Privacy Policy & Cookie Consent
Last updated: September 2026
Introduction
Dream Garage ("we", "us", "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect personal data when you use our application and services, in accordance with the General Data Protection Regulation (GDPR), the Polish Act on Personal Data Protection, the ePrivacy Directive, and applicable international privacy laws.
1. Data Controller
The data controller responsible for processing your personal data is:
Dream Garage Manager
Email: privacy@dreamgarage.it.com
2. Personal Data We Collect
Required Data
- Email Address – account creation, authentication, and communication
- Vehicle registration number (license plate) – vehicle identification and management. License plates are treated as personal data where they can be linked to an identifiable individual.
Optional Data
- First and last name – service personalization
- Vehicle Identification Number (VIN) – enhanced vehicle tracking
Automatically Collected Data
- IP address
- Device and browser information
- Operating system
- Usage and interaction data
- Security and access logs
- Cookie identifiers (subject to consent)
3. Legal Basis for Processing
- Contract performance – providing and managing your account
- Consent – marketing communications and non-essential cookies
- Legitimate interest – security, fraud prevention, service improvement
- Legal obligation – compliance with tax and regulatory requirements
4. How We Use Your Data
- Create and manage user accounts
- Provide and maintain services
- Send service-related communications
- Provide customer support
- Improve functionality and performance
- Conduct analytics (with consent)
- Send marketing communications (with consent)
- Prevent fraud and abuse
- Comply with legal obligations
5. Data Sharing
We do not sell your personal data. We may share data with:
- Service providers acting as data processors under GDPR
- Public authorities where legally required
- Business successors in case of merger or acquisition
6. Data Retention
- Account and profile data – retained for the account duration
- Vehicle data – retained while the account is active
- Accounting and tax data – retained per Polish law (5–7 years)
- Marketing data – until consent is withdrawn
- Analytics cookies – up to 24 months
- Security logs – up to 90 days
7. Your Rights
- Access your personal data
- Rectify inaccurate data
- Request erasure of data
- Restrict processing
- Data portability
- Object to processing
- Withdraw consent at any time
- Lodge a complaint with the Polish Data Protection Authority (UODO)
To exercise your rights, contact us at privacy@dreamgarage.it.com
8. Data Security
We implement appropriate technical and organizational measures including encryption, access controls, secure authentication, and regular security reviews.
9. International Data Transfers
Where data is transferred outside the EU/EEA, we apply Standard Contractual Clauses and supplementary safeguards in accordance with GDPR.
10. Cookies
Essential cookies – required for security and core functionality
Analytics cookies – used only with your consent
Marketing cookies – used only with your consent
11. Data Backups
To protect against data loss, we maintain periodic encrypted backups of our databases (roughly every 6 hours), retained for 14 days. Backups are encrypted before they leave our servers, so their contents are unreadable to any third party, including our storage provider. Encrypted copies are kept on our own infrastructure and in a private Google Drive account controlled by Dream Garage, accessed via the Google Drive API solely to store these encrypted backup files. This access is not used for any other purpose, the backups are not shared with any third party, and expired copies are deleted automatically once the retention period ends.
12. Policy Updates
We may update this policy periodically. Material changes will be communicated and, where required, renewed consent will be requested.