Effective from 30 October 2026.
1. Data controller
The controller of your personal data is Marcin Felczak, running a sole proprietorship under the AtlanticMOTO brand, ul. Potażowa 45, 02-400 Warszawa, Poland, tax ID (NIP) 5361810183, REGON 360302950 ("we", "AtlanticMOTO").
Contact on data matters: e-mail biuro@atlanticmoto.pl, phone +48 511 481 415 or a letter to our address. We have not appointed a data protection officer.
2. What data, for what purpose and on what legal basis
- Account: first and last name, e-mail address, phone number, password (we store only its hashed form) and, when you sign in with Google, your Google account identifier. Purpose: creating and running your account and watching auctions. Basis: contract for electronic services (Art. 6(1)(b) GDPR).
- Watched auctions (the "Watch" list) saved in your account. Basis: contract (Art. 6(1)(b) GDPR).
- Purchase and import of a vehicle on your order: account data, vehicle data, documents, invoice and transport details. Purpose: performing the order, settlements, tax and accounting duties. Basis: contract and legal obligation (Art. 6(1)(b) and (c) GDPR).
- Newsletter: e-mail address, the text of your consent, sign-up date and language. If you have an account with the same address, we match the offers in the e-mail to the cars you watch and the makes and models you view. Basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time using the link in every e-mail.
- Contacting us (phone, WhatsApp, e-mail, chat): the data you provide. Purpose: replying and preparing a quote. Basis: our legitimate interest in handling enquiries (Art. 6(1)(f) GDPR) and, for orders, the contract (point b).
- Visit statistics (Google Analytics, Google Tag Manager): device, browser and pages visited, collected only after your consent in the cookie banner. Basis: consent (Art. 6(1)(a) GDPR).
- Security and operation of the service: server logs (IP address, date and time, page address, browser). Basis: legitimate interest (Art. 6(1)(f) GDPR).
- Establishing, pursuing or defending claims. Basis: legitimate interest (Art. 6(1)(f) GDPR).
3. Who we share data with
We entrust data to companies that provide technical services to us, only to the extent needed:
- Hostinger: the server running the service and the database,
- Cloudflare: file storage (e.g. uploaded documents),
- Google: sign-in with Google (Firebase) and, after your consent, Google Analytics and Tag Manager,
- Chatra: the chat window (only after consent to marketing cookies),
- Globtel Internet (webd.pl): e-mail, including e-mails sent by the service and the newsletter,
- Meta (WhatsApp): when you write to us via WhatsApp.
When we buy and import a vehicle for you, we share the data necessary for the order with auction houses (Copart, IAAI), carriers, freight forwarders, the customs agency and our accountants. We also disclose data to public authorities where required by law.
We do not sell data or share it with other companies for advertising.
4. Transfers outside the European Economic Area
Some providers (Google, Cloudflare, Meta, Chatra) may process data outside the EEA, including in the USA, on the basis of the European Commission decision (EU-US Data Privacy Framework) or standard contractual clauses. You can request a copy of the safeguards at biuro@atlanticmoto.pl.
When importing a vehicle from the USA or Canada, the data needed for the purchase and transport go to the auction house and carrier in that country, as this is necessary to perform the order (Art. 49(1)(b) GDPR).
5. How long we keep data
- Account and watched auctions: until the account is deleted.
- Data and documents related to a purchase order: for the duration of the order, then for 5 years from the end of the year in which the tax obligation arose, and until claims become time-barred.
- Newsletter: until you withdraw consent (viewed makes and models are deleted when you unsubscribe).
- Correspondence: until the matter is resolved, then until any claims become time-barred.
- Google Analytics statistics: up to 14 months.
- Server logs: up to 90 days.
6. Your rights
You have the right to access your data and receive a copy, to rectification, erasure, restriction of processing, data portability, to object to processing based on legitimate interest, and to withdraw consent at any time (without affecting the lawfulness of processing before withdrawal). To exercise your rights, write to biuro@atlanticmoto.pl.
You may also lodge a complaint with the President of the Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warszawa, Poland).
7. Do you have to provide data
Providing data is voluntary, but without account data you cannot create an account, without an e-mail address you cannot subscribe to the newsletter, and without the data needed for a purchase we cannot perform an import order.
We do not make decisions about you based solely on automated processing that produce legal effects. Matching newsletter offers to the cars you view is profiling without such effects.
9. Changes to this policy
We update the policy when the service or the law changes. The current version is always on this page, and we inform account holders about significant changes by e-mail.