CentrumOBD

Privacy Policy

Privacy Policy

§ 1 General provisions

The controller of personal data is Centrum Diagnostyki Pojazdowej, with its registered office at Sikorskiego 87C, 27-400 Ostrowiec Świętokrzyski, Poland, Tax ID (NIP) 6612295863. The controller may be contacted in writing at the above address or by e-mail at biuro.diagnostyka@pm.me.

Pursuant to Article 37 of the GDPR, the company has not appointed a Data Protection Officer.

This Privacy Policy forms an integral part of the Terms and Conditions. When you use our services, you entrust us with information about you. This document explains what information and data are collected, for what purpose, how they are used, and the rules governing the processing and protection of personal data. It also sets out the rules for the use of cookies.

We comply with the applicable personal-data protection rules, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and other applicable Polish data-protection legislation.

At the request of a data subject, we provide comprehensive information on how personal data are used. We aim to explain clearly what data we collect, how we use them, the purposes for which they are needed, to whom they may be disclosed, how they are protected when transferred to other entities, and which institutions may be contacted in case of doubt.

§ 2 Privacy principles

We respect your privacy and aim to ensure that our services are convenient to use.

We value the trust you place in us by providing personal data for the performance of our services. We use personal data fairly and only to the extent necessary to provide the services.

As a User, you have the right to receive complete and clear information about how we use your personal data and for what purposes they are required. We explain what data we collect, how and to whom they are disclosed, and whom to contact in case of doubt.

If you have any concerns about our use of your personal data, we will take action without undue delay to clarify them and provide a comprehensive answer.

We take all reasonable measures to protect your data against improper and uncontrolled use.

The legal bases for processing your personal data may include:

Article 6(1)(a) GDPR – the data subject has given consent to the processing of personal data for one or more specified purposes;
Article 6(1)(b) GDPR – processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
Article 6(1)(c) GDPR – processing is necessary for compliance with a legal obligation to which the controller is subject;
Article 6(1)(d) GDPR – processing is necessary in order to protect the vital interests of the data subject or another natural person;
Article 6(1)(e) GDPR – processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
Article 6(1)(f) GDPR – processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party.

Personal data connected with the conclusion and performance of a contract are processed for the duration of that contract and for no longer than required by applicable law, including the Civil Code and accounting regulations; the source policy specifies a maximum period of 10 years counted from the end of the calendar year in which the last contract was performed.

Personal data processed for the purpose of entering into and performing future contracts will be processed until an objection is raised where such objection is available under applicable law.

You have the right to access your personal data and obtain a copy, rectify inaccurate data, request erasure where Article 17 GDPR applies, request restriction of processing where Article 18 GDPR applies, object to processing where Article 21 GDPR applies, and receive or transmit data processed by automated means where the right to data portability applies.

If you believe that your personal data are processed unlawfully, you may lodge a complaint with the Polish supervisory authority: Urząd Ochrony Danych Osobowych, ul. Stawki 2, Warsaw. To obtain additional information or exercise your rights, please contact us at the correspondence address stated above.

We comply with applicable data-protection laws and cooperate with data-protection authorities and authorised law-enforcement bodies. Where no specific rule applies, we follow generally accepted data-protection principles, principles of social coexistence and established practice.

If you have questions, contact us using the website from which you were directed to this Privacy Policy. Your request will be forwarded promptly to the appropriate person. To help us respond, please provide your first and last name.

§ 3 Scope and purpose of collecting personal data

We process personal data necessary to provide our services and for accounting purposes.

We may collect, process and store the following User data:

first and last name;
residential address;
delivery address, if different from the residential address;
tax identification number (VAT ID);
e-mail address;
telephone number;
information about the web browser used;
other personal data voluntarily provided to us.

Providing the above data is voluntary, but may be necessary for the full performance of the services.

We may transfer personal data to servers located outside your country of residence or to affiliated entities and third parties established in other countries, including countries in the European Economic Area (EEA), where such processing is carried out on our behalf in accordance with this Privacy Policy and applicable law.

Your data may be accessed by service providers necessary for operating the website and fulfilling orders, including:

hosting companies and providers of related infrastructure services;
providers used to deliver newsletter services;
IT service and support companies maintaining the technical infrastructure;
online-payment providers for goods or services offered through the website;
mobile-payment providers for goods or services offered through the website;
accounting-service providers;
postal and courier companies delivering physical products to Users.

§ 4 Cookies

We use cookies and similar technologies (“cookies”), meaning in particular text files stored on Users' end devices when they browse the website. Information collected using cookies may be used to adapt services and content to individual needs and preferences and to prepare general statistics concerning use of the website. Data collected through cookies are used for specified functions and are protected against unauthorised access.

We use the following categories of cookies:

first-party cookies – placed on and read from the User's device by the website's IT system;
third-party cookies – placed on and read from the User's device by third-party systems whose scripts or services are integrated with the website;
session cookies – used during a single session and normally removed after the session ends;
persistent cookies – retained until manually removed or until the period defined by the relevant cookie expires, subject to browser/device settings.

Depending on their purpose, the website may use:

strictly necessary cookies, including authentication cookies required to provide services;
security cookies, including cookies used to detect authentication abuse;
performance cookies used to collect information about how the website is used;
functional cookies used to remember settings and personalise the interface;
advertising cookies used to provide advertising content matched to User interests.

Web browsers usually allow cookies to be stored by default. A User may change cookie settings at any time, including blocking automatic cookie handling or requesting a notification whenever a cookie is placed. Detailed cookie controls are available in the browser settings.

Where consent is the applicable legal basis, continuing to use the website without changing cookie settings may result in cookies being stored in accordance with the settings selected by the User. Consent can be withdrawn by changing cookie settings. Information on cookie settings is available in browsers such as Chrome, Opera, Firefox, Edge, Safari and Internet Explorer 11.

§ 5 Social-media plug-ins

Social-media plug-ins may be present on our website.

Facebook services are provided by Meta/Facebook entities. Information about Facebook plug-ins is available in Facebook's developer documentation. Twitter/X services are provided by the relevant Twitter/X entity; information about the relevant web integrations is available in its developer documentation.

A plug-in may inform its provider which pages you accessed and when. If you are logged in to a social-network account while visiting our website, the provider may associate your visit and interactions – for example likes, comments or searches – with that account. Such information may be transmitted directly by your browser to the relevant provider.

To reduce the possibility of a social-media plug-in associating a visit with a particular account, log out of that account before browsing our website.

§ 6 Rights and obligations

Where required or permitted by law, we may be obliged to disclose selected or all information concerning personal data to public authorities or third parties that lawfully request such information under applicable Polish law.

The User has the following rights, subject to the conditions set out in the GDPR:

access – the right to obtain access to personal data by submitting a request to the Controller;
rectification – the right to request prompt correction of inaccurate data and completion of incomplete data;
erasure – the right to request erasure of personal data. For User accounts, erasure may involve anonymisation of identifying data. The Controller may suspend or refuse erasure where retention is necessary to protect a legitimate interest or comply with law. Newsletter recipients may use the unsubscribe mechanism contained in newsletter e-mails;
restriction of processing – the right to request restriction in the circumstances specified in Article 18 GDPR;
data portability – the right, where applicable, to receive personal data in a structured, commonly used and machine-readable format;
objection – the right to object to processing in the circumstances specified in Article 21 GDPR;
complaint – the right to lodge a complaint with the competent supervisory authority.

Terms of use for chat and voice conversations

1. Who provides the service

The chat and voice-conversation service is provided by the CentrumOBD store operated by Centrum OBD, Sikorskiego 87C, 27-400 Ostrowiec Świętokrzyski, Tax ID (NIP) 6612295863. Customer-service contact: biuro.diagnostyka@pm.me.

2. Conversation with the AI assistant

You are communicating with a virtual assistant that uses artificial intelligence. Its voice and avatar are interface elements and its responses are generated automatically.

The assistant helps you learn about the store's offer, compare products and obtain information about purchases, payments and delivery. Matters concerning a specific order, complaint, return or post-purchase technical support should be directed to customer service.

3. Information provided during the conversation

The assistant may misunderstand a question or provide an incomplete or outdated answer. If you have doubts concerning product compatibility, price or purchase conditions, ask customer service to confirm the information.

A conversation with the assistant does not itself place an order or amend an existing contract. These terms do not restrict your consumer rights or the store's liability under applicable law.

4. Privacy and processing of the conversation

Text messages and, during a voice conversation, your voice are processed in order to recognise your question and generate a response. The ElevenLabs platform participates in the technical processing of the service.

The controller of personal data processed by the store in connection with the conversation is the business identified in section 1 above.

Detailed information on legal bases, recipients, retention periods, possible transfers outside the European Economic Area and your rights is provided in this Privacy Policy.

5. Security

Provide only information necessary to handle your question. Do not provide passwords, BLIK codes, authorisation codes, payment-card details or health information. Do not provide another person's data without appropriate authority.

It is prohibited to send unlawful content, content that infringes the rights of others, or to take actions that disrupt the operation of the service.

6. Voluntary use and ending the conversation

Use of the assistant is voluntary. You may end the conversation at any time or contact customer service instead.

An internet connection and a current browser are required to use the service; a microphone and browser permission to access it are also required for voice conversations. The store does not charge for use of the assistant; internet-connection costs are governed by your agreement with your telecommunications provider.

Problems with the service may be reported to the e-mail address stated in section 1.

7. Acceptance of the terms

By selecting the acceptance button, you confirm that you have read and accept these terms of use. Acceptance does not constitute consent to marketing or to the use of your data for arbitrary purposes.