Privacy Policy
Data controller: K cars s.r.o., Eliášovce 80, Nový Život 930 38, IČO: 52 792 056, DIČ: 2121140802, IČ DPH: SK2121140802
Contact email for data protection questions: info@kcars.sk
What data we process
When you submit a contact form or viewing reservation, we process: name, email, phone number, and your message. We use this data exclusively to handle your request.
Legal basis
Processing is based on your consent (Art. 6(1)(a) GDPR) and the legitimate interest of the controller (Art. 6(1)(f) GDPR).
Retention period
We retain personal data for the period necessary to handle your request, up to a maximum of 3 years.
Your rights
You have the right to access your data, rectification, erasure, restriction of processing, data portability, and the right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic.
AI Chat assistant
Our website operates an AI chat assistant that answers questions about K cars' vehicle inventory, leasing, and services.
What data we log
For each message we store: the text of your query (after automatic removal of sensitive data such as phone, e-mail, IBAN, ID number), the assistant's reply, timestamp, conversation language, and an anonymised hash of your IP address (SHA-256 + daily salt — the IP is not reversible). We do not store user-agent or third-party cookies.
Data processor (3rd party)
The content of your message is sent for processing to the OpenAI model (gpt-5-mini, servers in the EU and USA, standard contractual clauses under GDPR). OpenAI does not use this data to train models (business API terms).
Retention period
Conversation records are kept for a maximum of 90 days from the last message and then automatically deleted. The anonymised IP hash serves solely to limit abuse (rate limit) and after one day loses the link to the original IP (daily salt).
Your rights (AI chat)
Under Art. 15 GDPR you may request access to your logs — provide the session ID shown in the chat dialog. Under Art. 17 GDPR you may request their immediate erasure. Under Art. 20 GDPR you may obtain your records in machine-readable form (JSON). Requests are processed within 30 days at info@kcars.sk.