Skip to main content

Wash&Drive

FIND A CAR WASH →
Find a car wash

Privacy & Cookie Policy

Introduction

The purpose of this Privacy and Cookies Policy is to inform you about matters relating to the collection and processing of your personal data, which we obtain in connection with your use of the website washanddrive.pl/. After reading this Policy, you will also know how you can exercise your rights to access, rectify and erase your data.

We invite you to read the rules set out in this Privacy Policy.

Personal Data Controller

The controller of your personal data is WASH & DRIVE SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ (limited liability company) with its registered office in Kraków, at: ul. Jana Dekerta 24, 30-703 Kraków, Poland, entered in the Register of Entrepreneurs of the National Court Register (KRS) maintained by the District Court for Kraków-Śródmieście in Kraków, 11th Commercial Division of the National Court Register, under KRS number: 0001216839, holding Tax Identification Number (NIP): 6793353706 and Statistical Identification Number (REGON): 543741894, with a share capital of PLN 5,250.00.

The Controller provides all information relating to the processing of personal data via the following contact details:

Correspondence e-mail address: biuro@washanddrive.eu

What Data Do We Collect?

When you use our website, we may collect the following data:

  • the user’s IP address, which may be stored in server logs;
  • data collected via Google Analytics for the purpose of analysing website traffic;
  • data processed via Google Tag Manager for the purpose of managing tags and monitoring activity on the website;
  • data collected via Meta Pixel (the Facebook pixel), in particular information about the user’s activity on the website, device and browser, as well as online identifiers — for the purpose of measuring advertising effectiveness, conducting remarketing activities, personalising advertisements and creating audiences.

Purposes of Data Processing

Users’ personal data are processed for the following purposes:

  1. Analysing website traffic and optimising the performance of the website (Google Analytics) — on the basis of the user’s consent given via the cookie management banner (Art. 6(1)(a) GDPR).
  2. Protecting the website against unauthorised access, spam and bot activity (Cloudflare Turnstile) — on the basis of the Controller’s legitimate interest in ensuring the security of the website (Art. 6(1)(f) GDPR).
  3. Managing tags and monitoring activity on the website in order to improve the website’s performance (Google Tag Manager) — on the basis of the user’s consent given via the cookie management banner (Art. 6(1)(a) GDPR).
  4. Managing server security and protecting the infrastructure against attacks, including by storing logs containing IP addresses — on the basis of the Controller’s legitimate interest in ensuring the security of the infrastructure (Art. 6(1)(f) GDPR).
  5. Conducting marketing activities, measuring the effectiveness of advertising campaigns, conducting remarketing, personalising advertisements and creating audiences based on the user’s activity on the website, including profiling (Meta Pixel — the Facebook pixel) — on the basis of the user’s consent given via the cookie management banner (Art. 6(1)(a) GDPR)

Cookies

Our website uses cookies, which are small text files stored on the user’s device.

We use the following categories of cookies on our website:

  1. Strictly necessary cookies, i.e. those required for the website to function properly; their use does not require the user’s consent.
  2. Analytical cookies, i.e. those that enable analysis of traffic and of how the website is used (including Google Analytics, Google Tag Manager and Meta Pixel); these are used only after the user has given consent.

Consent to the use of analytical cookies is given via the cookie management banner displayed on the user’s first visit to the website. Consent may be withdrawn at any time by changing the settings in the cookie management panel available on the website or through the web browser settings.

  • 6. Data Sharing and International Transfers

The data collected may be shared with the following entities:

  1. Google LLC — in connection with the use of Google Analytics and Google Tag Manager services.
  2. Meta Platforms Ireland Limited — in connection with the use of the Meta Pixel tool (the Facebook pixel), used for measuring advertising effectiveness, conducting remarketing, personalising advertisements and creating audiences.

Data processed in connection with the use of Google and Meta services may be transferred outside the European Economic Area, including to the United States. Such transfers are carried out using the mechanisms provided for in Chapter V of the GDPR, in particular on the basis of an adequacy decision (Art. 45 GDPR), including the EU–U.S. Data Privacy Framework, or standard contractual clauses approved by the European Commission (Art. 46(2)(c) GDPR).

Data Retention Periods

We store personal data for the period necessary to achieve the purposes for which they were collected:

  1. Server logs (IP addresses) — for a period of 90 days, after which they are automatically deleted.
  2. Data processed via Google Analytics — in accordance with the data retention settings configured in the tool (by default up to 14 months).
  3. Data processed for B2B marketing purposes — until an effective objection to the processing is raised or until the Controller’s legitimate interest ceases to exist.
  • 8. Data Security

We attach great importance to protecting our users’ personal data. We apply appropriate technical and organisational measures to ensure data security, including connection encryption (SSL), regular monitoring and automated security audits.

User Rights

In accordance with the GDPR, users have the right to:

  1. Access their personal data.
  2. Rectification, erasure or restriction of processing of their data.
  3. Object to the processing of their data.
  4. Data portability.
  5. Withdraw their consent to data processing at any time, without affecting the lawfulness of processing carried out before its withdrawal.
  6. Lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, Poland, e-mail: kancelaria@uodo.gov.pl) — if they consider that the processing of their personal data infringes the GDPR.

To exercise the rights referred to in points 1–4, please contact us at the following e-mail address: biuro@washanddrive.eu.

Changes to the Privacy Policy

This Privacy Policy may be updated to reflect changes in our data processing practices or changes in the law. We will inform users of any material changes by means of a clear notice on the website and, in the case of newsletter subscribers, also by e-mail. The current version of the Policy will always be available on our website.

Last updated: 15 September 2026

Contact

If you have any questions regarding this Privacy Policy, please contact us at the following e-mail address: biuro@washanddrive.eu.