Privacy policy

This policy explains what data we process when you contact us or use the website, why we do it and what rights you have. We write plainly, because that is how we work.

Last updated: 16 September 2026

1. Data controller

The controller of your personal data is Marcin Pasternak, trading as “Marcin Pasternak Magic - Cars”, Bobrowiczki 22D, 76-100 Bobrowiczki, Poland, tax ID (NIP) 8392161238. Contact: [email protected], tel. +48 508 154 460.

2. What data and why

When you write to us via the form (which opens your e-mail app), by e-mail, phone or WhatsApp, we process the data you provide: name, phone number, e-mail address, vehicle details (make, model, year, registration number, VIN), description of the fault or damage and the photos you send. We do this to answer your enquiry and prepare a quote (Art. 6(1)(b) GDPR — steps prior to a contract), to perform and document the service (point b), to issue an invoice and keep accounting records (point c — legal obligation), to settle a claim with an insurer on your instruction (point b), and, if necessary, to establish or defend legal claims (point f — legitimate interest).

3. Photo documentation of the vehicle

During the repair we photograph the vehicle at every stage. The photos serve as your progress updates, as quality documentation and, where relevant, for insurance settlement. We publish photos of your car on our social media only with your consent and with registration plates masked.

4. Recipients

Data may be shared with parties that help us operate: the website hosting provider (Hetzner Online GmbH, Germany) and content delivery network (Cloudflare, Inc.), the e-mail provider, our accounting office, carriers arranging vehicle transport (to the extent needed for the transport), insurers (when we settle a claim on your instruction) and parts suppliers. If you write via WhatsApp, your data is also processed by Meta Platforms Ireland Ltd. under its own terms.

5. Retention

Correspondence and enquiries — up to 3 years after the matter is closed. Job documentation and photos — for the warranty and limitation period (as a rule 6 years). Accounting documents — 5 years from the end of the tax year, as required by law.

6. Your rights

You have the right to access, rectify and erase your data, to restrict processing, to data portability and to object to processing based on legitimate interest. An e-mail to [email protected] is enough. You may also lodge a complaint with the Polish supervisory authority (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw) or your local authority.

7. Website, cookies and third-party tools

The website uses no cookies and no analytics or advertising tools. Fonts are hosted on our server. The map is a static image based on OpenStreetMap data — it does not track you. YouTube videos load only after you click play (in youtube-nocookie.com mode) — from that moment Google Ireland Ltd. processes data under its own privacy policy. Links to Instagram, Facebook, YouTube, TikTok, Google Maps and WhatsApp lead to external services with their own rules.

8. Server logs

The website server keeps no access logs with IP addresses. Only technical error logs are recorded when something fails (no profiling), and the content delivery network provider (Cloudflare) processes technical connection data for security and performance under its own policy (Art. 6(1)(f) GDPR).

9. Transfers outside the EEA

As a rule we process data within the European Economic Area. When you use YouTube or WhatsApp, data may be transferred to the USA — on the basis of the European Commission’s adequacy decision (EU-US Data Privacy Framework) or standard contractual clauses.

10. Changes

We may update this policy when the law or the way the website works changes. The current version is always available at this address.