This document describes how IMS Grupa processes the personal data of people who use the imsgrupa.pl website, contact the company, or use the cleaning and hand car wash services. It applies from 7 September 2026.

Data controller

The data controller is IMS Grupa Tomasz Dołbniak, ul. Szamocka 10c lok. 75, 01-748 Warsaw. Contact for personal data matters: info@imsgrupa.pl or by phone at 518 757 750. Places where services are performed: client premises and the hand car wash in the garage of the Brama Zachodnia building, al. Jerozolimskie 92, Warsaw. No data protection officer has been appointed.

What the site does not do

It does not store cookies or other identifiers in the browser.
It does not load analytics scripts, advertising scripts or social media plugins.
It does not embed maps or videos from external services.
It has no user accounts or forms that collect data.

The site consists of static files. When it is displayed, the hosting provider's server saves logs: IP address, request time, page address and browser name. We process them to protect the site and diagnose failures, on the basis of Article 6(1)(f) of the GDPR; our legitimate interest is the security and proper functioning of the site. The retention period of the logs results from the hosting provider's configuration; we provide the current period on request sent to the address given above.

What data we process and why

Data reaches us when you write to us, call us, come to the car wash, or order a service. This includes:

first and last name, phone number, e-mail address, company name and premises address, message content: to reply to the enquiry and prepare an offer;
data needed to perform the service and settle payment for it, in the case of the car wash also the car make and registration number and arrangements regarding keys and collection from the wash station;
data for invoices and accounting;
data needed to establish or defend claims, for example regarding damage described in the car wash terms and conditions.

Legal bases: when you enquire about concluding a contract in your own name or are a party to it, the basis is Article 6(1)(b) of the GDPR (pre-contractual measures and performance of the contract). For other correspondence and contact with client representatives, for example employees of the company ordering the cleaning, the basis is Article 6(1)(f) of the GDPR; our legitimate interest is handling correspondence and cooperation with clients. Invoices and accounting are a legal obligation (Article 6(1)(c) of the GDPR, tax and accounting regulations). Establishing and defending claims is our legitimate interest (Article 6(1)(f) of the GDPR).

You provide contact data voluntarily; it is needed if we are to reply remotely. When ordering, we require the data necessary for the agreed way of performing the service. The data required to issue an invoice results from tax regulations.

How long we keep data

Enquiries that did not result in a contract: up to 12 months from the last contact.
Data from contracts and orders: for the duration of the cooperation, and then until the limitation period for claims expires.
Tax documentation: until the limitation period for the tax liability expires, as a rule 5 years from the end of the year in which the tax payment deadline fell. Suspension or interruption of the limitation period may extend this period.

Who receives the data

Data may be received by entities that service the company under data processing agreements: the provider hosting the website and e-mail, and the accounting office. The company maintaining the website has access only to server logs when working on the site. When keys are handed over by the security staff of the Brama Zachodnia building, in accordance with the car wash terms and conditions, the security staff receive the data necessary for their correct handover. Data is not sold or transferred for the marketing purposes of other companies.

If any of the providers processes data outside the European Economic Area, this takes place solely on the basis of a mechanism provided for in the GDPR, for example the European Commission's standard contractual clauses. We provide information about the country, mechanism and safeguards, and a copy of them, on request sent to info@imsgrupa.pl.

Your rights

You have the right to access your data, to have it rectified, erased, or its processing restricted, to data portability, and to object to processing based on legitimate interest. Send your request to info@imsgrupa.pl.

Not every right applies in every situation. Portability applies to data provided by you and processed automatically on the basis of a contract. We do not erase data that we must retain due to a legal obligation. You may object to processing based on legitimate interest for reasons related to your particular situation.

You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stanisława Moniuszki 1A, 00-014 Warsaw.

We do not make decisions solely by automated means and we do not carry out profiling.

Links to other services

The site contains links to Google Business profiles, the website developer's page, and other external sites. Once clicked, the privacy policies of those services apply.

Changes

Changes to this document are published on this page with a new effective date.