Privacy Policy
1. Data controller
The controller of your personal data is balcerzak.it Radosław Balcerzak, ul. Słoneczna 11B, 64-730 Rosko, tax ID (NIP) 7631978291. For any data protection matters please write to support@carsupcoming.com.
2. What data we process, why and on what legal basis
| Purpose | Data | Legal basis |
|---|---|---|
| Creating and running your Account, following premieres, e-mail notifications about followed premieres | e-mail address, password (stored only in hashed form), language, sign-up date, followed premieres | Art. 6(1)(b) GDPR – performance of a contract (Terms of Service) |
| Sending marketing information about news and offers of the Service | e-mail address, date and wording of the consent given | Art. 6(1)(a) GDPR – consent; Art. 398 of the Polish Electronic Communications Law |
| Visit statistics (Google Analytics 4, Ahrefs Web Analytics) | device and browser data, approximate location, pages visited, cookie identifiers | Art. 6(1)(a) GDPR – consent; Art. 399 of the Polish Electronic Communications Law |
| Security of the Service and its forms (Google reCAPTCHA, rate limiting) | IP address, device data and form interaction | Art. 6(1)(f) GDPR – legitimate interest: protection against abuse |
| Handling complaints and replying to messages (including the contact form) | full name, e-mail address, content of correspondence | Art. 6(1)(b) and (f) GDPR |
| Offer requests (“I want an offer for this car”) – preparing an offer and passing your request to a selected authorised dealer or leasing company | full name, e-mail address, optionally phone number and postcode, country, purchase type, the model concerned | Art. 6(1)(a) GDPR – consent given in the form |
| Following brands and segments and the weekly premiere summary sent at your request | e-mail address, language, followed brands or segments, confirmation date | Art. 6(1)(b) GDPR – providing the service you ask for |
| Browser notifications (web push) about selected premieres | technical browser subscription address and encryption keys, language, selected premieres or brands | Art. 6(1)(a) GDPR – consent given in the browser |
| “I'm waiting for this car” – counting votes without duplicates | random browser identifier stored in a cookie, hashed IP address to limit abuse | Art. 6(1)(f) GDPR – a fair ranking |
| Establishing, exercising or defending legal claims | data necessary in the given case | Art. 6(1)(f) GDPR |
Providing your e-mail address and a password is voluntary but necessary to create an Account. Marketing consent is entirely voluntary – the Account works without it. We do not make decisions about you based solely on automated processing, including profiling (Art. 22 GDPR).
3. Recipients
Data may only be received by the providers we use to run the Service:
- cyber_Folks S.A. (Poznań, Poland) – hosting of the Service and e-mail;
- Google Ireland Limited – Google reCAPTCHA and, with your consent, Google Analytics 4;
- Ahrefs Pte. Ltd. (Singapore) – with your consent, Ahrefs Web Analytics;
- authorised dealers and leasing companies – only the data from an offer request and only if you consented to this in the form;
- Google Ireland Limited (YouTube) – only after you click a video on a premiere page (privacy-enhanced player);
- browser push service providers (e.g. Google, Mozilla, Apple) – only if you enable browser notifications;
- public authorities – only where required by law.
4. Transfers outside the European Economic Area
Google may process data in the United States under the European Commission's adequacy decision for the EU-US Data Privacy Framework or standard contractual clauses. Ahrefs processes data in Singapore under standard contractual clauses approved by the European Commission. You can request a copy of these safeguards from the controller.
5. Retention
- Account data – until the Account is deleted;
- data processed on the basis of consent – until consent is withdrawn;
- statistics in Google Analytics – up to 14 months;
- offer requests – until consent is withdrawn, no longer than 12 months after submission;
- data needed to defend claims – until the limitation period expires.
6. Your rights
You have the right to access, rectify and erase your data, to restrict its processing and to data portability, as well as the right to object to processing based on legitimate interest. You can withdraw consent at any time – marketing consent in your Account settings (“Your account” panel), consent to analytics cookies via the “Cookie settings” link in the page footer. Withdrawal does not affect the lawfulness of processing before withdrawal. To exercise your rights, write to support@carsupcoming.com.
You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl) or with the supervisory authority in your country of residence.
7. Cookies
Cookies are small files stored in your browser. We always use essential cookies because the Service does not work without them. Analytics cookies are set only after you consent in the banner. You can change your choice at any time via the “Cookie settings” link in the page footer or in your browser settings.
| Name | Provider | Purpose | Type | Retention |
|---|---|---|---|---|
| PHPSESSID | CarsUpcoming | session and Account login | essential | until the browser is closed |
| cu_consent | CarsUpcoming | remembering your cookie choice | essential | 180 days |
| cu_voter | CarsUpcoming | remembering that you have voted “I'm waiting for this car” (random identifier; your votes are also kept in browser storage) | essential for the feature | 2 years |
| _GRECAPTCHA | protecting forms against bots (reCAPTCHA) | essential | up to 6 months | |
| _ga, _ga_7J5H6JNJDB | visit statistics (Google Analytics 4) | analytics – only with consent | up to 2 years | |
| – | Ahrefs | visit statistics (Ahrefs Web Analytics); according to the provider the tool sets no cookies, but we still load it only with consent | analytics – only with consent | – |
We use Google Consent Mode v2: until you consent, Google Analytics is not loaded at all. We do not use advertising cookies.
8. Changes to this policy
We will inform registered Users of material changes by e-mail. The current version is always available on this page. See also the Terms of Service.