Privacy Policy

Legal basis for the processing

Categories of the Data concerned

Is the provision of the Data a requirement?

Contract (Article 6(1)(b) of GDPR)

Legitimate interest (to provide services and products to entities you represent) (Article 6(1)(f) of GDPR)

Name and surname, e-mail address, telephone number, billing and shipping address (street, city, postal code, country), company name (if provided), order and delivery details (product, size, color, plug type, quantity), payment method and transaction identifiers, car model and year, uploaded reference photo (for custom design orders), communication records, and feedback

Yes, this is a contractual requirement. If you do not provide this data, you will not be able to order our services

Legal basis for the processing

Categories of the Data concerned

Is the provision of the Data a requirement?

Consent (Article 6(1)(a) of GDPR)

Legitimate interest (to handle your inquiries (Article 6(1)(f) of GDPR)

Name, surname, e-mail address, telephone number, residential or business address, the content of the inquiry, request, or complaint, information and documents related to the submitted inquiry, request, or complaint, responses, correspondence records, chat transcripts, and any other information voluntarily provided by you in the course of communication

No

Legal basis for the processing

Categories of the Data concerned

Is the provision of the Data a requirement?

Consent (Article 6(1)(a) of GDPR)

Legitimate interest (to inform you about our services and goods) (Article 6(1)(f) of GDPR)

Name and surname, e-mail address, telephone number, demographic information (age, gender, location, language preferences), communication preferences and consents, social media identifiers and usernames, profile information (profile photo, description, public interests), comments, reactions, messages sent to us, our replies to your messages, participation in surveys, promotions, contests, reviews, testimonials, and events, browsing behavior on our websites and apps, interactions with marketing communications, device and technical data (IP address, device type, operating system, browser type, advertising identifiers, cookies, pixel tags, and similar technologies), geolocation data (if enabled), social media engagement statistics, ratings

No

Legal basis for the processing

Categories of the Data concerned

Is the provision of the Data a requirement?

Legitimate interest

(to ensure the security, proper functioning, and continuous improvement of the website, mobile application, and products) (Article 6(1)(f) of GDPR)

IP address, device identifiers, device type and model, operating system and version, browser type and version, screen resolution, language settings, time zone, login data, session identifiers, cookies and similar tracking technologies, browsing and interaction data on the website, in the mobile app, and with product features, referrer URL, geolocation data (if enabled), network and connection information, log files, error and crash data, authentication and access records, user account activity (including login attempts), order history (to detect suspicious or unusual activity), feedback and in-app behavior related to product usage

No

Legal basis for the processing

Categories of the Data concerned

Is the provision of the Data a requirement?

Consent (Article 6(1)(a) of GDPR)

Legitimate interest to contact you regarding job opportunities in our company (Article 6(1)(f) of GDPR)

Name, surname, place of residence or residential address, e-mail address, telephone number, information about work experience (employer, period of employment, position, responsibilities, achievements), information about education (educational institution, period of study, degree and/or qualification obtained), information about training (courses attended, certificates obtained), information about language skills, IT skills and other competences, other information provided in the CV, cover letter or other application documents, name of the referee/recommending person, content of the recommendation, summary of the interview, notes and opinions of the recruiter, results of candidate testing

No

Legal basis for the processing

Categories of the Data concerned

Is the provision of the Data a requirement?

Legitimate interest to ensure the safety of persons and property (Article 6(1)(f) of GDPR)

Video recordings (including time and location of recording), visual image of the individual, behavior and activities captured in monitored areas, incident-related information, access badge identifiers, badge usage logs (entry/exit times, doors or zones accessed), and system-generated access control records.

No

Legal basis for the processing

Categories of Data concerned

Is the provision of the Data a requirement?

Legal obligation (Article 6(1)(c) of GDPR)

Legitimate interest in protecting our rights and legal interests (Article 6(1)(f) of GDPR)

Name, surname, email address, contracts, legally binding documents and data, correspondence, legal documents, pleadings, annexes, court documents, investigative information, information about convictions and criminal offences, information about the IT and communication tools we have provided to you, username, password, correspondence, information about the use of the IT and communication tools, logs, possible breaches and incidents, and any other Data provided and collected

When the processing of your Data is required under applicable laws, providing this data becomes a legal necessity. If you are unable to provide this data, unfortunately, we will not be in a position to offer our services to you.

Source of origin of data

Purpose of processing

Recruitment agencies, job search portals, professional social networks (e.g. LinkedIn)

Recruitment

Health care institutions

Investigation of workplace accidents

State labour, social security, tax, supervisory authorities, police, prosecutors, courts, law enforcement and other state and municipal authorities, participants in legal proceedings and their representatives

Compliance with legal requirements and defense of our legal interests

Recipients or categories of recipients

If the Data are to be transferred

to a third country or an international organisation:

Third country

Safeguard measure or exemption allowing the transfer

Lawyers, notaries, bailiffs, data protection officers, auditors, tax, business, HR and other consultants

---

Providers of IT tools and services, electronic communications service providers, travel agencies, insurance companies, archiving and other service providers

---

State labour, social security, tax, supervisory authorities, police, prosecutors, courts, law enforcement and other state and local authorities

---

Horzo MB (marketing service provider)

---

Omnisend UAB (email marketing automation and communication service provider)

---

Shopify Inc. (e-commerce platform and cloud service provider)

Canada

EC Adequacy Decision

PayPal (payment processing service provider)

USA

EU Standard Contractual Clauses

Stripe Inc. (payment processing service provider)

USA

EU Standard Contractual Clauses

Google Inc. (IT infrastructure and services provider)

USA

EU Standard Contractual Clauses

Facebook (Meta) (social media service provider)

USA

EU Standard Contractual Clauses

TikTok Technology Ltd (social media and marketing service provider)

China

EU Standard Contractual Clauses

LinkedIn (social media service provider

USA

EU Standard Contractual Clauses

Potential or actual purchasers of the business or part of it and their authorised advisers or representatives

Various

EU Standard Contractual Clauses

My right

Summary

Right of access

The right to obtain confirmation from us as to whether Data relating to you is being processed and, if such Data is being processed, the right to have access to the Data and information about the processing.

Right to rectification

The right to require us to rectify inaccurate Data relating to you.

Right to erasure (‘right to be forgotten’)

- when Data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;

- when you withdraw consent on which the processing of Data is based and there is no other legal ground for the processing;

- when you object to the processing of Data and there are no overriding legitimate grounds for the processing, or you object to the processing for direct marketing purposes;

- where the Data have been unlawfully processed;

- where the Data have to be erased for compliance with a legal obligation;

- where the Data have been collected in relation to the offer of information society services directly to a child and subject to a consent.

Right to restriction of processing

- where the accuracy of the Data is contested by you;

- where the processing of Data is unlawful and you oppose the erasure of the Data and request the restriction of their use instead;

- where we no longer need the Data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims;

where you have objected to the processing of the Data and until it has been verified whether our legitimate interests override yours.

Right to data portability

where you seek to receive the Data you have provided in a structured, commonly used and machine-readable form or to transmit those data to another controller, the processing is based on consent or on a contract and is carried out by automated means.

Right to object

where the collection and use of the Data is based on a task carried out in the public interest or in the exercise of official authority vested or legitimate interest, including profiling, as explained in Section 3 of this Privacy Policy, or where you object to the collection of your data for direct marketing purposes.

Right to withdraw consent

where the processing of Data is based on consent, as explained in Section 3 of this Privacy Policy, and you seek to withdraw it at any time.

Right to lodge a complaint

Right to lodge a complaint with a supervisory authority.

Right to opt out of selling, sharing, and/or targeting

Subject to certain exceptions, you have the right to opt out of certain processing activities. For example, you may request that we stop selling or sharing your Data for (i) cross-context behavioral advertising / targeted advertising, (ii) the sale of personal data, and (iii) profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer.

Right to limit the use and disclosure of sensitive Data

Subject to certain exceptions, residents of certain states may request that we limit the use and disclosure of sensitive Data, as that term is defined in the applicable laws.

Right to non-discrimination

You are entitled to exercise the rights described above free from discriminatory treatment prohibited by the applicable laws.