GDPR and data protection
Privacy Policy
1. General information
This Privacy Policy sets out the rules for processing and protecting the personal data of users of the website available at https://noir-ride-concierge.lovable.app (the "Website"), operated for the purpose of providing private premium chauffeur transport in a Mercedes V-Class under the name SUDECKI TRANSFER.
The data controller is the owner of the Website — a sole trader providing transport services under the SUDECKI TRANSFER brand. The controller can be contacted by email at ryszard@grecki.pl or by phone at +48 603 779 027.
2. What data do we collect?
When using the Website, in particular when sending a quote request via the contact form, we may collect the following personal data:
- first and last name,
- phone number,
- email address,
- the date, time and route of the planned journey,
- the number of passengers and pieces of luggage,
- any additional information voluntarily provided in the message.
3. Legal basis and purposes of processing
Personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and applicable national law.
The legal basis for processing is the user's consent, expressed by ticking the relevant checkbox before submitting the contact form (Art. 6(1)(a) GDPR), and the need to take steps at the user's request prior to entering into a contract (Art. 6(1)(b) GDPR).
Data is processed for the purpose of:
- preparing and presenting an individual quote for the transport service,
- contacting the user regarding their enquiry,
- carrying out the ordered transport service,
- the potential establishment or defence of legal claims.
4. Data retention period
Personal data is stored for as long as necessary to achieve the purpose for which it was collected, and in the case of enquiries that do not result in a contract — for up to 12 months from the date of last contact, unless the user withdraws their consent or requests deletion of their data earlier.
5. Who do we share data with?
Personal data is not sold or shared with third parties for marketing purposes. It may be entrusted only to entities necessary for the performance of the service, such as IT, hosting or email communication providers, subject to appropriate safeguards and data-processing agreements.
6. User rights
Every user has the right to:
- access their personal data,
- rectify inaccurate data,
- erasure of data (the "right to be forgotten"),
- restrict processing,
- data portability,
- object to processing,
- withdraw consent at any time,
- lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).
To exercise these rights, simply send a message to: ryszard@grecki.pl.
7. Cookies
The Website may use cookies to ensure it functions correctly and to analyse traffic. Cookies may be used by analytics tools or embedded third-party components. Users can change their browser's cookie settings at any time.
8. Data security
The controller applies appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction or disclosure. Data transmitted electronically is protected in line with the security standards adopted by our IT service providers.
9. Changes to the Privacy Policy
The controller reserves the right to make changes to this Privacy Policy. Users will be informed of any material changes through publication of the updated version of this document on the Website.
10. Contact
For matters relating to personal data protection, please contact us:
- Email: ryszard@grecki.pl
- Phone: +48 603 779 027
