Privacy Policy

This policy describes how we process the personal data of users of the P1 Performance FileService (the “Service”).

1. Data controller

The data controller is P1 Performance Przemysław Jedziniak, Faliszówka 39, 38-459 (Chorkówka commune), Poland, Polish tax ID (NIP) 6842686159, contact: jedziniakprzemyslaw@gmail.com.

2. What data we process

• Account data: name/company, email address, password (stored only as a secure hash).
• Order data: vehicle details, uploaded files (ECU/TCU reads), chat content, statuses, credit billing.
• Technical data: IP address, essential session and security cookies.
• Reviews: your rating, review text and the name you choose to show (e.g. first name and last initial, city), together with the vehicle and the work done.

3. Purposes and legal bases

• Providing the service and managing the account — Art. 6(1)(b) GDPR (contract).
• Billing and accounting obligations — Art. 6(1)(c) GDPR (legal obligation).
• Security and abuse prevention — Art. 6(1)(f) GDPR (legitimate interest).
• A one-time review request after a completed order — Art. 6(1)(f) GDPR (legitimate interest); you can opt out by replying to the message. Publishing a review on the website — Art. 6(1)(a) GDPR (consent), which you can withdraw at any time by email, and the review will then be removed from the website.

4. Cookies

The Service uses only essential cookies: keeping the session, login, CSRF protection and remembering your chosen language. We do not use tracking or marketing cookies.

5. Data recipients

We share data only to the extent needed to provide the service:

• seohost.pl — hosting, database and email (servers in Poland).
• Stripe / Link — payments for credit packages. Payment data (card, billing address) is collected directly by Stripe; some data may be transferred outside the European Economic Area under standard contractual clauses.
• Telegram — only if the user links their account to the notification bot.

6. Retention

Account and order data are kept for the duration of using the Service and the period required by law (incl. tax). Client files (ECU reads and tuned files) are kept for 12 months after an order is completed, so that the original can be restored or a file corrected. Attachments sent in the order chat are kept for 6 months, and files from cancelled orders for 30 days. After these periods, files are deleted automatically; the order history remains in your account. Deleting your account deletes all files immediately. Deleted files may remain for a limited time in secure backups, which are regularly replaced with newer ones.

7. Your rights

You have the right to access, rectify, erase, restrict and port your data, and to object. You may also lodge a complaint with a supervisory authority: in Poland, the President of the Personal Data Protection Office (UODO), or the data protection authority in your country of residence. For data matters write to: jedziniakprzemyslaw@gmail.com.

8. Security

Passwords are stored as hashes, the connection is encrypted (HTTPS), client files are kept on private storage with authorized access, and admin login is protected by 2FA.

9. Changes

We may update this policy. We will announce material changes in the Service.