Privacy and Cookie Policy

1. Core principles

We only process data proportionate to a specific purpose. Please do not send sensitive data, copies of ID documents or third-party data in free-text form fields unless we explicitly request them.

• Mandatory form fields are needed to identify you and handle your request; optional fields may be left blank.
• We never sell personal data and never pass it to third parties for their own marketing.
• We share data only with recipients necessary for the given purpose or where required by law.
• If a purpose, technology or recipient changes, we update this policy before the new processing starts.

2. What personal data we process

When providing our services (towing, vehicle transport and import, turnkey registration) we mainly process:

• Identification and contact data – name and surname, phone, email
• Company billing data – business name, company ID, VAT ID, registered address
• Vehicle and order data – VIN, make and model, power (kW), emission standard, pickup and delivery location
• The content of your message and subsequent communication (email, call, WhatsApp)
• Price configurator data – transport parameters and contact details for sending the indicative quote
• Contractual, payment and accounting data including bank details
• A copy of an ID document or power of attorney only where required by law or the type of transaction
• Technical website data – IP address, request time and URL, browser and device type, technical logs

3. Purposes, legal bases and retention

The periods below apply unless a specific law, ongoing dispute, inspection or security incident requires longer retention. Afterwards data is deleted or anonymised.

4. Sources of data

We obtain personal data:

• directly from you via a form, email, phone, WhatsApp, meeting or contract;
• from the seller, dealership or previous owner of the vehicle in relation to a specific order;
• from an insurer, assistance service or leasing company that ordered the intervention;
• from public registers and records (commercial register, vehicle register, VIN checks).

5. Recipients and processors

Only people who need the data for a specific purpose have access to it. Processors act on our instructions under an Art. 28 GDPR agreement. Other recipients (e.g. a notary, insurer or public authority) may act as independent controllers.

• BellCar employees and assigned drivers
• Transport and towing partners involved in a specific order
• Customs, registration and transport authorities for import and registration, notaries and experts
• Insurers for CMR cover and claims handling
• Accountants, tax advisers and lawyers
• Hosting, email, database and IT support providers (contractually bound processors)

6. How we determine retention

We consider the purpose, volume and sensitivity of the data, risks, duration of the business relationship, statutory archiving and limitation periods, and the need to demonstrate compliance. Where one document serves several purposes, it is kept for the longest applicable period with restricted access.

7. Transfers outside the EEA

We process personal data predominantly within the European Economic Area. Some technology providers (CDN, fonts, mapping and analytics services) may process technical data outside the EEA. Any such transfer takes place only under Chapter V GDPR – an adequacy decision, standard contractual clauses or another valid safeguard.

8. Obligation to provide data

Fields marked as mandatory are a contractual or practical requirement for handling your enquiry – without them we cannot reply, calculate a price or prepare a contract. Data required by law (e.g. for vehicle registration) is a statutory requirement and failing to provide it may prevent the transaction. Marketing consent is always voluntary and refusing it does not affect your enquiry.

Part II · 9. What cookies and similar technologies are

A cookie is a small file the website stores in your browser; local storage performs a similar function. Both can remember settings or distinguish a browser. Access to data in your device is governed by § 109(8) of Act No. 452/2021 Coll. – consent is not required only for technical transmission or where storage is strictly necessary to provide a service you explicitly requested.

10. Overview of storage and cookies

This table reflects the actual technical state of bellcar.sk as of the last update.

If analytics or advertising tools are not activated, the related cookies are never set.

11. Google Consent Mode v2 and consent categories

Consent is managed via Google Consent Mode v2. Until you choose, the ad_storage, ad_user_data, ad_personalization, analytics_storage and personalization_storage signals are set to “denied”, with ads data redaction enabled. The “Reject” and “Accept” buttons are equally prominent; continued browsing or browser settings do not constitute consent.

• Necessary – site functionality, forms and security (always active; functionality_storage, security_storage)
• Analytics – aggregate traffic measurement (analytics_storage, consent only)
• Marketing – campaign measurement and remarketing (ad_storage, ad_user_data, ad_personalization, consent only)
• Personalisation – remembering preferences such as language (personalization_storage, consent only)

Rejecting optional cookies does not limit core site functionality or form submission.

12. External technical services

Loading certain parts of the site makes your browser connect to an external provider. Mainly the IP address, requested resource, time and technical headers are transmitted. We do not use these services for advertising without a separate legal basis.

13. Changing or withdrawing consent

A permanent “Cookie settings” link in the site footer lets you change or withdraw your choice at any time. Withdrawal does not affect the lawfulness of prior processing. You can also delete cookies in your browser; browser settings do not replace valid consent.

14. Automated decision-making and profiling

We do not carry out decision-making based solely on automated processing producing legal or similarly significant effects under Art. 22 GDPR. The configurator price is a non-binding indicative calculation; the final quote is always confirmed by a person.

15. Security and confidentiality

We apply appropriate technical and organisational measures – access control, encrypted transmission (HTTPS), updates, backups and contractual rules for suppliers. No method of transmission or storage is absolutely secure. Security incidents are handled under Art. 33 and 34 GDPR.

16. Minors

Our services are not directed at children. We process minors' data only where necessary for a specific legal or property transaction. If you are a legal guardian and believe a child provided data without good reason, please contact us.

17. Updates to this policy

This policy reflects the website's features and technologies as of the last update. When forms, analytics, advertising tools, suppliers or business processes change, we update the policy and the cookie table. The current version is always published on bellcar.sk.