Privacy and cookies policy

Inwestor.intercars.com
Privacy and cookies policy

We process your Personal Data when you contact us, use the Website or you are our investor.

We respect your privacy and strive, in such cases, to follow best practices in the area of processing your Personal Data – in particular in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC, also known as the General Data Protection Regulation (GDPR).

This Privacy and Cookies Policy explains who we are, how we process your Personal Data, which cookies we use, your rights in this regard and how you can contact us if necessary.

The Privacy and Cookies Policy has been drawn up for information purposes only, which means that it does not give rise to any legal obligations either for you or for us (it does not constitute a contract). Consequently, we reserve the right to amend the Privacy and Cookies Policy from time to time. The current version of the Privacy and Cookies Policy will be available at the following link: https://inwestor.intercars.com/en/privacy-and-cookies-policy/.

Table of Contents

  1. Glossary – key terms
  2. Who is the controller of your Personal Data?
  3. What kind of Personal Data do we collect, for what purpose, for how long, and on what legal basis do we process it?
    1. Visits to the website
    2. Contacting us
    3. Newsletter
    4. Processing of investors’ Personal Data
  4. Who has access to your Personal Data?
  5. Your rights in relation to the processing of your Personal Data
  6. What are “Cookies” and other similar technological solutions? How and for what purpose do we use them?.

 

  1. Glossary – key terms

Personal Data – all information relating to you that we process. For example: name, email address, telephone number, etc.
Processing – any activity performed on Personal Data. For example: collection, storage, updating, deletion of data.
Website – the website available at inwestor.intercars.com

  1. Who is the controller of your Personal Data?

The controller of your personal data is Inter Cars S.A with its registered office in Swobodnia, address: ul. Swobodnia 35, 05-180 Swobodnia, e-mail: [email protected] (hereinafter: „Controller” or „Company”). The Controller has appointed a Data Protection Officer, who can be contacted at the following email address: [email protected] and at the address of the company listed above with the note „DPO”.

  1. What kind of Personal Data do we collect, for what purpose, for how long, and on what legal basis do we process it?

  1. VISITS TO THE WEBSITE

When you visit the Website, we may use cookies and other similar technological solutions (detailed information is provided in Section VI of the Privacy and Cookies Policy). These technologies allow us to maintain the proper functioning of the Website and analyze information regarding your activity on the Website. We process this data to improve the quality of our services and optimize the Website’s functionality. In some cases, cookies (or similar technologies) also help us tailor content available via the Website to your interests (profiling). Certain cookies may be used for marketing purposes, both within the Website and across the websites of our business partners.

The legal basis for the use of cookies and similar technologies is generally your consent.

The legal basis for processing data collected through cookie technology is our legitimate interest or the legitimate interest of a “third party” (Article 6(1)(f) GDPR) – including the need to ensure the highest quality of the presented content and, in some cases, the marketing of our or our partners’ products and services. In such cases, partners do not participate in the processing of your data. Where our partners have direct access to this information, the legal basis for such processing is your freely given consent (Article 6(1)(a) GDPR).

We process Personal Data based on your consent until it is withdrawn. Personal Data processed based on our legitimate interest may be stored until you object to the processing, except in situations where, despite your objection, we determine that there are compelling legitimate grounds for the processing that override your interests, rights, and freedoms, including the establishment, exercise, or defence of legal claims.

The above does not apply where the use of cookies and similar technologies is necessary for the proper operation of the Website (i.e., for providing you with an electronic service). In such cases, processing is based on legal provisions and the necessity of processing for the performance of the service agreement (Article 6(1)(b) GDPR). Your Personal Data will then be processed for as long as necessary to achieve these purposes.

Information regarding recipients of your Personal Data, including any transfers of your Personal Data to third countries (outside the European Economic Area), is provided in Section IV below.

The rights you have regarding the processing of your Personal Data are detailed in Section V below.

  1. CONTACTING US

When you contact us, e.g. using email, available forms, social media, etc., examples of Personal Data that we may process are: Personal Data that identifies you (e.g. email address, IP number, etc.), contact metadata (e.g. date of contact, duration of our conversation), and the content of our communication (e.g. content of emails). Your Personal Data is processed to respond to your inquiry, enhance our communication, improve customer service quality, and for marketing purposes. The purpose of processing depends on the context of our communication. In some cases, your Personal Data may be used for the conclusion of an agreement with you, and if an agreement is already in place, for ensuring proper service under our cooperation (e.g., handling your complaint).

The legal basis for processing in such cases depends on the context of the communication. If you contact us solely for general information (e.g., about the Website), we process your Personal Data based on our legitimate interest (resulting from the purposes mentioned above; Article 6(1)(f) GDPR). If your inquiry leads to the conclusion of, for example, a contract of sale, the appropriate legal basis for processing will be Article 6(1)(b) GDPR – processing necessary for taking steps at your request before entering into an agreement. If an agreement is already in place and you contact us regarding its performance, the legal basis for processing is Article 6(1)(b) GDPR – processing necessary for the performance of the agreement.

We may also process your Personal Data for claim handling and legal proceedings, in which case the legal basis is our legitimate interest (Article 6(1)(f) GDPR).

Providing Personal Data is voluntary, but necessary for effective communication with us.

If your Personal Data was collected solely in connection with our current communication, it may be processed for a period ranging from a few days to several months (depending on the category of information and the significance of our communication for potential future interactions).

Personal Data processed based on our legitimate interest may be stored until you object to processing unless there are overriding legitimate legal grounds for processing or for establishing, exercising, or defending legal claims.

The principles of Personal Data protection and use by social media platforms you use to contact us are described in their respective privacy policies. For example, the following websites contain information on the processing of Personal Data by the services:

Information regarding recipients of your Personal Data, including any transfers of your Personal Data to third countries (outside the European Economic Area), is detailed in Section IV below.

The rights you have regarding the processing of your Personal Data are detailed in Section V below.

  1. NEWSLETTER

We may send you commercial information about us, our products and services (or those of our partners) through your chosen communication channel, but only upon your prior consent, including information tailored to your interests based on profiling. The legal basis for the processing of your Personal Data for this purpose is our or our partners’ legitimate interest (Article 6(1)(f) of the GDPR) – for our or a third party’s marketing purposes.

The provision of Personal Data is voluntary, however necessary in order to subscribe to the Newsletter.

We may also process your Personal Data for the purpose of handling and pursuing claims – the legal basis for such processing is, as applicable, our legitimate interest (Article 6(1)(f) of the GDPR).

We may process your Personal Data for the period during which it is necessary for the conduct of our marketing activities, unless you object to such processing, or for a longer period resulting from the need to retain the data in case of potential claims, for a limitation period as provided by law, in particular the Civil Code, or for the duration and settlement of judicial proceedings. In each case, the longer retention period of the Personal Data shall prevail.

Information regarding recipients of your Personal Data, including any transfers of your Personal Data to third countries (outside the European Economic Area), is detailed in Section IV below.

The rights you have regarding the processing of your Personal Data are detailed in Section V below.

  1. PROCESSING OF INVESTORS’ PERSONAL DATA

If you are our shareholder, a proxy thereof, or if you subscribe to our bonds or subscription warrants, we process your Personal Data for the purpose of performing tasks related to the handling of holders of securities issued by the Company, in particular for the purpose of:

  • identifying and verifying holders of such securities,
  • maintaining the share register, and issuing excerpts and extracts therefrom,
  • convening and organising general meetings, including: enabling entitled persons to exercise voting rights at such meetings, preparing the list of persons entitled to participate in the general meeting, and verifying the entitlement to attend in person or to represent another entitled person at the general meeting.

The legal basis for the processing of Personal Data is the necessity to comply with a legal obligation to which the controller is subject (Article 6(1)(c) of the GDPR), arising in particular from:
(i) the Polish Commercial Companies Code (hereinafter: the “CCC”),
(ii) the Polish Public Offering and the Conditions for Introducing Financial Instruments to the Organised Trading System and Public Companies Act,
(iii) the Polish Regulation of the Minister of Finance on current and periodic information provided by issuers of securities and conditions for recognizing as equivalent information required under the law of a non-member state.

Additionally, the Personal Data may be processed based on the Company’s legitimate interest in maintaining contact with investors, their representatives or proxies, as well as verifying their identity, and for the purpose of pursuing potential claims or defending against claims (Article 6(1)(f) of the GDPR).

For the purposes of convening, organising, and holding the General Meeting, the controller processes the following categories of Personal Data of shareholders or their representatives and proxies: identification data (name, surname), address data, contact details (telephone number, email address), identity document number, PESEL (Personal ID) number and image.

The controller may also process other Personal Data provided by the shareholder or their proxy, including data entered into the system of “Krajowy Depozyt Papierów Wartościowych S.A.” (Central Securities Depository of Poland, “CSDP”).

Personal Data of shareholders originating from the CSDP system include: name, surname, certificate number, postal address, number of shares, and the CSDP participant code. The transfer of such data to CSDP, and subsequently to the Company, occurs as a result of a notification to the entity maintaining the securities account of the shareholder’s intention to participate in the Company’s general meeting.

The Personal Data of shareholders’ proxies is derived from the power of attorney received by the Company and from the identity document.

The Personal Data of investors, including data contained in shareholder lists, attendance lists, powers of attorney, and documents confirming the representation relationship, are retained for the duration of the Company’s existence, and may subsequently be transferred to an entity designated for document archiving in accordance with the CCC.

  1. Who has access to your Personal Data?

Your Personal Data may be transferred to providers of IT systems and IT services, entities providing services to the Controller necessary for the fulfilment of the processing purposes mentioned above, including legal, advisory, audit, security, and anti-fraud services, as well as to banks, courier and transport companies, Polish Post, entities within the Inter Cars Capital Group, as well as public authorities and other entities in accordance with generally applicable laws.

Moreover, if you have given separate consent to receive commercial information from us, your Personal Data may be made available to entities providing us with a newsletter delivery system, an agency delivering the newsletter on our behalf, and advertising service providers acting on our behalf, in particular Google LLC and Meta (Facebook’s provider) for the purpose of creating marketing audiences.

Additionally, if you are our investor:

(i) the recipients of your Personal Data may include:

  • entities cooperating with the Controller in relation to the Company’s obligations regarding the holding of the general meeting based on data processing agreements
  • auditors, statutory auditors, entities providing legal assistance
  • other shareholders, in connection with their right to inspect the shareholders’ register, have the register available, and their right to receive a copy of such register;

(ii) your Personal Data may also be published in the current report of Inter Cars S.A. in relation to the Company’s informational obligations.

We may transfer your Personal Data outside the European Economic Area (EEA) to third countries. The data will be transferred based on an adequacy decision by the European Commission/standard contractual clauses entered into between us and the entity located outside the EEA. If you wish to access the documents we use when transferring your Personal Data from the EEA, please contact us.

  1. Your rights in relation to the processing of your Personal Data

To efficiently exercise your rights, please direct all requests to the email address specified in the Section II above, including “GDPR Request” in the subject line and specifying in the content which right you wish to exercise. The instructions provided in the previous sentence are merely a recommendation and not a requirement. Submitting a request in another manner does not result in the loss of the rights listed below.

At any time, you have the right to:

  1. access your Personal Data (including, for example, obtaining information on which Personal Data is processed or receiving a copy of it);
  2. request rectification and restriction of processing (e.g., if your Personal Data is inaccurate) or erasure of Personal Data (e.g., if it has been processed unlawfully);
  3. data portability regarding the Personal Data you have provided to the controller, and which is processed in an automated manner, provided the processing is based on consent or a contract, e.g., to another controller;
  4. withdraw any consent given to the controller at any time, whereby the withdrawal of consent does not affect processing carried out by the controller lawfully before its withdrawal;
  5. object to the processing of your Personal Data carried out for the purposes of the legitimate interests of the controller or a third party (unless there are other compelling legitimate grounds for processing that override your interests). If Personal Data is processed for direct marketing purposes, you have the right to object at any time to the processing of your Personal Data for such marketing, including profiling, to the extent that it is related to such direct marketing – in such a case, Personal Data must no longer be processed for those purposes.
  6. lodge a complaint with the President of the Personal Data Protection Office (a detailed description of the complaint procedure is available at: https://uodo.gov.pl/en/681/1404). Of course, if you wish to provide feedback regarding our practices, we encourage you to contact us first.

  1. What are “Cookies” and other similar technological solutions? How and for what purpose do we use them?

“Cookies” are small text files sent by a server and stored on your device (usually on the computer’s hard drive). They store information we may need to tailor the Website to your usage and to collect statistical data.

During your visit to the Website, we may collect data regarding the domain name of your internet service provider, browser type, operating system type, IP address, the websites you visit, elements you download, as well as operational data or information about the location of the device you are using.

We assure you that all information received in this way is used solely for the purposes specified in this policy and is in no way harmful to you or your device, as it does not introduce any configuration changes.

Of course, you can change how cookies are used, including blocking or deleting them entirely (details are provided in the “Managing cookies” section below). However, doing so may prevent or significantly hinder the proper functioning of the Website (e.g., slowing down its operation), so we recommend not disabling them in your browser.

We always provide information explaining which cookies we use and for what purposes during your first visit to the Website.

Cookies used by the Website:

  1. Basic – include cookies necessary for the proper functioning of the Website, enabling website functionality, but they are not used for tracking users;
  2. Analytics – used to analyse user behaviour within the Website for statistical and analytical purposes; they help provide information on metrics such as the number of visitors, bounce rate, traffic sources, etc.;
  3. Personalisation – remember options selected by the user (such as the language of the Website display) and enable optimization of the Website’s operation, ensuring a better user experience when interacting with the Website;
  4. Targeted Advertising – used to display personalized ads to users based on their preferences and previous online activity, as well as measuring the effectiveness of advertising campaigns.

To view a detailed description of the cookies we use (including the provider, cookie type, and purpose), click the “Manage Preferences” button on the cookie banner displayed when entering the Website or graphic symbol of a cookie (the “Cookie Preferences” button) available on every subpage of the Website.

Third-Party cookies

We may cooperate with other companies in their analytical or marketing (advertising) activities. For the purposes of this cooperation, cookies from these entities may be stored on your device. These are so-called third-party cookies.

The aforementioned entities, due to using their own cookies within the Website, may become controllers of your Personal Data.

Below, you will find the companies that use (or their affiliates use) cookies on the Website, along with links to their privacy policies describing how they process personal data:

  1. Google LLC (Google Analytics, Google Tag Manager, Youtube), https://policies.google.com/privacy;
  2. Microsoft Corporation (Clarity, Bing), https://www.microsoft.com/pl-pl/privacy/privacystatement;
  3. Meta Platforms, Inc. (Facebook, Instagram, Piksel Meta), https://www.facebook.com/privacy/policy/;
  4. Vimeo .com, Inc. (Vimeo), https://vimeo.com/privacy;
  5. TikTok Technology Limited oraz TikTok Information Technologies UK Limited (TikTok Pixel) https://www.tiktok.com/legal/page/eea/privacy-policy/en;
  6. Benhauer sp. z o.o. (Salesmanago), https://www.salesmanago.pl/info/obowiazek-informacyjny.htm.

Managing cookies

At any time, you can modify how cookies are used by managing your consents within the privacy settings of the Website or your browser. In particular, you may withdraw previously given consent – this will not, however, affect the lawfulness of processing carried out based on consent before its withdrawal.

You can withdraw consent for cookie collection from within the Website through the cookie consent management platform. The cookie banner can be displayed by clicking graphic symbol of a cookie (the “Cookie Preferences” button) available on every subpage of the Website.

Once the banner is displayed, you can withdraw consent for cookies other than essential ones by clicking the “Reject what is not essential” button. To customize (manage consents) for selected categories of cookies, adjust the toggle next to the chosen cookie category and press the “Save” button.

You can also withdraw consent for cookies through your browser settings. Browser manufacturers provide instructions on how to manage cookies within their products – examples can be found at the following links:

Google Chrome
Edge
Mozilla Firefox
Safari (Desktop)
Safari (Mobile)
Opera

You can also find information about your browser’s privacy settings here: http://www.youronlinechoices.com/

Last update of the Privacy and Cookies Policy: 04.12.2025

Search results
    Skip to content