Privacy policy

1. Controller

The controller is [operator’s company name, registered office, company ID, register entry — to be completed by a lawyer]. Data protection contact: [email — to be completed by a lawyer].

2. What data we process

Depending on how you interact with us:

• demo request form: name, dealership name, email, phone, stock size and message,
• user account: name, email, language, role in the organisation, sign-in records,
• billing: company details and payment details (handled by the payment gateway),
• technical data: IP address and activity logs for security purposes.

3. Purposes and legal bases

• responding to enquiries and arranging a demo: your consent and pre-contractual steps (Art. 6(1)(a) and (b) GDPR),
• providing the service and billing: performance of the contract and legal obligations (points (b) and (c)),
• security and abuse prevention: legitimate interest (point (f)).

4. How long we keep data

Demo request data for no more than 24 months after the last contact or until consent is withdrawn. Account data for the duration of the contract. Accounting records for 10 years as required by law. Security logs for no more than 12 months.

5. Recipients

We share data only with processors that help us run the service (hosting and database, email and SMS delivery, payment gateway, provider of automated text and image processing). Transfers outside the EEA rely on standard contractual clauses or an adequacy decision. List of processors [to be completed by a lawyer].

6. Data of dealers’ customers

Data a dealership keeps in carsLOG about its own customers is processed by us as a processor on the dealership’s instructions. If it concerns you as a buyer or seller of a car, please contact the dealership directly.

7. Your rights

You have the right to:

• access and rectify your data,
• erasure and restriction of processing,
• data portability,
• object to processing based on legitimate interest,
• withdraw consent at any time,
• lodge a complaint with the Slovak Office for Personal Data Protection or the Czech Office for Personal Data Protection.

8. Security

Data is encrypted in transit, access is limited by role and each organisation sees only its own data. Important operations are recorded in an audit log.