AUTO DIAGNOSTIC

Privacy policy

2026-10-08-v1

1. Controller and scope

The data controller is CENTRUM OBD Piotr Józefiak, tax ID 6612295863, ul. Władysława Sikorskiego 87C, 27-400 Ostrowiec Świętokrzyski, Poland. Contact access@auto-diagnostic.pl about personal data. This policy covers autodiagnostic24.com, orders, correspondence and transfer of the data needed to activate access at https://auto-diagnostic.pl. It does not replace the payment provider’s information about its separate processing activities.

2. Data we process

For an order, we process email, full name, billing country and, where needed for a sales document, company name, tax number and address. We record package, price, currency, order number and time, the accepted terms version and the request for early performance. Manual access administration uses the relevant account details, username, selected coverage, access dates and information about order fulfilment. Payment and email administration includes identifiers and statuses for transactions, refunds, sending, delivery, errors and spam complaints. We also process correspondence, reports and necessary technical security data such as IP address, browser information and session identifier. The shop does not collect full card numbers, card security codes or online banking passwords. The order form does not ask for your Auto Diagnostic password. Do not send us your password.

3. Purposes and legal bases

We process data needed for orders, payment, manual access preparation and contact about fulfilment to enter into and perform the contract under Article 6(1)(b) GDPR. Accounting records and actions required by law, including handling statutory customer rights, are processed to meet legal obligations under Article 6(1)(c). Website and account security, preventing abuse and duplicate charges, establishing or defending claims, and answering ordinary enquiries are our legitimate interests under Article 6(1)(f). Data are used only to the extent needed for the relevant purpose. Marketing consent is not a condition of purchase.

4. Recipients and service providers

Providers receive the data needed for their tasks: LH.pl sp. z o.o., based in Poznań, Poland, for the website, database and infrastructure; Plus Five Five, Inc., trading as Resend, for transactional messages and delivery information; and payment providers — PayPro S.A. (Przelewy24) for PLN and Revolut Business for EUR and GBP. Resend receives the recipient address and the content of order-related messages. The relevant payment provider receives the data necessary to process and settle the transaction. Payment providers also process data on their own legal bases; information about them and their processing is available on the payment page and at przelewy24.pl/obowiazek-informacyjny-rodo-platnicy and www.revolut.com/legal/privacy/. Manual access preparation may require transferring to Auto Diagnostic the data needed to identify the relevant account and package. Where necessary, recipients may also include authorised customer support, accounting and legal personnel, and authorities entitled by law.

5. Processing outside the European Economic Area

Using Resend involves processing message data in the United States. Resend’s data processing terms incorporate the standard contractual clauses approved by the European Commission in Decision 2021/914 for transfers requiring those safeguards. Information and the terms are available at resend.com/legal/dpa. You can ask the controller for a copy of the safeguards applicable to your data and further information. We do not treat merely accepting or reading this policy as consent to an international transfer.

6. Cookies and browser storage

Orders use the essential “__Host-ad24” session cookie, which remains valid in the browser for up to 30 days. It links your browser to the order and protects access to its status. Browser session storage may hold a technical purchase-attempt identifier so that retrying does not create unwanted duplicate orders. Language and market are included in the page address. Essential storage supports functions you use; blocking it may prevent a purchase or status check. You can delete stored data in browser settings. This version of the website does not use Meta Pixel or Conversions API for advertising measurement. Any change will be preceded by appropriate information and, where required, your voluntary consent.

7. Retention

Data required for an order and access are kept while the contract is being performed and related matters are handled. Afterwards, we retain only data necessary for accounting obligations or establishing, pursuing and defending claims, until the relevant statutory retention or limitation period expires. An ongoing proceeding or legal requirement may require a longer period. For ordinary enquiries, we consider the time required to answer and close the matter; for security data, the time needed to detect and investigate abuse or a failure. A browser cookie expiring does not mean that legally required order records are deleted.

8. Your rights

You may request access and a copy of your data, correction, erasure, restriction and, where the GDPR conditions apply, data portability. You may object to processing based on legitimate interests for reasons relating to your particular situation. Where processing relies on consent, you may withdraw it at any time without affecting the lawfulness of earlier processing. Send requests to the controller; we may ask only for information needed to verify identity securely. Erasure does not cover records that the law still requires us to keep. You may complain to the President of Poland’s Personal Data Protection Office, UODO, at uodo.gov.pl, or another competent supervisory authority.

9. Providing data and automation

Providing data is voluntary, but without the required information we cannot enter into or perform the contract, assign access or issue a legally required document. You provide additional information on your own initiative. The shop automatically checks payment status and sends the purchase confirmation. The seller prepares and supplies access manually. If order details or status are incorrect, contact us so that a member of our team can review the matter. We do not use advertising profiling or automated individual pricing on this website.