Privacy Policy

Last updated: 1 July 2026

This Privacy Policy explains how DWIGER Parts collects, uses, stores, and protects the personal data of website users, customers, and persons who contact us regarding our products and services.

1. Data Controller

The data controller is:

Dwiger Automotive s.r.o.
Company ID: 17853613
VAT ID: CZ17853613
Registered office: Tvrdého 643, Letňany, 199 00 Prague 9, Czech Republic
Email: [email protected]
Telephone: +420 728 565 781
Website: www.dwigerparts.com

Hereinafter referred to as the “Controller,” “DWIGER Parts,” “we,” or the “Company.”

For questions regarding personal data processing, please contact: [email protected].

2. Personal Data We Process

Depending on how the website is used and the nature of the order, we may process the following categories of personal data.

2.1. Identification Data

first and last name;
company name;
Company ID and VAT ID;
details of a company representative.

2.2. Contact Data

email address;
telephone number;
delivery address;
billing address;
country and city of residence or company location.

2.3. Order and Payment Data

order number and order contents;
products ordered;
price and currency;
selected payment method;
payment status;
invoices, confirmations, and related accounting documents;
information about returns, claims, and refunds.

As a rule, we do not store full payment-card details. Such data is processed by the relevant bank or payment provider.

2.4. Vehicle Data

For compatibility verification, we may process:

vehicle make and model;
generation and model year;
version and equipment specification;
body or bumper type;
VIN;
photographs of the vehicle or individual vehicle parts;
information about previous modifications.

2.5. Communication Data

emails and messages;
communication history;
product-selection requests;
photographs, documents, and files provided by the user;
information required to assess a claim or return request.

2.6. Technical Data

When the website is used, we may automatically process:

IP address;
device and browser type;
operating system;
date and time of access;
pages and products viewed;
traffic source;
cookies and similar identifiers;
technical logs and security data.

2.7. Marketing Data

Where the relevant consent has been given, we may process:

consent to receive commercial communications;
interaction with advertisements and newsletters;
products and categories viewed;
advertising source;
marketing communication preferences.

3. Sources of Personal Data

We obtain personal data:

directly from the user when an order is placed;
through website contact forms;
by email, telephone, or messaging services;
when a customer requests advice or product selection;
when a claim or return request is submitted;
automatically when the website is used;
from payment, logistics, and technical partners where necessary to fulfil an order.

4. Purposes and Legal Bases of Processing

4.1. Processing and Fulfilling Orders

We process personal data to:

confirm orders;
verify product compatibility;
prepare quotations or invoices;
receive and record payments;
arrange production or procurement;
organize delivery;
communicate with the customer regarding the order.

Legal basis: performance of a contract or steps taken at the user's request before entering into a contract.

4.2. Accounting and Tax Obligations

We process data contained in invoices, payment records, and accounting documents to comply with accounting and tax-law requirements.

Legal basis: compliance with a legal obligation.

4.3. Compatibility Verification

Vehicle data, including VIN, may be used to verify whether a product is suitable for a particular vehicle and specification.

Legal basis: performance of a contract or pre-contractual measures.

4.4. Product Delivery

Contact details and delivery addresses are shared with carriers or logistics partners for order delivery.

Legal basis: performance of a contract.

4.5. Claims, Returns, and Protection of Legal Rights

We process personal data to:

assess claims;
process returns;
determine the cause of damage or non-conformity;
defend against unfounded claims;
protect our legal rights.

Legal basis: compliance with a legal obligation, performance of a contract, and the Controller's legitimate interests.

4.6. Website Security

Technical data may be used to:

protect the website and information systems;
prevent fraud;
detect suspicious activity;
resolve technical errors;
maintain security logs.

Legal basis: the Controller's legitimate interest in protecting the website and business operations.

4.7. Website Analytics

Where the user has given consent, we may use analytics tools to evaluate traffic, user behavior, and website performance.

Legal basis: user consent.

4.8. Marketing and Advertising

Where consent has been given, we may use contact and technical data to:

send promotional communications;
display personalized advertising;
measure advertising performance;
create advertising audiences.

Legal basis: user consent or, where permitted by law, legitimate interest subject to the user's right to object.

4.9. Responding to Inquiries

Where a user submits a question, request, or inquiry, we process the information provided in order to respond.

Legal basis: pre-contractual measures or our legitimate interest in handling customer inquiries.

5. Requirement to Provide Data

Providing personal data is voluntary.

However, without certain information, we may be unable to:

process or fulfil an order;
verify compatibility;
arrange delivery;
issue an invoice;
assess a claim;
respond to an inquiry.

6. Recipients of Personal Data

Personal data may be shared, only to the extent necessary, with the following categories of recipients:

courier and transport companies;
payment providers, banks, and payment infrastructure providers;
accountants and tax advisers;
suppliers, manufacturers, and logistics partners;
website hosting and technical-support providers;
email, cloud-storage, and information-system providers;
analytics and advertising providers where consent has been given;
legal advisers and insurance companies;
public authorities where disclosure is required by law.

Such recipients may process data as independent controllers or as processors acting on behalf of DWIGER Parts.

7. Transfers Outside the European Economic Area

Certain suppliers, manufacturers, or technical service providers may be located outside the European Economic Area.

In such cases, personal data is transferred only where a lawful basis and appropriate safeguards are in place, including:

a European Commission adequacy decision;
Standard Contractual Clauses;
other safeguards recognized under the GDPR.

When contacting a supplier regarding production, we seek to share only the minimum information required. In most cases, the supplier does not need the customer's name where vehicle data and product specifications are sufficient.

8. Data Retention

Personal data is stored only for as long as necessary for the relevant purpose.

Indicative retention periods include:

order and contract data: for the duration of the contract and the subsequent period necessary to protect legal claims;
accounting and tax records: for the period required under Czech law;
claims data: for the duration of the claim process and any subsequent legal-claim period;
business correspondence: for a reasonable period after the communication or order is completed;
VIN and vehicle data: for the duration of the order, warranty, and possible claim period;
marketing consent data: until consent is withdrawn;
security logs: for as long as necessary to protect the website and investigate incidents;
cookies: according to the retention periods stated in the Cookie Policy and cookie settings panel.

After the applicable retention period, the data is deleted, anonymized, or archived where further storage is required by law.

9. Marketing Communications

We may send commercial communications only where an appropriate legal basis exists.

Users may unsubscribe at any time by:

using the unsubscribe link in an email;
contacting [email protected];
changing consent settings where this option is available on the website.

Opting out of marketing does not affect transactional messages required for processing and fulfilling an order.

10. Cookies and Analytics Technologies

The website uses cookies and similar technologies.

Strictly necessary cookies are used for website operation, shopping-cart functionality, checkout, and security.

Analytics, functional, and marketing cookies are used only in accordance with the user's preferences and applicable law.

Further information is provided in the separate Cookie Policy.

11. User Rights

Under the GDPR, users have the right to:

receive information about the processing of their personal data;
request access to personal data;
request correction of inaccurate or incomplete data;
request erasure where the legal conditions are met;
request restriction of processing;
object to processing based on legitimate interests;
receive data in a portable format, where applicable;
withdraw consent at any time;
lodge a complaint with a supervisory authority.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

12. Exercising Your Rights

To exercise any of these rights, please contact: [email protected]

The request should identify the right being exercised and provide sufficient information to verify the requester's identity and locate the relevant data.

Where there are reasonable doubts concerning identity, we may request additional information for verification.

We will respond within the periods required by applicable law.

13. Right to Object

Users may object at any time to processing based on the Controller's legitimate interests.

Where personal data is processed for direct-marketing purposes, users may object at any time. Following such an objection, the data will no longer be used for direct marketing.

14. Automated Decision-Making

DWIGER Parts does not make decisions that produce legal or similarly significant effects solely through automated processing.

Certain analytics and advertising tools may automatically assign users to audience categories where the user has given the relevant consent.

15. Data Security

We implement reasonable technical and organizational measures to protect personal data against:

unauthorized access;
loss;
destruction;
alteration;
disclosure;
misuse.

These measures may include access controls, account protection, backups, software updates, and secure communication channels.

Despite these measures, no method of transmission or storage can guarantee absolute security.

16. Children's Data

The DWIGER Parts website and products are not specifically intended for children.

We do not knowingly collect children's personal data without an appropriate legal basis or consent from a legal representative.

17. Complaint to the Supervisory Authority

Users may lodge a complaint with the Czech data-protection authority:

Úřad pro ochranu osobních údajů
Pplk. Sochora 27
170 00 Prague 7
Czech Republic

Submitting a complaint does not limit the user's right to seek judicial or other legal remedies.

18. Third-Party Links

The website may contain links to third-party websites, social networks, payment providers, and other external services.

We do not control how such third parties process personal data. Users should review the relevant third party's privacy policy before using its services.