Privacy Policy

1. Data Controller

The controller responsible for the processing of personal data is:

You may contact us at any time regarding the processing of your personal data or the exercise of your data protection rights.

2. Personal Data We May Collect

Depending on how you use the store, we may process the following categories of personal data:

• first name and surname;
• company name and tax or VAT identification number;
• billing and delivery address;
• e-mail address and telephone number;
• account login and account-related information;
• details of orders, purchased products and selected services;
• payment status and payment transaction identifiers;
• courier, parcel and shipment tracking information;
• messages, photographs, diagnostic reports and other information sent to customer service;
• vehicle information supplied to verify part compatibility, such as make, model, year, VIN or part numbers;
• IP address, device information, browser information and technical logs;
• cookie preferences and information collected through permitted analytical or marketing technologies.

We ask customers to provide only the information necessary to process an enquiry, verify a part, complete an order or provide the requested service.

3. Purposes and Legal Bases of Processing

4. Is Providing Personal Data Mandatory?

Providing personal data is voluntary, but some information is necessary to:

• process and deliver an order;
• issue an invoice;
• process a payment;
• respond to an enquiry;
• verify product compatibility;
• handle a return, complaint or warranty claim.

If the required information is not provided, we may be unable to conclude or perform the contract, deliver the order or respond to the request.

5. Payments

Online payments may be processed by external payment service providers, including Stripe and the payment methods made available through its checkout system.

Depending on the customer’s country, currency, device and browser, available payment methods may include payment cards, PayPal, Apple Pay, Google Pay, Link or selected local payment methods.

Auto24Parts does not receive the complete payment card number or card security code. Payment data entered in the payment interface is processed by the selected payment service provider in accordance with its own privacy and security rules.

We may receive limited payment information necessary to identify the transaction, such as:

• payment status;
• transaction reference;
• payment amount and currency;
• payment method category;
• information necessary to handle a refund, dispute or suspected fraud.

6. Delivery and Courier Services

To deliver an order, we may provide the selected courier company with information necessary to complete the shipment, including:

• recipient’s name or company name;
• delivery address;
• telephone number;
• e-mail address;
• parcel and order reference;
• information required for customs clearance, where applicable.

Auto24Parts primarily uses DHL and FedEx for domestic, European and worldwide deliveries. Courier companies process shipment information to provide transport, tracking, customs and delivery services.

7. Recipients of Personal Data

Personal data may be disclosed only when necessary to entities supporting the operation of the store, including:

• the Shoper e-commerce platform and hosting or technical service providers;
• payment service providers and financial institutions;
• DHL, FedEx and other authorised delivery or customs service providers;
• accounting, tax and invoicing service providers;
• IT, hosting, cybersecurity and data storage providers;
• customer service, communication and e-mail providers;
• analytics or advertising providers, but only where their use is legally permitted and the required consent has been obtained;
• legal advisers, insurers and entities supporting the handling of disputes;
• public authorities where disclosure is required by applicable law.

We do not sell or rent customers’ personal data.

8. Transfers Outside the European Economic Area

Some service providers may process personal data outside the European Economic Area, particularly when providing payment, hosting, communication, analytics or technical services.

Where personal data is transferred outside the European Economic Area, the transfer is made using a lawful transfer mechanism, such as:

• a European Commission adequacy decision;
• Standard Contractual Clauses approved by the European Commission;
• another legally permitted transfer mechanism;
• additional technical or organisational safeguards where required.

Information about the transfer mechanism used by a specific service provider may be obtained by contacting us.

9. Data Retention

Personal data is retained only for as long as necessary for the purpose for which it was collected.

Depending on the processing activity, data may be stored:

• for the duration of the customer account;
• until an order or service has been completed;
• for the period required by applicable tax and accounting legislation;
• until warranty, return or complaint procedures have been completed;
• until the expiry of applicable limitation periods for legal claims;
• until consent is withdrawn, where processing is based on consent;
• until an effective objection is submitted, where processing is based on legitimate interests;
• for the period necessary to maintain website and transaction security.

After the relevant retention period expires, data is deleted, anonymised or securely archived where continued storage is required by law.

10. Cookies and Similar Technologies

The Auto24Parts website uses cookies and similar technologies. Cookies are small files stored on the user’s device or information recorded by the browser while the website is being used.

Necessary cookies

Necessary cookies support essential store functions, including:

• maintaining the shopping basket;
• remembering login sessions;
• processing checkout steps;
• protecting forms and transactions;
• remembering privacy and cookie preferences.

These cookies are required for the operation of the online store and cannot normally be disabled through the store’s cookie settings.

Analytical cookies

Analytical cookies may help us understand how visitors use the website, which pages are viewed and whether technical errors occur. Non-essential analytical cookies are used only where the required consent has been given.

Marketing cookies

Marketing cookies may be used to measure advertising effectiveness or display content based on user activity. They are activated only after consent, where such consent is legally required.

Managing cookie preferences

Users can accept, reject or adjust non-essential cookie categories through the cookie consent tool displayed on the website.

Cookies may also be removed or blocked through browser settings. Blocking necessary cookies may prevent the shopping basket, login, checkout or other store functions from working correctly.

11. Customer Account

A customer may create an account to save contact information, review orders and use other functions provided by the online store.

The customer is responsible for keeping account login information confidential and for protecting the account against unauthorised access.

A request to close an account may be sent to contact@auto24parts.com. Closing an account does not require us to delete information that must remain stored due to tax, accounting, warranty, fraud-prevention or legal claim obligations.

12. Newsletter and Marketing Communications

Marketing messages and newsletters are sent only where the recipient has provided the required consent or where another lawful basis permitted by applicable legislation exists.

Newsletter consent is voluntary and may be withdrawn at any time by:

• using the unsubscribe link included in the message; or
• contacting us at contact@auto24parts.com.

Withdrawing marketing consent does not affect the lawfulness of processing carried out before the withdrawal.

Transactional messages concerning an order, payment, delivery, complaint or account are not marketing messages and may still be sent where necessary to perform the contract or comply with legal obligations.

13. Rights of Data Subjects

Subject to the conditions set out in the GDPR, you may have the right to:

• access your personal data and obtain a copy;
• correct inaccurate or incomplete data;
• request deletion of personal data;
• request restriction of processing;
• receive and transfer your data where the right to data portability applies;
• object to processing based on legitimate interests;
• object at any time to direct marketing;
• withdraw consent at any time where processing is based on consent;
• submit a complaint to the competent data protection authority.

To exercise your rights, contact: contact@auto24parts.com .

Before completing a request, we may need to verify the identity of the person submitting it. This helps prevent unauthorised disclosure or deletion of personal data.

Some rights are not absolute. For example, we may retain data where continued processing is required by law or necessary for the establishment, exercise or defence of legal claims.

14. Right to Lodge a Complaint

If you believe that your personal data is being processed unlawfully, you have the right to lodge a complaint with the competent supervisory authority.

For a controller established in Poland, the supervisory authority is:

You may also have the right to contact the data protection authority in the European Union or European Economic Area country in which you normally reside, work or believe the infringement occurred.

15. Automated Decision-Making and Profiling

Auto24Parts does not make decisions based solely on automated processing that produce legal effects or similarly significant effects for customers.

Certain technical systems may automatically detect suspected fraud, assess payment security, select available payment methods or support website analytics. These processes may be operated partly by payment, security or technology providers under their own rules.

Marketing profiling, where used, is carried out only where permitted by law and where the required consent has been obtained.

16. Data Security

We apply appropriate technical and organisational measures intended to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

These measures may include:

• encrypted website connections;
• restricted access to administrative systems;
• individual user accounts and access controls;
• security monitoring and technical logs;
• software updates and backups;
• cooperation with professional hosting and payment providers.

No internet transmission or storage system can guarantee absolute security. Customers should also protect their passwords, devices and e-mail accounts against unauthorised access.

17. External Websites

The website may contain links to external websites operated by third parties, including payment providers, couriers, manufacturers or social media services.

Auto24Parts is not responsible for the privacy practices or content of independent external websites. Users should review the privacy information provided by the operator of the external service.

18. Children’s Data

The Auto24Parts store is intended for adult customers and professional automotive businesses. We do not knowingly offer services directly to children or intentionally collect children’s personal data.

If you believe that a child has provided personal data without appropriate authorisation, please contact us so that the situation can be reviewed.

19. Changes to This Privacy Policy

This Privacy Policy may be updated when:

• the store introduces new services or technologies;
• payment, delivery or technical providers change;
• legal requirements or official guidance change;
• the purposes or methods of personal data processing change.

The current version will always be published on this page together with the date of the latest update. Material changes may also be communicated through the website or by another appropriate method.

20. Contact Regarding Privacy