ireland): online payment processing.
- SEOhost (PERSKIMEDIA Szymon Perski, ul. Obornicka 330, 60-689 Poznań, Poland): Website hosting and e-mail.
- An accounting office or accountant: for accounting and tax documents.
- Social platforms on which we publish promotional material (including TikTok, Instagram and Facebook): as to the published content.
- WhatsApp (Meta Platforms Ireland Ltd.): if you contact us through that messenger.
- Public authorities, where required by law.
- Meta Platforms Ireland Ltd. or Google Ireland Ltd.: only if we switch on a pixel or analytics and you consent in the cookie window.
5. Transfers outside the European Economic Area
Some of our providers (for example Stripe, Meta, TikTok) may process data outside the EEA, including in the United States. This takes place under the mechanisms provided in the GDPR, in particular standard contractual clauses or a European Commission adequacy decision. You can obtain a copy of the safeguards by writing to the Controller’s e-mail address.
6. How long we keep data
- Order data and accounting records: for the period required by tax and accounting law, as a rule 5 years from the end of the year in which the tax obligation arose.
- Data needed to establish or defend claims: until the claims become time-barred.
- Enquiries that do not lead to a contract: until the correspondence ends.
- Server logs: for the period resulting from the hosting provider’s server settings, no longer than necessary for security.
7. Cookies and similar technologies
The Website uses technologies necessary for it to work. Analytics and marketing tools (for example Meta Pixel), if switched on, load only after your consent. The current list of technologies is in the Cookie Policy. The Website’s fonts and scripts are loaded from its own server.
You give consent in the cookie window. You can change or withdraw it at any time through the Cookie settings link in the footer. We save your choice in the browser (localStorage) as an element necessary for the consent window to work.
A full list of technologies and instructions for managing them is in the Cookie Policy.
8. Links to other services
The Website contains links to Instagram, TikTok, WhatsApp and Stripe. After you click, you leave our Website and their operators process your data under their own privacy policies.
9. Security
The Website runs over an encrypted HTTPS connection. We apply restricted access to the administration panel, backups, software updates and protections for the order form against abuse (including an attempt limit).
10. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability, objection to processing based on legitimate interest, and to lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland. To exercise your rights write to kontakt@viralcars.pl. A full description is in the personal data information notice.
11. Changes to this Policy
We may change this Privacy Policy, for example when providers or regulations change. The current version is always available on this page together with its effective date.