Privacy and Cookies Policy

Below is the full content of the Privacy Policy and Cookies of bmcars.co.uk and BM Cars Website.

Privacy and Cookies Policy of BM Cars website

This document describes the principles of handling personal data and using cookies and other technologies in the operation of the BM Cars website together with the website https://bmcars.net.

The owner of BM Cars website and the administrator of the website is BM Serwis sp. z o.o. 4 Krzemienna St. Katowice 40-513 NIP: 9542793125, Regon: 38042102300000.

Direct contact with the administrator: [email protected].

§ 1 Definitions – Who we are

For the purposes of this privacy policy, the following meanings of the following terms are adopted:

1. Administrator – BM Serwis sp. z o.o. 4 Krzemienna St. Katowice 40-513 NIP: 9542793125, Regon: 38042102300000.
2. Website – the website available at https://bmcars.net.
3. BM Cars Service – car service at the address BM Serwis sp. z o.o. 4 Krzemienna St. Katowice 40-513.
4. Online Store – available at https://bmcars.net/sklep(Online Store Regulations).
5. User – any entity that uses the Site or makes use of BM Cars Services.

§ 2 Personal Data

What personal data we collect and why we collect it

1. The scope of personal data processed includes, but is not limited to: name, address, telephone number.
2. Users may provide their personal data to the Administrator:
   • in person at the headquarters of BM Cars Service,
   • by telephone or video call,
   • when ordering products from the Online Store,
   • by means of forms available on the Site:
     • phone number record form,
     • visit/repair appointment form,
     • parts order form,
     • technical advice request form,
     • newsletter sign-up form,
     • other contact forms where personal information is transferred on the Site,
   • via comment fields under articles on the Site,
   • via Facebook Ads forms on Facebook.
3. Data provided to the Administrator is processed for:
   • performing repair services on the BM Cars Website, including to issue the User a VAT invoice documenting the purchase,
   • sending the User a newsletter,
   • sending the User the ordered products from the Online Shop, including to issue the User a VAT invoice documenting the purchase,
   • arranging an appointment at BM Cars Service,
   • to send SMS notifications related to services on BM Cars Website,
   • to send an answer to the User’s technical question,
4. The Administrator guarantees the confidentiality of any personal data provided to him.
5. Provision of data is always voluntary, but necessary to perform the services on the BM Cars Website, the Online Shop or other actions for which the form is intended.
6. The Administrator does not share the data provided to him with any third parties.
7. Personal data is collected with due diligence and properly protected from access by unauthorized persons.
8. The user has the following rights:
   • the right to request access to your data, rectification, deletion or restriction of processing,
   • the right to object to processing,
   • the right to data portability,
   • the right to withdraw consent to the processing of personal data for a specific purpose, if the User has previously given such consent,
   • the right to lodge a complaint with a supervisory authority in connection with the processing of personal data by the Administrator.

Data processing

The Administrator hereby informs the User that he entrusts the processing of personal data to the following entities:

Zenbox Sp. z o.o. 7 Dabrowskiego St., 42-200 Czestochowa NIP: 949-219-10-21 – for the purpose of storing website data on the server.

Zapier Inc., 243 Buena Vista Avenue, Suite 508, Sunnyvale, CA 94086 United States of America – for the use of Zapier’s application integration system used to automate activities on the Website.

ComVision Sp. z o.o., 101 Toszecka St., 44-100 Gliwice, NIP: 969-156-67-36 – in order to use the SMSAPI application for sending SMS notifications.

Alphabet Inc. 1600 Amphitheatre Parkway Mountain View, CA 94043, United States of America – in order to promote the Service through Google Ads and to use the email system, calendar, audio and video calls through Hangouts/Meet and cloud documents within the G Suite service for communication with Users.

Meteoryt Sp. z o.o., Łomżyńska 18, 12-100 Szczytno, NIP: 745 184 82 85 – in order to use the Workshop Assistant program to manage the services of the BM Cars Service.

Aut O’Mattic A8C Ireland Limited, Business Centre, o.1 Lower Mayor Street IFSC Dublin 1, Ireland – in order to use the JetPack service to comment using Social Network logins and to protect the site from spam and attacks.

Aut O’Mattic A8C Ireland Limited, Business Centre, o.1 Lower Mayor Street IFSC Dublin 1, Ireland – to use the WooCommerce service to run the BM Cars online store and the MailPoet service to send newsletter and transactional emails.

Cloudflare Inc., 101 Townsend St 94107, San Francisco, United States of America – to use Cloudflare’s distributed Content Delivery Network service and security systems.

Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, United States of America – to promote the Services through Facebook Ads and to make audio and video calls through Facebook Messenger/WhatsApp.

Hotjar Limited Level 2, St Julian’s Business Centre, 3, Elia Zammit Street, St Julian’s STJ 1000, Malta – for the purpose of collecting visitor and interaction statistics on the bmcars.co.uk website.

Awesome Motive HQ, 2701 Okeechobee Blvd, West Palm Beach, Florida, United States of America – to manage Google Analytics in the WordPress dashboard.

ING Bank Slaski S.A., 34 Sokolska St., 40-086 Katowice NIP: 634-013-54-75 – in order to process payments on BM Cars online store via imoje payment gateway.

Twisto Polska sp. z o. o., 3/8 Zgoda St., 00-018 Warsaw – in order to implement the buy now, pay later service in the BM Cars online store.

Stripe 510 Townsend St, San Francisco, CA 94103, United States – in order to process payments through the Stripe payment gateway and Przelewy 24.

PayPro SA, 15 Kanclerska St., 60-327 Poznań, Poland NIP: 779-236-98-87 – to process payments through the Przelewy24 service.

Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA – for the purpose of making audio and video calls through the Skype service.

Aiton Caldwell SA, 80-172 Gdańsk, Trzy Lipy 3 – in order to make, receive telephone calls and manage forwarding, voicemail and other telephone services through the FCN.pl service.

Virgin Mobile Polska, Sp. z o.o. Wolodyjowskiego 42 Street, 02-724 Warsaw, NIP: 9512354680 – for the purpose of making and receiving phone calls and managing redirections, voicemail and other phone and SMS services by the Virgin Mobile Polska phone service provider.

carVertical, LLC, 1 N Franklin St. Ste 1200, Chicago, IL 60606 – for the purpose of running an affiliate campaign to check vehicle history by VIN number (interactive banner in articles on the bmcars.pl Website).

Algorithm sc, ul Świętokrzyska 12, pok 402, 30-015 Kraków – for the purpose of managing and running workshop services through the Workshop program.

Atom Tomasz Liebich, ul. Szkolna 5b, Preczów – in order to run the “Customer Club” loyalty program.

The above entities guarantee the confidentiality of the data recorded in their databases.

Personal data is kept indefinitely or until it is deleted at the request of the User.

Embedded content from other sites

Articles on this site may contain embedded content (e.g. videos, images, maps, etc.). Embedded content from other sites behaves similarly to how a user would behave if he or she visited a specific site directly.

These sites may collect information about you, use cookies, attach additional third-party tracking systems, and monitor your interactions with the embedded material, including tracking your interactions with the embedded material if you have an account and are logged into that site.

§ 3 Cookies

Cookies (so-called “cookies”) are computer data, in particular text files, which are stored on the User’s terminal device and are intended for use on websites. Cookies usually contain the name of the website they come from, the time they are stored on the end device and a unique number.

The entity placing cookies on the User’s end device and accessing them is the Administrator.

Cookies are used for:

1. Adjusting the content of the Website to the User’s preferences and optimizing the use of the websites; in particular, these files allow for the recognition of the User’s device and proper display of the website, adjusted to his individual needs;
2. Creating statistics that help to understand how Users use the websites, which allows to improve their structure and content;
3. Maintaining the User’s session (after logging in), thanks to which the User does not have to re-enter his/her login and password on each sub-page;

The Site uses two main types of cookies: “session” (session cookies) and “permanent” (persistent cookies). “Session” cookies are temporary files that are stored on the User’s terminal device until the User logs out, leaves the website or shuts down the software (web browser). “Permanent” cookies are stored on the User’s end device for the time specified in the parameters of the cookies or until they are deleted by the User.

The Site uses the following types of cookies:

1. “Necessary” cookies that enable the use of services available on the Site, such as authentication cookies used for services that require authentication on the Site;
2. Security cookies, e.g. used to detect abuse of authentication on the Site;
3. “Performance” cookies, which allow the collection of information about the use of the websites;
4. “Functional” cookies, which allow “remembering” the User’s selected settings and personalizing the User’s interface, e.g. with regard to the User’s selected language or region of origin, font size, web page design, etc;

In many cases, web browsing software (web browser) allows the storage of cookies on the User’s terminal device by default. Users can change their cookie settings at any time. These settings can be changed, in particular, in such a way as to block the automatic handling of cookies in the settings of the web browser or inform about their placement on the User’s device each time. Detailed information on the possibility and methods of using cookies is available in the settings of your software (web browser).

The Administrator informs that restrictions on the use of cookies may affect some of the functionality available on the websites.

More information on cookies is available at http://wszystkoociasteczkach.pl/ or in the “Help” section of your web browser menu.

The above model cookie policy is protected by copyright, which belongs to IAB Poland – http://wszystkoociasteczkach.pl/

§ 4 Other technologies – profiling and tracking codes

The Administrator hereby informs the User that it uses the following technologies to track the actions taken by the User:

• google Analytics tracking code – in order to analyze the statistics of the Site and marketing activities,
• pixel Facebook tracking code – to manage Facebook ads and marketing activities,
• piwik/Matomo tracking code – used by the hosting provider Zenbox company, in order to analyze the statistics of the Site.

The Administrator conducts marketing and remarketing activities using Google Ads and Facebook Ads advertising networks. If the User has an account with Google and/or Facebook (including Instagram) and has given the appropriate consents in these services then their data may be profiled.

§ 5 Server Logs

1. Use of the Site involves sending queries to the server on which the Site is stored.
2. Each query sent to the server is recorded in server logs. The logs include, among other things, the User’s IP address, the date and time of the server, information about the Internet browser and the operating system used by the User.
3. Logs are saved and stored on the server.
4. The data stored in the server logs are not associated with specific individuals using the Site and are not used by the Administrator to identify the User.
5. The server logs are only auxiliary material used to administer the Site, and their contents are not disclosed to anyone other than those authorized to administer the server.

§ 6 How do we protect your data?

1. We are committed to maintaining secrecy related to personal data and their proper protection.
2. The bmcars.co.uk website has a Secure Sockets Layer (SSL) certificate, which means that all data sent to and from the server is encrypted.
3. The applications and services we use are secured by two-factor authentication.
4. We use only legal and regularly updated software on all devices.
5. We use paid and always up-to-date antivirus software on all devices.
6. We use additional methods of encrypting the Internet connection in the form of a paid Virtual Private Network (VPN) service.
7. In accordance with applicable regulations, in the event of a potential leak of personal data, we will immediately inform the affected individuals and data protection institutions.

In matters not covered by the Terms and Conditions, the provisions of the Civil Code and relevant laws of Poland, as well as the laws of the European Union, in particular RODO (Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons in relation to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC) shall apply.

Updates

• 13.03.2018 – Details of companies and technologies related to data processing have been added.
• 24.05.2018 – Added details about AdWords, Piwik and Awesome Motive and added paragraphs: Embedded content from other sites and How we protect your data.
• 31.07.2018 – Details about BM Cars Katowice branch have been added.
• 25.07.2019 – Removal of the provision about Invisible reCaptcha – we no longer use this solution. Adding the scope of processed data, the commitment to secrecy, the provision on matters not regulated by the terms and conditions, ING and Twisto data on payment channels.
• 29.04.2020 – updating the clarity of this policy. Adding entries on payment operators, workshop software, audio and video call operators and affiliate cooperation.
• 11.11.2021 – removal of entry about Rocket Science Group operator (Mailchimp), addition of entries about MailPoet and Atom company (Customer Club).

If you have any questions, please contact: [email protected].