Privacy Policy

1. Data Controller

The data controller is Koha-Tech sp. z o. o., with registered office at Nowy Świat 33/13, 00-029 Warszawa, Poland, KRS: 0001183713, NIP: 5253054129, REGON: 54225638100000. For data protection inquiries, contact us at: rodo@partomatik.com

2. Types of Data Collected

We collect the following types of personal data:

• Vehicle information (VIN, license plate, make, model, year)
• Contact information (name, email address, phone number when provided)
• Usage data (pages visited, features used, search queries)
• Technical data (IP address, browser type, device information)
• Cookies and similar tracking technologies

3. Legal Basis for Processing (GDPR Art. 6)

We process your personal data based on: (a) Your consent (Art. 6(1)(a) GDPR) for marketing communications and non-essential cookies; (b) Contract performance (Art. 6(1)(b) GDPR) to provide our services; (c) Legitimate interests (Art. 6(1)(f) GDPR) for analytics and service improvement; (d) Legal obligations (Art. 6(1)(c) GDPR) for tax and accounting purposes.

4. Data Processing Purposes

We process your data to: provide vehicle part matching services, process your requests and orders, communicate with you about your account and orders, notify waitlist subscribers about platform launch and updates (with explicit consent), improve our services and user experience, comply with legal obligations, send marketing communications (with your consent), and ensure platform security.

5. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy or as required by law. Account data is retained while your account is active. Transaction data is retained for 7 years as required by Polish tax law. Marketing consent data is retained until you withdraw consent.

6. Your Rights (GDPR Art. 15-22)

Under GDPR, you have the following rights:

• Right to access (Art. 15) - Request a copy of your personal data
• Right to rectification (Art. 16) - Correct inaccurate data
• Right to erasure (Art. 17) - Request deletion of your data
• Right to restrict processing (Art. 18) - Limit how we use your data
• Right to data portability (Art. 20) - Receive your data in a structured format
• Right to object (Art. 21) - Object to processing based on legitimate interests
• Right to withdraw consent - Withdraw consent for marketing at any time

7. Data Sharing and Third Parties

We may share your data with: suppliers to facilitate part orders, payment processors for transaction processing, analytics providers (Google Analytics) with your consent, hosting and cloud service providers, and legal authorities when required by law. We do not sell your personal data to third parties.

8. International Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, to protect your data in accordance with GDPR requirements.

9. Security and Supervisory Authority

We implement appropriate technical and organizational measures to protect your personal data. If you have concerns about our data processing, you have the right to lodge a complaint with the Polish Data Protection Authority (UODO - Urząd Ochrony Danych Osobowych) at ul. Stawki 2, 00-193 Warszawa, Poland, or via their website: uodo.gov.pl