Privacy Policy
Last updated: November 2025
This Privacy Policy explains how AutoZ Sp. z o.o., operating under the brand AutoRiven, collects, uses, and protects your personal data when you visit autoriven.eu, contact us, or purchase used OEM auto parts from our platform.
Who We Are
AutoZ Sp. z o.o.
Brand: AutoRiven
VAT EU: PL521228932
Registered office: Bartycka 22B M21A, 00-716 Warsaw, Poland
Email: info@autoriven.eu
WhatsApp: wa.me/48453094174
AutoRiven specializes in the sale of tested used OEM car parts, sourced from verified dismantlers across Europe. We ensure all parts are checked, documented, and shipped safely to customers worldwide.
Data We Collect
We collect only the information necessary to process your orders and provide customer service.
A. Information You Provide Directly
- Name, address, email, and phone number (for orders and delivery)
- VAT/company details (for business invoicing)
- Messages sent via email, WhatsApp, or contact forms
- Order notes, support requests, return requests
B. Information Handled by Payment Providers
- Cardholder name, payment details, transaction IDs (processed by Stripe/PayPal)
AutoRiven does not store or access your payment card information.
C. Information Collected Automatically
- Device type, operating system, browser type
- IP address and general geolocation
- Website usage statistics (pages visited, click paths, time spent)
- Cookies and analytics data via Google Analytics
How We Use Your Data
Your personal data is used for legitimate business purposes only:
- To process, ship, and deliver your order
- To issue invoices and payment confirmations
- To respond to customer inquiries or support requests
- To verify part compatibility when you provide your VIN or OEM code
- To improve website performance and user experience
- To comply with legal, accounting, and tax obligations
- To send optional newsletters — only with your consent
Legal Basis for Processing
We process your data under the following legal bases (GDPR Articles 6(1)(a–f)):
- Contract performance: processing and delivering your order
- Legal obligations: invoicing, tax compliance, accounting regulations
- Consent: marketing emails and newsletter subscriptions
- Legitimate interest: website improvement, fraud prevention, customer service
Data Retention
We retain personal data only for as long as necessary:
- Order & customer records: up to 5 years (required by Polish/EU tax and accounting laws)
- Customer service messages: up to 12 months
- Newsletter data: until you unsubscribe
Payment Processing
- All payments are processed by Stripe (supports Apple Pay, Google Pay) and PayPal.
- Your payment information is encrypted and protected under PCI-DSS standards.
- AutoRiven does not store or access card numbers, CVV codes, or bank details.
Data Sharing and Transfers
Your data may be shared only with GDPR-compliant partners when necessary:
- Couriers & logistics: FedEx, UPS, DHL, DPD, GLS, Raben, Hellmann, Geodis, AmberExpress
- Payment providers: Stripe, PayPal
- Hosting/CDN: Netlify, Gatsby Cloud
- Analytics: Google Analytics
We never sell, rent, or trade your personal data.
Cookies & Analytics
We use cookies to improve website performance and analyze visitor behaviour. You may disable cookies in your browser settings, but some website features may not function correctly.
Analytics data is collected via Google Analytics and may include anonymized IP information, page interactions, and general traffic insights.
Your Rights Under GDPR
You have the following rights regarding your personal data:
- Access your data
- Request correction of inaccurate information
- Request deletion (“right to be forgotten”)
- Restrict or object to processing
- Data portability — request a file with your data
- Withdraw consent at any time (for newsletters/marketing)
To exercise your rights, email us at info@autoriven.eu.
If you believe your data has been mishandled, you may file a complaint with your local data protection authority.
Data Security
- All pages are protected with 256-bit SSL encryption.
- Hosting via Netlify CDN with firewalls and DDoS protection.
- Access to personal data is limited to authorized staff under confidentiality agreements.
International Data Transfers
Your data may be processed outside the EU only by partners who meet GDPR requirements, including the use of Standard Contractual Clauses (SCCs) or equivalent safeguards.
Newsletter Subscription
If you subscribe to our newsletter or mailing list:
- We use your email only for promotions, product updates, and automotive information.
- You can unsubscribe anytime using the link in any email or by contacting us directly.
Updates to This Policy
We may update this Privacy Policy to reflect legal changes or improvements to our services. The most recent version will always be available on this page, with the update date clearly displayed.
Contact Information
If you have any privacy-related questions or wish to exercise your rights, contact us:
AutoZ Sp. z o.o. / AutoRiven
Bartycka 22B M21A, 00-716 Warsaw, Poland
info@autoriven.eu
wa.me/48453094174