Privacy Policy
The controller of personal data submitted through the site’s forms and contact channels is DAKA International sp. z o.o., ul. Mariacka 36/1, 40-014 Katowice, Poland, NIP 5213889833, KRS 0000828382 (the “Controller”). The service operates under the Hybrid Master brand, ul. Owocowa 18a, 40-158 Katowice. For data matters contact us via the contact page.
Scope of data
We may process your phone number, e-mail address, vehicle details and information you provide voluntarily in a message or when booking. For analytics and marketing — only after your consent — technical data is also processed: cookie identifiers, IP address, device and browser information, and how you use the site.
Purpose and legal basis
Form data is used to answer your enquiry, prepare a quote, book a visit and deliver the service — based on pre-contractual steps and the contract (Art. 6(1)(b) GDPR) and legal obligations ((c)). Analytics and marketing (statistics, ad performance measurement, remarketing) are carried out solely on the basis of your consent ((a)), which you can withdraw at any time.
Retention
We keep data only as long as needed for the above purposes, then for the period required by law (e.g. tax). Analytics and marketing data — until consent is withdrawn or the cookies expire (see the cookie policy).
Data recipients and processors
We use trusted providers who process data on our behalf:
- Google Ireland Ltd. — form handling (Google Apps Script, Google Workspace), Google Analytics 4 analytics and Google Ads (conversion measurement and remarketing) after marketing consent;
- Meta Platforms Ireland Ltd. — Meta Pixel (measurement and remarketing) after marketing consent, and WhatsApp communication if you choose it;
- Microsoft Ireland — Microsoft Clarity (usability statistics, heatmaps, session recordings) after analytics consent;
- Cloudflare, Inc. — content delivery network, protection and connection encryption;
- Brevo (Sendinblue SAS) — e-mail delivery;
- hosting provider — website storage.
Tags on the site are managed by Google Tag Manager. We do not sell your data or share it with third parties for their own, independent purposes.
Transfers outside the EEA
Some providers (Google, Meta, Microsoft, Cloudflare) are affiliated with US-based companies. Data may be transferred to the USA under the European Commission adequacy decision (Data Privacy Framework, DPF) and standard contractual clauses (SCC).
Consent and categories (Consent Mode)
Until consent is given, analytics and marketing tags are blocked (default “denied” mode). The consent banner distinguishes two categories:
- Analytics — Google Analytics 4, Microsoft Clarity;
- Marketing — Google Ads, Meta Pixel (ad measurement and remarketing).
You can change or withdraw consent at any time via the “Privacy settings” button or by opening privacy settings. Withdrawal does not affect the lawfulness of processing before withdrawal.
Microsoft Clarity analytics
Only after your analytics consent do we use Microsoft Clarity to study site usability, heatmaps and session recordings. The script is not loaded before consent or after it is declined. We apply strict masking and additionally mask forms and contact data; we do not pass Clarity the content of messages, phone numbers, e-mail addresses or vehicle data.
Customer lists and remarketing in Google Ads
The Controller (named at the beginning of this policy) may use the data of existing service customers to show personalised ads and measure their effectiveness in Google Ads — through remarketing and customer lists (Customer Match).
- Data: phone number and — if you provided it — e-mail address.
- Recipient: Google Ireland Limited. We send the data only in hashed form (SHA-256), never in plain text; Google uses it only to match it with Google accounts and show ads.
- Legal basis: the Controller’s legitimate interest in marketing its own services to existing customers (Art. 6(1)(f) GDPR) and, where the law requires it, your consent (Art. 6(1)(a) GDPR).
- Right to object: you can object at any time by writing to [email protected] or via the contact page. After you object, we remove your phone number (and e-mail) from our Google Ads customer lists.
We also use Google Ads conversion tracking — we measure clicks on the phone number and WhatsApp link and form submissions — only after marketing consent. More on how Google uses data in advertising: policies.google.com/technologies/ads.
Your rights
You have the right to access, rectify, erase, restrict and port your data, to object and to withdraw consent. For these matters contact us via the contact page. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warszawa, Poland.
Details on cookies and changing consent are in the cookie policy.