Privacy policy

Last updated: 2026-11-07

This policy explains how bestautorepair.online (the "Website") processes personal data of its visitors. The Website is a directory of car repair shops where drivers can find garages and publish reviews.

1. Who is responsible

The controller of your personal data is DobryMechanik.pl Sp. z o.o., ul. Dobrogojskiego 30A, 61-692 Poznań, Polska (NIP 9721210206, KRS 0000352554, REGON 301363304). Contact: [email protected].

2. What data we process and why

• Server logs and security data – IP address, date and time, requested address, browser type. We use them to run the Website, keep it secure and prevent abuse. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
• Reviews – the nickname, e-mail address, content and ratings you enter in the review form, the IP address, and your confirmation that you accept the rules. The nickname, content, ratings and date are published on the Website; your e-mail address is not shown publicly. If you tick the box for notifications, we may use the e-mail address to send them. Legal basis: legitimate interest in running the review service and preventing abuse (Art. 6(1)(f) GDPR), and your consent for notifications (Art. 6(1)(a) GDPR).
• Adding a garage – the business details you enter (name, address, phone number, website) and the IP address. Business details are published on the Website. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). Please do not enter personal data of people other than yourself or the business. Garages added without an account are published only after an administrator approves them.
• Garage owner accounts – the name, e-mail address and password you enter when you register (the password is stored only in hashed form), the IP address at registration and the date of your last login. We use them to create and secure your account, to send the confirmation and password-reset e-mails, to let you log in and to let you manage your garage listings. The Website sets a session cookie and a security (CSRF) cookie to keep you logged in and protect the forms; they are strictly necessary. Your account is not visible to other visitors. Legal basis: performance of the service you request (Art. 6(1)(b) GDPR) and legitimate interest in security (Art. 6(1)(f) GDPR).
• Claiming a listing – when you ask to take over a garage listing, we record that your account made the request and the administrator's decision, to check that you may edit the listing. We notify you of the decision by e-mail. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
• E-mail address given when adding a garage without an account – optional. We use it only to tell you whether the garage was approved, and then delete it. It is never published. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw before the decision by contacting us.
• Messages sent to us – the data you provide when you contact us by e-mail, used to answer you (Art. 6(1)(f) GDPR).

3. Cookies, analytics, advertising and third parties

The Website uses cookies and similar technologies from Google and other providers:

• Google Analytics 4 – measures how the Website is used (pages visited, approximate location, device). Legal basis: your consent (Art. 6(1)(a) GDPR) where required.
• Google AdSense – displays advertising. Google and its partners use cookies and identifiers to show ads based on your visits to this and other websites. You can manage personalised advertising in Google Ads Settings, or opt out at aboutads.info. More: How Google uses data from sites that use its services. Legal basis: your consent (Art. 6(1)(a) GDPR) where required.
• Google Maps – shows the location of garages on a map. Google may receive your IP address and technical data when the map loads.
• Google reCAPTCHA – protects the forms against spam and bots; it analyses technical data about your device and behaviour. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
• Session and security cookies – set by the Website itself so that you can stay logged in and submit forms safely. They are strictly necessary and are not used for advertising or analytics.

Visitors from the European Economic Area, the United Kingdom and Switzerland can choose which non-essential cookies they accept using the consent message displayed on the Website, and can change their choice at any time. You can also delete or block cookies in your browser settings; some features may then not work.

4. Recipients and transfers

Your data may be processed on our behalf by hosting and infrastructure providers (including Cloudflare, which delivers the Website) and by the Google services listed above. Google may transfer data outside the European Economic Area, including to the United States, on the basis of the safeguards it provides (for example the EU–US Data Privacy Framework or standard contractual clauses). We do not sell personal data. We also use an e-mail delivery service to send system messages (account confirmation, password reset, decisions on garages).

5. How long we keep data

Reviews and garage entries are kept as long as they are published on the Website or until you ask us to remove them. Server logs are kept for a limited period needed for security. Data collected by cookies is stored for the periods set by the provider of the given cookie. Your account is kept until you ask us to delete it. The e-mail address given when adding a garage without an account is deleted right after the administrator's decision.

6. Your rights

Under the GDPR you have the right to access your data, to rectify it, to erase it, to restrict or object to its processing, to data portability, and to withdraw consent at any time (without affecting processing done before). To exercise your rights, e-mail us at [email protected]. You also have the right to lodge a complaint with your national data protection authority. You can ask us to delete your account at the same address.

7. Children

The Website is not directed at children under 16, and we do not knowingly collect their personal data.

8. Changes

We may update this policy. The current version is always available on this page, with the date of the last update at the top.