Privacy policy
Version 1.1-draft · 16 October 2026
This policy explains what personal data cetiritocka processes, why, for how long, who receives it, and what rights you have. We process personal data in line with the EU General Data Protection Regulation (GDPR) and, where they apply to you, the data protection laws of Serbia, Croatia, Bosnia and Herzegovina and Montenegro. [Applicable laws and any local registration obligations – to be confirmed with the lawyer.]
1. Controller and contact
The controller is [LEGAL ENTITY NAME, registered address, registration number – to be filled in]. Privacy contact: [privacy email]. Data protection officer / EU or local representative, if required: [to be confirmed with the lawyer].
2. Summary
- You sign in with your email; no passwords.
- Your garage data is private to you. We do not sell it, show it to other users or give it to advertisers.
- We do not use advertising or tracking cookies and do not profile you.
- You decide what a workshop or a shared history link can see, for how long, and you can revoke it at any time.
- You can export or delete everything yourself on the account page.
3. What we process, why, and on what legal basis
| Feature | Data | Purpose | Legal basis (GDPR art. 6) |
|---|---|---|---|
| Account and sign-in | Email address, language, country, optional display name, sign-in link requests (hashed link token, hashed IP, time), last login | Create and secure your account, send sign-in links | Contract (6.1.b); security: legitimate interest (6.1.f) |
| My Garage | Cars (make, model, year, fuel), optional VIN and plate, mileage, fuel purchases and stations, service and repair entries, costs, tyres, deadlines | Provide your private logbook, statistics and costs for you | Contract (6.1.b) |
| Reminders | Deadlines, email address, consent record | Send you the reminder emails you asked for | Your separate consent (6.1.a), withdrawable any time |
| VIN checker | The VIN you enter (stored only as a salted hash with the decoded vehicle type; the first 11 characters may be sent to a language-model provider to identify the vehicle) | Decode and explain a vehicle | Contract / legitimate interest (6.1.b, 6.1.f) |
| Rental inquiries | Pick-up and drop-off place and times, car class, passengers, notes, email address | Confirm your request, forward the request details (without your email) to rental companies, show you their offers | Contract / pre-contractual steps (6.1.b); your consent to forwarding (6.1.a) |
| Reviews and comments | Rating, text, email (not shown), optional shown name, hashed IP, confirmation time, helpful votes | Publish opinions, prevent abuse and fake reviews, moderate | Contract (6.1.b), legitimate interest in a trustworthy review system (6.1.f) |
| Reports and claims | Report text and optional email; claimant email, business, verification data | Handle reports, verify business ownership | Legitimate interest (6.1.f); legal obligations (6.1.c) |
| Map | Your approximate map view requests; location only if you press “Use my location” (processed in your browser, not stored by us) | Show places near you | Contract / legitimate interest (6.1.b, 6.1.f); location: your action |
| Push notifications (optional) | Browser push subscription for your device (its push address, never shown to anyone), notification preference, record of sent reminder notifications | Send you a short notification when a reminder you asked for is due. Notifications are generic: no car, plate, VIN or deadline title | Your separate consent “push” (6.1.a), withdrawable any time; subscribing also needs your click in the browser |
| Favourites | Businesses you save, with the time you saved them (a private list) | Show your saved places to you | Contract (6.1.b) |
| Workshop access grants and job cards | The car you share, the workshop you choose, the time limit, the car data you allowed (make, model, year, fuel, power, displacement; VIN and plate only if you tick them), a hashed one-time code, job cards the workshop enters for your car, receipts and photos | Let a verified workshop see the car data you chose for the time you chose, and keep your service history and receipts | Your consent for each grant (6.1.a), withdrawable by revoking the grant; service history: contract (6.1.b) |
| Shared history links | Link token (stored only as a hash), optional label, validity, what you chose to include, view count and last view time (no IP address or browser details are stored with views) | Let a person you choose see a read-only history of your car | Contract (6.1.b); you decide what is included and when the link expires or is revoked |
| Quick entry (fuel) | The text you type for one fuel entry (for example litres, price, odometer, station). Do not type your plate or VIN here | Draft a fuel entry for you to check and save. If a quantity or odometer is missing, a language model may help fill it in | Contract (6.1.b); you confirm every value before anything is saved |
| Security and operations | Hashed IP, request counters, error logs, mail delivery status | Rate limiting, abuse prevention, troubleshooting | Legitimate interest (6.1.f) |
| Consent records | Which consent, version, time, hashed IP | Prove consents | Legal obligation / legitimate interest (6.1.c, 6.1.f) |
Directory and map data about businesses and places is business information from public sources (such as OpenStreetMap), from the businesses and from users; it is not data about you as a user, except that a business owner who claims a profile gives us contact details for verification.
4. Where the data comes from
From you (forms and entries), automatically from your use of the service (security data), from public sources for directory and map data, and from businesses that claim their profile.
5. Who receives your data (recipients and processors)
| Recipient | What for | Notes |
|---|---|---|
| Hosting provider [name, location – to be filled in] | Servers and database | Processor under a data processing agreement |
| MailerSend (transactional email delivery) | Sending sign-in links, confirmations, reminders and inquiry mails | Processor; receives recipient email address and message content. [Location and transfer safeguards – to be confirmed] |
| Language-model provider [provider – to be confirmed], optional | Identifying a vehicle from a VIN and explaining it | Receives only vehicle information (VIN with serial digits masked) or the text of a quick entry, never your email or account data; not enabled unless configured |
| Browser push services (Google, Mozilla, Apple or Microsoft, depending on your browser) | Delivering push notifications to your device | Only if you subscribed. They receive your device’s push address and an encrypted notification; the content is not readable by them |
| Workshops you gave a grant | The car data you allowed, for the time you chose | Only while the grant is active. The workshop never receives your email address or your other entries |
| People you send a shared history link | The history you chose to include: no VIN, plate, owner name or email, fines or receipts | Anyone with the link can open it until it expires or is revoked. The page is not indexed by search engines |
| Map tile provider [OpenStreetMap tile servers or another provider] | Delivering map images | Your browser requests tiles directly from the provider, which therefore sees your IP address and the map area you view; we do not send them your account data |
| Rental companies | Receiving rental requests and answering them | They receive the request details but not your email address; their offer is relayed to you by us |
| Authorities and courts | Where the law requires | Only on a valid legal basis |
We do not sell personal data and we do not share your garage data with advertisers. If we ever offer offers from workshops or partners, it will be a separate opt-in consent, never pre-ticked; partners would receive only anonymous aggregates unless you ask for a quote yourself.
6. International transfers
[To be completed with the lawyer: location of servers and each processor, any transfer outside the European Economic Area or your country, and the safeguards used (adequacy decision, standard contractual clauses, other).]
7. How long we keep data
| Data | Retention |
|---|---|
| Account and garage data | Until you delete it or your account; deleted immediately with the account (backups are overwritten within [30] days) |
| Sign-in link tokens | Valid 20 minutes; unused or used tokens are deleted by routine clean-up |
| Rental inquiries | Active for 30 days; after that your email address and notes are deleted and only anonymous aggregate fields remain |
| Unconfirmed reviews and comments | Deleted after 7 days |
| Published reviews and comments | While published or until you delete them; removed reviews are deleted after [90] days except what is needed for legal claims |
| Reports and moderation log | [12] months after closure |
| Consent records | For as long as needed to prove consent; deleted with the account unless we must keep them by law [to be confirmed] |
| Push subscriptions and reminder notification records | Until you turn push off, remove a device or delete your account. A device that repeatedly fails to receive notifications is removed automatically |
| Favourites | Until you remove them or delete your account |
| Workshop grants and one-time codes | An unused code expires after 48 hours. A grant ends at its chosen end date (1, 7, 30 or 90 days) or when you revoke it. Job cards and receipts stay with your car until you delete them or your account |
| Shared history links | Until the chosen expiry (7, 30 or 90 days) or until you revoke the link; removed with the car or your account |
| Quick entry text | Not stored by us unless you save the entry it becomes. Each model call is logged for cost and abuse control [content of that log and its retention to be confirmed] |
| Security counters and hashed IPs | Short-lived (hours to days) |
| Email delivery logs | [to be confirmed with the processor] |
8. Automated decisions and language models
We do not take decisions about you that have legal or similarly significant effects by automated means, and we do not profile you for advertising. Language models, where enabled, only help to identify a vehicle from a VIN and to phrase an explanation based on our own tables; their output is indicative and may be wrong.
9. Your rights
Under the GDPR (and similar local laws) you have the right to: access your data; correct it; delete it (“right to be forgotten”); restrict processing; receive your data in a machine-readable format (portability); object to processing based on legitimate interest; withdraw consent at any time without affecting earlier processing; and complain to a data protection authority. In the service you can do most of this yourself on the account page: view and change your details, export all your data as a file, delete your account and data, and switch reminder consent on or off. For anything else write to the privacy contact. We answer within one month; if a request is complex we may extend by two further months and will tell you why. We may need to verify your identity. Supervisory authority: the authority of your country of residence or place of work, for example the Commissioner for Information of Public Importance and Personal Data Protection (Serbia), the Croatian Personal Data Protection Agency (AZOP), the Personal Data Protection Agency of Bosnia and Herzegovina, or the Agency for Personal Data Protection and Free Access to Information (Montenegro). [List to be confirmed.]
10. Cookies and similar technologies
We use only strictly necessary cookies (session, security token, language choice) and no advertising or analytics cookies. Details are on the Cookies page.
11. Security
Sign-in links are single-use and expire after 20 minutes; tokens and IP addresses are stored only as hashes; connections use HTTPS; access to administration is restricted and logged; data is separated per account. No system is perfectly secure. If a personal data breach affects you and creates a risk, we will notify you and the competent authority as the law requires.
12. Children
The service is not intended for people under 16 and we do not knowingly collect their data. If you believe a child has given us data, contact us and we will delete it.
13. Reviews, public content and your visibility
Reviews and comments you choose to publish are visible to everyone, with the name you chose (or “Anonymous driver”), never your email address. Think before you include personal data in text you publish. You can edit or delete your own review with the private link we email you.
14. Changes to this policy
If we change this policy in a material way we will inform you before it applies (by email or in the service) and keep earlier versions. Consents are stored together with the version you agreed to.