1. Data Controller
The personal data controller is CarCamp Software Andrzej Bloch, ul. Głowackiego 17, 70-238 Szczecin, Poland, Tax ID (NIP): 8561571796 (hereinafter: "Controller" or "we"). Services are offered and rendered under the commercial and trade name Premium Camper Broker. Premium Camper Broker is not a separate legal entity or separate data controller. Contact regarding personal data protection: • email: biuro@premiumcamperbroker.eu • postal address: ul. Głowackiego 17, 70-238 Szczecin, Poland The Controller has not appointed a Data Protection Officer. For all privacy matters, you may contact the Controller directly using the details above.
2. Scope of Collected Data
Depending on how you use our Website, we may process in particular: 1. data provided in the contact form or during telephone/email contact, such as: name and surname, email address, phone number, message content, vehicle preferences, budget, and other voluntarily provided details; 2. data required for contract preparation and performance, including identification, contact, address, billing data, and vehicle/service parameters; 3. data related to complaints, claims, or defense against legal claims; 4. email address and consent details for newsletter subscription or commercial information; 5. technical data related to Website usage, including IP address, cookies, device type, OS, browser, approximate location, timestamp, visited pages, referral source, and session activity; 6. data provided through our social media profiles (comments, messages, profile information). Please do not submit sensitive personal data (health, political views, religious beliefs) unless strictly necessary.
3. Purposes, Legal Grounds, and Retention Periods
3.1. Handling inquiries and preparing proposals: Processed under Art. 6(1)(b) GDPR (pre-contractual steps) or Art. 6(1)(f) GDPR (legitimate interest in communication and business relationships). Retained for the duration of inquiry handling and up to 12 months from the last contact, unless a contract is concluded or longer retention is required for legal claims. 3.2. Contract conclusion and execution: Processed under Art. 6(1)(b) GDPR, and Art. 6(1)(c) GDPR for accounting and tax obligations. Retained for the duration of contract performance and until the expiry of statute of limitations and mandatory statutory tax retention periods. 3.3. Complaints and legal claims: Processed under Art. 6(1)(c) GDPR and Art. 6(1)(f) GDPR (legitimate interest in defending rights). Retained until final dispute resolution and expiry of limitation periods. 3.4. Newsletter and electronic marketing: Processed under Art. 6(1)(a) GDPR (voluntary consent). Retained until consent withdrawal or newsletter discontinuation. 3.5. Analytics, advertising, and conversion measurement: Processed under Art. 6(1)(a) GDPR (cookie consent) for Google Analytics 4 and Meta Pixel. Tools are not triggered prior to obtaining consent. 3.6. Security and bot protection: Processed under Art. 6(1)(f) GDPR (legitimate interest in security) using Cloudflare Turnstile. 3.7. Social media: Processed under Art. 6(1)(f) GDPR for social media interactions and marketing.
4. Voluntariness of Data Provision
Providing personal data is voluntary, but necessary for submitting forms, receiving proposals, or executing contracts. Refusal may prevent communication or service delivery. Consent for marketing and analytical cookies is entirely voluntary.
5. Data Recipients
Data may be disclosed strictly as needed to: • hosting and email infrastructure providers, including nazwa.pl; • CRM system providers (Pipedrive); • analytics, advertising, and security providers (Google, Meta, Cloudflare); • accounting, legal, and IT advisors; • vehicle dealers, inspectors, technical inspection stations, carriers, and registration partners; • banks, leasing institutions, and insurance companies; • authorized public authorities when required by law.
6. Data Transfers Outside the EEA
Using services from Google, Meta, or Cloudflare may involve data transfers outside the European Economic Area (specifically to the US). Such transfers rely on GDPR transfer mechanisms, including European Commission adequacy decisions (EU-US Data Privacy Framework) or Standard Contractual Clauses (SCCs) with supplementary safeguards.
7. Automated Decision-Making and Profiling
We do not subject users to decisions based solely on automated processing that produce legal effects. Advertising tools may employ marketing profiling (audience segmentation) upon consent, without producing legal consequences.
8. Data Subject Rights
Under GDPR, you have the right to: • access your data and obtain copies; • rectify and complete inaccurate data; • erase data ("right to be forgotten"); • restrict data processing; • data portability; • object to processing based on Art. 6(1)(f) GDPR or direct marketing; • withdraw consent at any time without affecting prior lawful processing; • lodge a complaint with the President of the Personal Data Protection Office (PUODO). Requests can be sent to biuro@premiumcamperbroker.eu.
9. Cookies and Similar Technologies
Our Website uses cookies and similar technologies. Essential cookies operate without consent to ensure security and accessibility. Analytics and marketing cookies operate strictly upon user consent. Detailed descriptions and preference management are available in our Cookie Policy.
10. Data Security
We implement appropriate technical and organizational measures, including SSL/TLS encryption, restricted access controls, user authentication, and anti-spam verification to safeguard personal data against unauthorized disclosure, loss, or alteration.
11. Source of Data
Data is primarily obtained directly from data subjects. Technical data is recorded automatically via browser headers, server logs, and cookies in accordance with granted permissions.
12. Privacy Policy Updates
This Policy may be updated to reflect legislative, organizational, or technical changes. The updated version is published on the Website along with its effective date.
