1. Who is responsible for your data?
The controller is DILS SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ (DILS sp. z o.o.), with its registered office at ul. Stanisława Małachowskiego 8, 61-129 Poznań, Poland.
For privacy enquiries and requests concerning your data, write to rafal@dils.pl or to the registered address above. You may also call +48 510 363 712.
This notice covers visitors to dils.pl and people who contact DILS in connection with B2B vehicle trading, sourcing and transaction coordination, including representatives of buyers and suppliers. References to the GDPR mean Regulation (EU) 2016/679 (GDPR).
2. What information is processed and where does it come from?
When you visit: the web server receives technical information needed to deliver the website. Hosting and security logs may contain your IP address, the date and time, the requested resource, response status, browser or device information and a referring page where your browser supplies it. The actual log fields depend on the hosting configuration.
When you contact DILS: information can include your name, professional role, company, email address, telephone number, correspondence and attachments, vehicle requirements, offers and information necessary to discuss or coordinate a transaction. Please provide only information relevant to the enquiry.
Most information is obtained directly from you. If a colleague or business partner provides your professional contact details, that person or organisation is the source. Where business contact details are obtained from a public business register or a professional website, that public source is the source of the information. In such cases the data is limited to professional identification, role and contact information relevant to the business relationship.
3. Why is information processed and on what basis?
- Answering enquiries, reviewing sourcing requests or stock offers and maintaining business relationships: Article 6(1)(f) GDPR — DILS’s legitimate interest in professional communication, assessing commercial opportunities and dealing with business partners and their representatives.
- Taking steps at your request before a contract or performing a contract with you as an individual, including a sole trader: Article 6(1)(b) GDPR. Where the contracting party is a company and you act for it, the handling of your representative contact details is instead based on the legitimate interest described above.
- Meeting applicable legal duties, including accounting and tax obligations where a transaction takes place: Article 6(1)(c) GDPR.
- Providing a functioning and secure website, diagnosing faults, preventing abuse and establishing, exercising or defending legal claims: Article 6(1)(f) GDPR — the legitimate interests in service security and protecting DILS’s rights.
Sending an enquiry does not subscribe you to a newsletter or constitute consent to unrelated marketing. The website does not offer accounts, checkout, a subscription service or an online enquiry submission form.
4. Who may receive the information?
The website is delivered by a hosting service. The hosting provider processes technical information required to deliver and secure the service. Hosting does not mean that the same provider necessarily operates DILS’s email.
Where needed for the relevant purpose, information may be made available to providers of email and IT services, professional advisers, accounting service providers, and the buyers, suppliers or transport providers involved in the particular transaction. Authorities or other recipients may receive information where disclosure is required by law or necessary to pursue or defend a claim.
Only information relevant to the task is shared. Providers processing personal data on DILS’s behalf may do so only under appropriate data-processing arrangements. Transaction parties and professional advisers may act as separate controllers for their own responsibilities.
5. How long is information kept?
The retention period depends on the purpose and the nature of the information:
- Enquiries that do not result in a transaction: for the time needed to respond, clarify the request and complete relevant follow-up. Once the matter has ended, information is deleted unless it remains necessary for an ongoing business relationship or a specific legal purpose.
- Business relationships and transaction records: while the cooperation or transaction is being handled, and afterwards only to the extent required by applicable accounting or tax rules or necessary for claims within the relevant limitation periods. Applicable statutory periods and the nature of the document determine the retention period.
- Technical logs: for the period needed to diagnose service faults, identify abuse and investigate security incidents, subject to the logging and rotation settings of the hosting service. Entries needed as evidence of a particular incident may be retained until the incident and any related claims are resolved.
- Privacy requests: for the time needed to handle the request and, where necessary, to demonstrate how DILS met its obligations or to deal with related claims.
These are purpose-based retention criteria, not permission to keep all correspondence indefinitely. You may contact DILS for information about the retention applicable to a particular matter.
6. Processing outside the European Economic Area
The website does not include analytics or advertising integrations that transmit your browsing activity to those platforms. Hosting, email and other IT providers may, however, use infrastructure or subprocessors outside the European Economic Area; the arrangements depend on the contracted service.
Any such transfer must have a valid basis under Chapter V GDPR, such as an applicable adequacy decision or appropriate safeguards, including the European Commission’s standard contractual clauses and supplementary measures where required. Information about the arrangements applicable to your data and how to obtain a copy of relevant safeguards can be requested at rafal@dils.pl.
7. Your rights
Depending on the circumstances and the applicable conditions, you may request access to your personal data and a copy of it, correction, erasure or restriction of processing. Data portability applies where processing is automated and based on your consent or a contract with you.
You have the right to object, on grounds relating to your particular situation, to processing based on legitimate interests under Article 6(1)(f) GDPR. DILS must then assess the objection and stop that processing unless overriding legitimate grounds or grounds relating to legal claims apply.
Send requests to rafal@dils.pl. DILS may ask for information reasonably needed to confirm your identity and locate the data, without requesting unnecessary identity documents.
You may lodge a complaint with the President of the Polish Personal Data Protection Office (UODO) or with the competent supervisory authority in the EU/EEA country of your habitual residence, workplace or the alleged infringement.
9. Email, telephone and copying the address
Email buttons use a mailto link addressed to rafal@dils.pl. Buying and supplier buttons include a subject appropriate to the request. They ask your device or browser to open its configured email service with DILS as the recipient. You can edit the subject and write the message before sending. The website does not send a message automatically or receive a copy of an unsent draft.
If no email service opens, you can copy the visible address into your usual email service. The copy button writes the DILS email address to your clipboard only when you press it; it does not read your clipboard. Telephone links are handled by your device.
Once you send an email or provide information during a call, DILS processes the information as described in this notice. Your own email or telephone service provider also processes information under its own terms.
10. Providing information and automated decisions
Providing information in correspondence is voluntary, but DILS may not be able to respond or assess an offer without the relevant contact and commercial details. Certain information is required if a transaction is to proceed or to comply with legal duties. Technical connection information is necessary for the server to deliver the website.
DILS does not use personal data covered by this notice for decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects on you.
11. Updates
This notice may be updated when the website, processing arrangements or applicable requirements change. The date at the top identifies this version. Material changes are to be communicated appropriately where required.