Privacy Policy

1. Data controller

The controller of your personal data is SPRAWNO sp. z o.o., with its registered office at , entered in the Polish Register of Entrepreneurs (KRS) under no. 0001258523, NIP 7773473572, REGON 545400192; registry court: Sąd Rejonowy Poznań – Nowe Miasto i Wilda w Poznaniu, VIII Wydział Gospodarczy KRS; share capital: 5 000,00 zł (tel. 500 272 005, e-mail: biuro@sprawno.pl). Place of service provision: ul. Starołęcka 18, 61-361 Poznań.

2. What data we collect

Via the contact form: name, phone number, optionally e-mail, car make and model, optionally the VIN, and the message. The VIN (typed or read with the „Zeskanuj dowód” button) is used to get the right parts before your visit. During a phone call — the data you provide yourself.

A visit can also be booked on your behalf by an AI assistant you use, through our public booking API for AI agents (/api/agent/). We then receive the data the assistant passes to us: name, phone number, the chosen service and time, and optionally e-mail, car make and model, and a note. We process it in the same way as data from the booking form — for the same purposes, on the same legal bases and with the same recipients.

3. Purpose and legal basis

We process the data to contact you, prepare a quote and book a visit — based on your consent (Art. 6(1)(a) GDPR) and steps prior to entering a contract at your request (Art. 6(1)(b) GDPR).

4. Retention period

An enquiry (contact form, booking, API request) that did not lead to a visit is kept for 12 months from when it was sent and then deleted.

If we carried out a service for you, the data needed to document it (name, phone, vehicle and VIN, scope and date of work) is kept until the limitation period for claims expires — as a rule 6 years, counted from the end of the year in which we finished the work.

Invoices and other accounting records are kept for 5 years, counted from the end of the year in which the tax payment deadline passed, as required by tax law.

Data for tyre change reminders is kept until you withdraw consent (section 8). Cookies and their lifetimes are described in section 6. You can withdraw consent at any time.

5. Data recipients

Data may be processed by IT and hosting providers on our behalf (including Cloudflare infrastructure). Our forms (contact, booking, tyre reminder) are protected against spam by Cloudflare Turnstile: when you start filling in a form, your browser connects to a Cloudflare server, which receives, among other things, your IP address and basic browser data to check that a human is filling in the form. The location map on the contact page loads from OpenStreetMap (OpenStreetMap Foundation, United Kingdom) only after you click “Show map” — OpenStreetMap then receives your IP address. Data from our forms (contact, booking, tyre reminder) and from bookings made through the AI-agent API is stored in a Google spreadsheet (Google Sheets), and bookings with a chosen time also in Google Calendar; these services are provided by Google (Google Ireland Ltd.), which processes the data on our behalf. We receive a short notification about each new request in the Telegram messenger; it contains none of your personal data. With your consent we also use Google Analytics (Google Ireland Ltd.) and Microsoft Clarity (Microsoft Ireland Operations Ltd.). Using Google and Microsoft services may involve transferring data outside the EEA (to the USA) on the basis of standard contractual clauses. We do not sell your data.

6. Cookies and analytics

The site uses necessary cookies to function and — only after you give consent — Google Analytics 4 and Microsoft Clarity analytics tools (session recordings and heatmaps), deployed via Google Tag Manager, that help us understand how you use the site. Until you consent, no statistics are collected (we use Google Consent Mode). You can change or withdraw consent at any time with the “Cookie settings” button in the page footer or, alternatively, by clearing the site data in your browser.

Cookies set only after you consent: _ga and _ga_<ID> (Google Analytics 4 — telling visitors and sessions apart; valid for up to 2 years), _clck (Microsoft Clarity — visitor ID; up to 1 year) and _clsk (Microsoft Clarity — joining page views into one session; 1 day). Your choice itself is kept in the browser’s storage (localStorage, key sprawno-consent) until you change it or clear the site data. When you withdraw consent, the site deletes these cookies from your browser.

7. Tools that run in your browser

The driver tools (/narzedzia/), including the car sale contract and the collision statement (oświadczenie sprawcy kolizji) generators, run in your browser. We do not send the data you type into these forms to SPRAWNO and do not store it: the PDF is created on your device, and the form draft stays only in the memory of the open browser tab (sessionStorage) until you close it or click „Wyczyść dane”. The tools pass to statistics (after your consent) only the fact that a button was clicked, e.g. „Pobierz PDF”, never the content of the fields, and the fields of these forms are marked for masking in Microsoft Clarity session recordings.

The „Zeskanuj dowód” button reads only the vehicle data from the code on the registration certificate (dowód rejestracyjny): VIN, make, model, year of production, engine capacity and power, fuel, date of first registration, masses and the type-approval number. It never reads the owner or holder data, the registration plate or the document number. The camera image or photo is processed only on your device and is not sent anywhere. If on a computer you choose „Zeskanuj dowód telefonem”, the vehicle data read on the phone passes to the computer through our server (Cloudflare): we keep it for at most 10 minutes and delete it as soon as the computer has received it. We do not store your IP address — for abuse limits we keep only its hash (HMAC, changed daily) for the same time. The legal basis is performing the service you ask for (Art. 6(1)(b) GDPR).

8. Tyre change reminder

If you sign up for the tyre change reminder, we process the e-mail address or phone number you give, the language and page you signed up from, and the date of consent and the version of its text (in the language you saw it in) — only to send you a reminder before each tyre season, in spring and in autumn (Art. 6(1)(a) GDPR). One sign-up covers both seasons. We keep the data in a Google spreadsheet until you withdraw consent, and then delete it. To unsubscribe (withdraw consent), write to biuro@sprawno.pl or call 500 272 005.

9. Your rights

You have the right to: access, rectification, erasure, restriction of processing, objection, data portability and withdrawal of consent. You may also lodge a complaint with the Polish supervisory authority (PUODO).

10. Voluntary nature

Providing data is voluntary but necessary for us to contact you and handle your enquiry.

11. Automated decisions

We do not make automated decisions and do not profile your data.

12. Contact

For matters regarding personal data, write to biuro@sprawno.pl or call 500 272 005.