Privacy Policy
1. Controller
[company legal name], [registered address], VAT no. [VAT number] is the controller of your personal data. Contact: [email protected].
2. What we collect
| Data | Why | Legal basis (GDPR) |
|---|---|---|
| Email address | To send your order link, updates and receipt | Performance of contract – Art. 6(1)(b) |
| ECU file, vehicle details, chosen solutions, notes | To carry out your order | Performance of contract – Art. 6(1)(b) |
| Order and payment records (amount, date, Stripe reference) | Accounting and tax obligations | Legal obligation – Art. 6(1)(c) |
| IP address, timestamps, security logs | Preventing abuse and fraud, securing the service | Legitimate interest – Art. 6(1)(f) |
| Anonymous visit statistics: page, referring site, country, device type, browser | Understanding how the site is used and improving it | Legitimate interest – Art. 6(1)(f) |
Visit statistics are collected without cookies and without storing your IP address. Your country is looked up at the moment of the visit and the IP address is then discarded; visits are grouped using a code that changes every day, so you cannot be followed from one day to the next. Statistics are kept for 13 months.
Card details are entered on Stripe's payment page and are never sent to or stored by us.
3. How long we keep it
- ECU files (original and modified): deleted automatically 7 days after delivery, or after 7 days of inactivity for orders that are not completed.
- Order and payment records: kept for as long as Greek tax and accounting law requires (generally 5 years from the end of the financial year).
- Security logs: kept for a limited period and then deleted.
4. Who we share it with
- Stripe Payments Europe Ltd. – payment processing. Stripe may transfer data outside the EEA under appropriate safeguards (EU Standard Contractual Clauses / EU–US Data Privacy Framework).
- Our hosting provider and email service, only to run the service.
- Public authorities where we are legally required to.
We do not sell your data and do not use it for advertising.
5. Security
Connections are encrypted (HTTPS). Uploaded files are stored outside the public website, scanned for malware, and accessible only through a private link sent to you and to our staff.
6. Your rights
You can ask for access to, correction or deletion of your data, restriction of processing, data portability, and you can object to processing based on legitimate interest. Write to [email protected]. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (dpa.gr).
7. Cookies
See our Cookie Policy.