Your data. Clearly explained.

Controller & contact

1. This website and your enquiry

This notice covers detailing, contact and scheduling, separately from the protected trading area. The form states whether online enquiries are enabled. A local draft sends nothing and does not store form entries on the server. An explicitly labelled private owner test is stored internally without sending email or creating a calendar event.

When enabled, enquiries collect your name, email, optional phone, vehicle and model, service, service address, preferred time and notes, and the resulting offers and confirmations. Please do not include health information, identity documents or other particularly sensitive data. Required contact and scheduling details are needed to process the enquiry.

2. Purposes and legal grounds

Information is used to answer enquiries, agree prices and appointments and organise services: steps before a contract or performance of a contract (GDPR Article 6(1)(b)). Legally required records are retained to meet applicable obligations (c). Security and abuse prevention serve our legitimate interest in operating a secure service (f).

A preferred time is not a reservation. Tiago reviews the price and time; the customer must explicitly confirm the offer. There are no automatic payment collections, advertising profiles or automated decisions with legal effects. Ordinary email replies are not read automatically or treated as acceptance.

3. Hosting, email and calendar

Railway hosts the website and enquiry records. Cloudflare manages DNS and the www redirect; register.lu/WebCMS provides the business mailbox. Email contact sends your message to that mailbox. Providers also process technical connection and security data, such as IP address, time and requested address.

Following the owner's personal authorisation, Google handles sending and the owner's Google Calendar. Customer emails contain offer and appointment details. Calendar events contain contact details, address, vehicle and appointment status. The owner may synchronise this calendar with Outlook, which manages its own display and synchronisation. Trading administrators cannot access the detailing desk. Keep personal offer links private.

Google access covers verified account identity, sending email and events on owned calendars, not reading the Gmail inbox. Application code only modifies its associated detailing events. The renewable credential is stored encrypted; the owner can revoke access in Google account permissions. Google user data is not sold, used for advertising or used to train general-purpose AI models. Use complies with the Google API Services User Data Policy, including Limited Use requirements.

Providers may process information outside the EEA. Their notices below explain processing locations and transfer arrangements. This website does not promise Europe-only processing.

4. Cookies, retention and deletion

Security and login cookies protect forms and the owner area. Your language choice may be saved locally in the browser. Detailing code uses no advertising trackers or analytics pixels. Unsubmitted form entries are not persisted in browser storage.

Enquiries, offers, delivery status and audit records are needed for handling, scheduling and documenting services. Legal retention duties or necessary evidence may require longer storage; personal data no longer needed should then be deleted. There is currently no automatic deletion deadline in this system. Tiago handles access and deletion requests at the contact above; mailbox and calendar records must also be considered separately.

5. Your rights

Subject to applicable law, you can request access, correction, erasure, restriction and portability. You can object to legitimate-interest processing on grounds relating to your particular situation. Where processing relies on consent, you can withdraw it for the future. Contact Tiago to exercise your rights. You can also complain to Luxembourg's data protection authority, the CNPD.

Further information

• Railway · Privacy
• Cloudflare · Privacy
• Google · Privacy
• Google API Services User Data Policy
• CNPD · Luxembourg