Privacy Policy

01Who is responsible for your data?

, , , Belgium, BCE , determines the purposes of the processing linked to its service. For a question or to exercise a right, use the Contact form or email , specifying “Personal data”.

02Information we use

An order contains your email address, the number plate and country of registration, the vehicle category, the chosen duration and validity dates, the price and the status of the file. We maintain the identifiers necessary to link payment, refunds and supporting documents to this order. Identity and address information may be required to issue an invoice.

The Contact form transmits your email, the subject and your message, as well as the plate and the country if you provide them. Subsequent responses are handled in the support email. Avoid sending sensitive data or documents unrelated to your request.

Technical operation may involve IP address, browser information, and error logs. A fingerprint of the network address is used to limit abusive requests. The campaign origin parameters present in the page address can be associated with the order. Full card data is collected by Stripe and is not stored in our order database.

03Why and on what basis?

We use order information to prepare and execute the contract: arranging the formal purchase, reconciling payment, communicating progress, and handling customer requests. The steps required before an order fall under pre-contractual measures.

Maintaining invoicing documents and transmissions required by the authorities are based on our legal obligations. The protection of the site, the prevention of abuse, the proof of processing and the defense of our rights are based on our legitimate interests, assessed with regard to the rights of individuals. The limited analysis of the origin of orders pursues an interest in understanding our activity; any unnecessary tracer subject to consent requires a separate prior agreement.

The email provided for an order or a question does not automatically subscribe its holder to a newsletter. We do not use a general permission hidden in this notice to send advertising.

04Who is this information shared with?

Authorized operators and administrators access data useful for their tasks. The technical service providers involved in the service include Vercel for hosting, Supabase for the database and documents, Stripe for payment and invoicing, and Resend for sending emails. Contact requests are also received and stored in the messaging system used by support.

To purchase the vignette, the necessary information is transmitted to the official Slovak portal: in particular the registration, its country, the category, the duration and the date of validity, as well as the contact details required for the file. The official body processes this information according to its own obligations and its confidentiality notice.

Certain service providers, particularly payment providers, may act as responsible for their own regulatory or anti-fraud processing. Our advisors and the competent authorities may receive information when an obligation or a file justifies it. We do not sell customer files.

05International hosting and access

The use of international suppliers may result in processing or access outside the European Economic Area, including for technical support or security. The European location of a server does not, in itself, mean that international access is excluded.

When a transfer is carried out, it must be covered by a system authorized by the GDPR: applicable adequacy decision or appropriate contractual guarantees, accompanied if necessary by additional measures. You can ask us for details on the recipients and guarantees corresponding to your data.

06For how long?

The data of an order remains available for its execution, validity period, support requests and payment verifications. The elements necessary for proof of the contract or in a dispute are then kept with limited access during the period when a claim can legally be made.

Invoices and accounting documents follow the Belgian legal deadlines applicable to each category and financial year. The archiving duration of these documents does not justify keeping all exchanges or all technical logs for the same period.

For support, retention is determined by the resolution of the file and, when there is a dispute, by the duration necessary for its resolution. Security logs are kept according to their usefulness for incident detection and analysis. A particular obligation or dispute may require certain elements to be preserved for longer; this conservation must remain limited to what is necessary. You can request the criteria or duration applicable to your file.

07Storage in your browser

The site memorizes the chosen language in a cookie intended for one year and in the local storage of your browser, which persists until deleted. Order form information and tracking tokens are retained in session storage to allow further processing; their persistence depends on the session and browser restore functions.

Operator authentication and payment tools may use technical mechanisms specific to their operation. Non-essential trackers should not be activated before consent is required. You can delete site data in the browser settings; This may remove a preference or local access to order tracking.

08Your rights and how to exercise them

Under the conditions of the GDPR, you can access your data, have an error corrected, request erasure or limitation and obtain portability of the data concerned. You can object to processing based on legitimate interest for reasons relating to your situation. Consent can be withdrawn without calling into question previous lawful processing.

We usually respond within a month. If a legally permitted extension is necessary, we will explain the reason to you within this period. We may request a proportionate element to verify your identity, without systematically requiring a copy of your identity document. Certain information must remain retained due to a legal obligation or litigation; we will then explain the limits of erasure.

You can contact the Belgian Data Protection Authority, via autoriteprotectiondonnees.be, or the competent authority of your place of residence. This approach does not require waiving legal recourse.

09Protection of access and evolution of the instructions

Access restrictions, enhanced back-office authentication and time-limited document access links help protect records. Do not share your tracking link with any unauthorized person. No device can promise zero risk.

Operational order processing involves people. The system described here is not based on an exclusively automated decision producing legal effects for the customer. If uses or providers change, this notice will be updated and additional information will be provided when the change requires it.