Privacy policy

The controller of your personal data is:

The extent of the data processed depends on whether you only contact us, buy or sell a vehicle, or use one of our services.

In particular, it may include:

• first name and surname,
• date of birth and other identification details where establishing them is required by law,
• home or registered-office address,
• telephone number and email address,
• billing and payment details,
• data required to conclude and perform a contract,
• vehicle data such as VIN, registration number, technical data or information from vehicle documents,
• data required to transfer or register a vehicle,
• data you provide through a form, by email, by telephone or during an in-person meeting,
• data required to comply with anti-money-laundering and counter-terrorist-financing obligations,
• technical data relating to visits to the website and the use of cookies.

We obtain data mainly directly from you. In connection with the purchase, sale or inspection of a vehicle, we may also obtain some data from vehicle documentation, our business partners, leasing companies, service centres, public registers or other authorised sources.

Handling a question or inquiry

If you contact us through a form, by email or in another way, we use your data to handle your request and for subsequent communication.

The legal basis is primarily taking steps at your request before entering into a contract and, where applicable, our legitimate interest in handling ordinary communications.

If no contract is subsequently concluded, we generally retain ordinary inquiry correspondence for no more than one year after it ends, unless there is a reason to retain it longer.

Buying and selling vehicles and providing services

We process data to conclude and perform purchase, consignment and other contracts and when providing ordered services, such as vehicle inspection, transport, transfer or registration.

The legal basis is performance of a contract or taking steps before entering into one.

Accounting and tax obligations

We retain data appearing on accounting and tax documents for the period required by the applicable legislation.

The legal basis is compliance with a legal obligation.

Protecting our rights

We may retain documentation and communications relating to contracts, complaints or other legal relationships to the necessary extent in order to protect and enforce our rights and legal claims.

The legal basis is our legitimate interest.

Obligations under AML legislation

As a business trading in used goods, in cases specified by law we must identify customers and, where applicable, carry out due diligence under Czech Act No. 253/2008 Coll., on selected measures against legitimisation of proceeds of crime and financing of terrorism.

For this purpose, we may process in particular identification data, information from identity documents, information about a person acting for a legal entity, the beneficial owner, politically exposed person status, and other information required by AML legislation.

We process this data to comply with a legal obligation. Data and documents subject to mandatory retention under AML legislation are kept for the statutory period: generally five years for our category of obliged entity and generally ten years for transactions of EUR 10,000 or more.

Financing, insurance and extended warranty

If you express an interest in financing, insurance or an extended warranty, we may pass the necessary data to the relevant financial, insurance or other partner so that it can prepare the requested offer or enter into a contract.

Before transferring the data, we will tell you the specific partner to whom it will be transferred. That partner may further process your personal data as an independent controller under its own privacy policy.

We do not transfer data to financial or insurance partners merely because you bought a car from us. A transfer takes place only if you are interested in the relevant service or there is another lawful reason.

Newsletter and marketing communications

If you subscribe to the newsletter, we will send you information about newly added vehicles, our services and other news from Jirkova Garáž.

If you are not our customer, we send the newsletter based on your prior consent. You may withdraw that consent at any time.

Subject to statutory conditions, we may send our customers offers for our own similar products or services without prior consent. We will always provide a simple, free way to opt out of further messages.

You may unsubscribe at any time using the link in each marketing communication or by contacting info@jirkovagaraz.cz.

Customer references and photographs

If we wish to publish your name, photograph or other personal data on our website or social media beyond a review you have made public, we will do so only on an appropriate legal basis, typically with your consent.

The following may in particular have access to personal data to the necessary extent:

• IT, hosting and website-management providers,
• email and communications providers,
• the newsletter-system provider,
• accounting, tax and legal advisers,
• vehicle-inspection service providers,
• service centres and technicians,
• carriers,
• extended-warranty providers,
• financial and insurance companies if you request their service,
• administrative authorities and other public bodies where disclosure is required by law.

We disclose personal data only to the extent required for the relevant purpose.

Some providers of internet, analytics or communications services may process personal data outside the European Economic Area.

If we use such services, we ensure an appropriate transfer mechanism under the GDPR, such as an adequacy decision by the European Commission or Standard Contractual Clauses.

The website uses essential cookies and similar technologies needed for its proper and secure operation. They are always active and do not require your consent.

We activate optional analytics technologies only on the basis of your prior consent. Unless you accept them together, the analytics service is not loaded.

On your first visit, you can accept or reject the optional analytics technologies together. You can change your decision later at any time through the website’s cookie settings.

Google Analytics 4

With prior consent, we use Google Analytics 4 on the public website to evaluate visits and interactions statistically. The provider is Google (Google Ireland Limited for the EEA). Pseudonymous identifiers, visited pages and browser/device information may be sent to Google; processing outside the EEA, including the USA, is possible.

The analytics cookies _ga and _ga_5G4GX8EENG are stored on our domain. _ga distinguishes visitors; _ga_5G4GX8EENG stores session state. Their default duration is two years, which may renew on further visits or be shortened by the browser. Cookie duration is not Google's data-retention period; that depends on Analytics account settings.

The Google tag is not loaded without explicit consent. Consent to the previous analytics version is not sufficient for Google Analytics 4; we ask once again. An earlier rejection remains valid. You can change your choice through Cookie settings in the footer. After withdrawal, measurement does not start on subsequent page loads; data already sent is not automatically deleted.

Google information: Privacy Policy https://policies.google.com/privacy?hl=en; processing on partner websites https://policies.google.com/technologies/partner-sites?hl=en; GA4 cookies https://support.google.com/analytics/answer/11397207?hl=en.

GA4 notice added on 1 October 2026.

We retain personal data only for as long as necessary for the purpose for which it was collected or for the period prescribed by law.

The specific period depends in particular on whether the data relates to an ordinary inquiry, contract documentation, an accounting document, a complaint, processing under AML legislation or marketing.

Once the reason for processing ceases and there is no other lawful reason to retain the data, we delete or anonymise it.

Providing data in an ordinary contact form is voluntary. Without contact details, however, we may be unable to answer your request.

Data needed to conclude and perform a contract must be provided if you wish to enter into the contract.

Where the law requires us to identify or carry out due diligence on a client, providing the requested data may be a statutory condition for completing the transaction.

Jirkova Garáž s.r.o. does not itself make automated individual decisions that produce legal or similarly significant effects for you.

If you apply for credit or insurance, for example, the relevant financial or insurance partner may use such processes in its own assessment. That partner will inform you about its processing.

Subject to the conditions set out in the GDPR, you have the right to:

• request access to your personal data,
• request correction of inaccurate or incomplete data,
• request erasure of personal data,
• request restriction of its processing,
• receive your data in a machine-readable format and, where applicable, transmit it to another controller if the conditions for data portability are met,
• object to processing based on a legitimate interest,
• object at any time to processing for direct marketing,
• withdraw consent at any time where processing is based on consent.

Withdrawal does not affect the lawfulness of processing carried out before it was withdrawn.

You can exercise your rights by contacting info@jirkovagaraz.cz.

You also have the right to lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, www.uoou.gov.cz.

We take appropriate technical and organisational measures to protect personal data against loss, unauthorised access, alteration or misuse.

We may update this policy, in particular when legislation or the way our services operate changes. The current version will always be available on our website.