If you've landed here, it's a sure sign that you value your privacy. We understand this perfectly, which is why we've prepared this document for you, which outlines the principles of personal data processing and cookie use in connection with your use of the website: www.americancarparts.pl
We collect and store all personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as "GDPR") and the Act of 18 July 2002 on the provision of services by electronic means.
Personal Data Controller
The Personal Data Controller is TMCG International Sp. Z o.o. Sp. K. Tax Identification Number (NIP) 5213849868, with its registered office in Warsaw, Domaniewska 47, 02-672 Warsaw, Poland. You can contact us:
- By letter, to the following address: TMCG, ul. Domaniewska 47, 02-672 Warsaw,
- By email, to the following address: shop@americancarparts.pl
What data do we process?
We process your personal data, which you provide to us, particularly in the order form, when subscribing to our newsletter, when sending us an email, when submitting a complaint, or when withdrawing from the contract. We also process your bank account number, from which you will make payments or to which we will make refunds. When issuing a VAT invoice, we also process your company name, residential or business address, and Tax Identification Number (NIP). Furthermore, we also store your behavioral data, including transactions, complaints, and the history of your correspondence and contacts with us, your activity on our website and online store, our social media profiles, and our accounts on third-party websites. This data includes products viewed, IP addresses and device identifiers, cookie data and locations, correspondence, and contacts. For the purposes of establishing, pursuing, and defending claims, we may also collect data regarding your PESEL or NIP number, and your residential address. Purposes and Basis of Processing
When placing an order, you must provide the data required to process the order, such as your name, mailing address, email address, and phone number. Providing this data is voluntary, but necessary to place the order.
The data provided in connection with the order is processed for the purpose of processing the order (Article 6, paragraph 1, letter b of the GDPR), issuing an invoice (Article 6, paragraph 1, letter c of the GDPR), including the invoice in our accounting records (Article 6, paragraph 1, letter c of the GDPR), and for archival and statistical purposes (Article 6, paragraph 1, letter f of the GDPR).
Order data will be processed for the time necessary to process the order and then until the expiry of the limitation period for claims arising from the concluded contract. Furthermore, after this period, the data may continue to be processed by us for statistical purposes.
Newsletter. If you wish to subscribe to the newsletter, you must provide us with your email address via the newsletter subscription form. Providing your data is voluntary, but necessary to subscribe to the newsletter.
The data provided when subscribing to the newsletter is used to send you the newsletter, and the legal basis for its processing is your consent (Article 6, Section 1, Letter a of the GDPR) expressed when subscribing to the newsletter.
The data will be processed for the duration of the newsletter's validity, unless you unsubscribe earlier, in which case your data will be deleted from the database.
You can correct your data stored in the newsletter database at any time, or request its deletion by unsubscribing from the newsletter.
Complaints and withdrawal from the contract. If you submit a complaint or withdraw from the contract, you provide us with the personal data contained in the complaint or declaration of withdrawal, which includes your name, address, telephone number, email address, and bank account number. Providing this data is voluntary, but necessary to submit a complaint or withdraw from the contract.
The data provided in connection with submitting a complaint or withdrawing from the contract is used to implement the complaints or withdrawal procedure (Article 6, paragraph 1, letter c of the GDPR).
The data will be processed for the time necessary to complete the complaints or withdrawal procedure. Complaints and declarations of withdrawal may also be archived for statistical purposes.
Email contact. When you contact us via email, including by sending an inquiry via the contact form, you provide us with your email address as the sender's address. You can also include other personal data in your message. Providing your data is voluntary, but necessary to establish contact.
In this case, your data is processed for the purpose of contacting you, and the basis for processing is Article 6(1)(a) of the GDPR, i.e., your consent resulting from initiating contact with us. The legal basis for processing after contact is the legitimate purpose of archiving correspondence for internal purposes (Article 6(1)(c) of the GDPR).
Data Recipients
Your data may be processed by our subcontractors, i.e., entities whose services we use to process data and provide services to you or fulfill orders in the online store, including in particular:
a) our employees and collaborators who require access to your data to fulfill our obligations or perform activities on your behalf;
b) entities processing your personal data on our behalf and participating in the performance of our activities:
– to store personal data on the server;
– to use the mailing system in which your data is processed if you have subscribed to the newsletter;
– to handle the shipping process, which involves the processing of your data necessary for the delivery of your order;
– to use the services of courier companies that deliver your orders;
– to use IT support and website management, in connection with which the entity providing support may have access to your personal data collected within the website or store;
– to process refunds or to ensure the operation of the direct debit service; – for the purpose of providing advisory, auditing, legal, tax and accounting services.
Rights
The GDPR grants you the following potential rights related to the processing of your personal data:
1) the right to access your personal data;
2) the right to rectify your personal data;
3) the right to erase your personal data;
4) the right to restrict the processing of your personal data;
5) the right to object to the processing of your personal data in relation to:
a) our processing of your personal data for marketing purposes, i.e., for advertising campaigns and other marketing activities, including profiling (e.g., if you do not wish to receive offers or advertisements for our products, and upon receipt of the aforementioned objection, we shall cease processing your data for marketing purposes);
b) our processing of your personal data for the purposes of the so-called We may exercise legitimate interests other than marketing for reasons related to your particular situation. If you object to this, we will no longer be able to process your personal data unless we demonstrate the existence of: compelling legitimate grounds for processing that override your interests, rights, and freedoms, or grounds for establishing, pursuing, or defending legal claims;
6) the right to data portability;
7) the right to withdraw consent to the processing of personal data, if you have given such consent.
The principles related to the exercise of these rights are described in detail in Articles 16–21 of the GDPR. We encourage you to familiarize yourself with these provisions. We consider it necessary to explain to you that the rights indicated above are not absolute and will not apply to all processing of your personal data.
Furthermore, if you believe that we have violated personal data protection regulations in the processing of your personal data, you have the right to lodge a complaint with the supervisory authority, i.e., the President of the Personal Data Protection Office. You can also always request information about what data we hold about you and the purposes for which we process it. Simply send a message to: shop@americancarparts.pl
Security. We guarantee the confidentiality of all personal data provided to us. We ensure that all security and personal data protection measures required by data protection regulations are taken. Personal data is collected with due care and adequately protected against unauthorized access.
Cookies. Like almost all service providers, we use cookies, web beacons, and similar technologies when you visit our website or use our offers.
Cookies are small text files stored on your device (e.g., computer, tablet, smartphone) that can be read by our IT system (first-party cookies) or third-party IT systems (third-party cookies).
Some cookies we use are deleted after the end of the browser session, i.e., after closing it (so-called session cookies). Other cookies are stored on your device and allow us to recognize your browser the next time you visit the website (persistent cookies).
Consent to cookies. During your first visit, you will be presented with information about the use of cookies. Thanks to a special tool, you can manage cookies from the website. Furthermore, you can always change cookie settings from your browser or delete cookies altogether. Browsers manage cookie settings in different ways. Your browser's help menu will explain how to change cookie settings.
Please note that disabling or limiting cookies may cause difficulties in using our website, as well as many other websites that use cookies.
Own Cookies. We use our own cookies to ensure the proper functioning of the website, in particular the ordering process and logging into your account.
Third-Party Cookies. Our website, like most modern websites, uses functions provided by third parties, which involves the use of third-party cookies.