Home / Privacy policy

Privacy policy

This explains what data we process in connection with using chinauto.pl, on what legal basis, and what rights you have under the GDPR.

Data controller

The controller of personal data processed in connection with using chinauto.pl is FIXPARTS TRADING Sp. z o.o., Os. Tysiąclecia 72 lok. 126, 61-255 Poznań, Polska. Company reg. no. (KRS): 0001008158, VAT ID (NIP): PL7822917372, REGON: 523936060. For anything related to data protection, contact us at [email protected].

What we collect

Through the forms on this site (quote, order, supplier inquiry, complaint) we collect the data needed to handle your request: your name or company name, contact details (email, phone), delivery address, vehicle details (make, model, VIN) and the content of your message, including any attachments such as photos of a part or documents.

If you use the AI assistant that answers questions about a vehicle's owner's manual, we process the content of your question in order to generate a reply.

We also automatically collect basic technical data (IP address, browser type, pages visited) in server logs, for security and technical diagnostics.

Legal basis and purposes

We process data to: prepare a quote and fulfil an order (GDPR Art. 6(1)(b) — performance of a contract or steps prior to entering one); issue invoices and meet tax obligations (Art. 6(1)(c) — legal obligation); handle complaints, establish or defend legal claims, and keep the site secure (Art. 6(1)(f) — our legitimate interest); and, where you've consented to marketing communications, on the basis of that consent (Art. 6(1)(a)).

How long we keep data

Order and invoice data is kept for as long as required by tax and accounting law (generally 5 years from the end of the year the tax obligation arose). Data from inquiries and quotes that did not result in an order is kept for no more than 12 months from the last contact, unless you ask us to delete it sooner.

Who we share data with

We may share data with parties needed to fulfil orders and run the business: couriers and freight forwarders (address and contact details), hosting and IT service providers, our accounting office, our online payment provider, and — for the AI assistant and description-translation features — external AI and translation technology providers, who receive only the content needed for that specific function. We do not sell data or share it with third parties for marketing purposes.

Transfers outside the EEA

Some technology providers (including some AI and translation service providers) may process data on servers located outside the European Economic Area, in particular in the US. Where this happens, the transfer relies on mechanisms provided for under the GDPR, including the European Commission's standard contractual clauses.

Cookies and browser local storage

The site uses cookies necessary for it to function (e.g. remembering your cookie-consent choice) and, only with your consent, analytics cookies if enabled.

The cart, wishlist, product comparison list, recently-viewed history and your saved vehicle ("garage") are stored locally in your browser (local storage) and are not sent to our servers unless and until you submit an order or inquiry.

Your rights

Under the GDPR you have the right to access your data, have it corrected or deleted, restrict its processing, receive it in a portable format, and object to processing based on our legitimate interest. Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before the withdrawal. To exercise any of these, email [email protected].

You also have the right to lodge a complaint with the Polish data protection authority (Prezes Urzędu Ochrony Danych Osobowych, UODO).

Is providing data mandatory?

Providing your data is voluntary but necessary to prepare a quote, place an order, or handle your request — without it we won't be able to act on your inquiry.

Data security

We apply appropriate technical and organizational measures to protect data against unauthorized access, loss or destruction, including an encrypted connection (HTTPS) and access limited to staff who need it to do their job.

Changes to this policy

This policy may be updated from time to time, in particular in response to changes in the law or in the services we offer. The current version is always available on this page.

Send your parts list — get a quote

We will contact you as soon as possible.

Send and get a quote