Privacy Policy

1. Data Controller

The data controller is AVS ECU Soft (Valerii Andrenko), NIP 5871755603, Władysławowo, Poland. Contact: info@avs-ecu-soft.pl.

2. What data we collect

We may collect the following data:

• from website forms, such as a quick quote or contact request: phone number, vehicle details, selected services, travel location, preferred date or time, and information voluntarily provided in the enquiry;
• from the B2B partnership form: workshop name, city, contact person’s name, phone number, e-mail address, optionally a NIP or website/profile link, expected number of cars per month, the selected cooperation model, and the technical traffic source/campaign associated with the application;
• from the AI assistant chat: the content of messages typed in the chat window;
• after analytics consent: pseudonymous visitor and session identifiers, website language, landing page, traffic source/campaign, device type, operating system, browser, and a limited set of business events (for example section views, calculator milestones and CTA clicks); this analytics stream does not store your name, phone number, e-mail address or travel address;
• automatically for infrastructure and security: basic technical data such as IP address and browser data; analytics details are available in the cookie settings.

3. Purpose and legal basis

We process data for the following purposes:

• calling you back and preparing a quote at your request — Art. 6(1)(b) GDPR, meaning steps taken at the request of the data subject prior to entering into a contract;
• verifying a workshop application and agreeing B2B cooperation terms — Art. 6(1)(b) GDPR, meaning steps taken at your request before entering into an agreement or starting cooperation;
• handling enquiries through the AI assistant chat — Art. 6(1)(f) GDPR, meaning our legitimate interest in providing a response;
• ensuring the security and proper operation of the website — Art. 6(1)(f) GDPR;
• analytics and ad measurement — Art. 6(1)(a) GDPR, meaning your consent given in the cookie settings.

4. Recipients and processing

• A request prepared in chat is sent to Telegram only after you confirm its preview. The encrypted preview expires after 15 minutes. Minimal delivery and duplicate prevention metadata is stored in Cloudflare for up to 7 days and automatically deleted. The full chat is not stored in this ledger. OpenAI processes and stores consultant requests and responses according to the provider’s data retention settings.
• Ordinary form content, including ECU courier submissions, and contact details are forwarded directly to us via Telegram for prompt handling of the enquiry. To measure website effectiveness, we store only a limited technical record of a successful lead and contextual data without the name, phone number, e-mail address, VIN or travel address.
• B2B partnership applications are stored in the Cloudflare D1 administrative database so we can verify the workshop, make contact and handle the cooperation. A new B2B application may additionally be sent to us as a Telegram notification. Personal data from the B2B form is not sent to Google Analytics, Meta Pixel or our analytics database.
• AI chat messages are sent to the AI provider OpenAI to process the enquiry and generate a reply. Please do not enter sensitive data in the chat; a phone number is enough to get in touch.
• The website is hosted by Cloudflare, which may process technical data necessary for website operation, security and protection.
• After analytics consent, we use our own pseudonymous first-party analytics and Google Analytics. Google Ads and Meta Pixel follow the separate ads / marketing choice in the cookie settings.
• We do not send marketing e-mail or SMS newsletters.

5. Transfers outside the EEA

Telegram, OpenAI, Google and Cloudflare may process data outside the European Economic Area. In such cases, data transfers are based on standard contractual clauses or other appropriate safeguards required by data protection rules.

6. Retention period

A request prepared in chat is sent to Telegram only after you confirm its preview. The encrypted preview expires after 15 minutes. Minimal delivery and duplicate prevention metadata is stored in Cloudflare for up to 7 days and automatically deleted. The full chat is not stored in this ledger. OpenAI processes and stores consultant requests and responses according to the provider’s data retention settings.

Ordinary form content and contact details are not stored in the website analytics database. Submissions and messages remain in our communication, in particular in Telegram, and with service providers for the time necessary to handle the enquiry.

B2B form data is stored in the Cloudflare D1 administrative database for the period needed to verify the application, communicate with the workshop and handle any resulting cooperation, and afterwards no longer than necessary to establish, exercise or defend claims or meet legal obligations.

After the enquiry has been handled, data may be retained no longer than necessary to establish, exercise or defend possible claims, or to comply with legal obligations.

Detailed data from our first-party analytics (sessions and limited lead records) is normally retained for 90 days and periodically deleted; compact non-identifying daily aggregates may be retained longer for trend analysis. Google Analytics and advertising-service data is processed according to your consent and the settings of those services.

7. Your rights

You have the right to access your data, rectify it, erase it, restrict processing, object to processing, transfer your data, and lodge a complaint with a supervisory authority. In Poland, the supervisory authority is UODO.

Where data is processed based on consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Contact regarding personal data: info@avs-ecu-soft.pl.

8. Voluntary basis

Providing data is voluntary but necessary to contact you, prepare a quote or handle your enquiry.

You can change or withdraw your consent to analytics and advertising cookies at any time in the cookie settings.