Privacy notice

Controller

Microchips Tuning, Dimitsanas 6, 183 46 Moschato, Attica, Greece. Operated by: KOUTSIS GEORGIOS, tax no. 068767393, GEMI no. 009433901000. Contact for data-protection matters: [email protected], tel. +30 210 4838357.

What we process

Website forms (quote, booking, contact, dealer application): name, phone, email, vehicle details, company name and country, and whatever you write in your message.

Dealer accounts: company and contact details, sign-in details, files and vehicle details you upload, support requests, credit movements, payments and invoices. Card details are handled directly by the payment provider and never reach us.

Technical data: to protect the forms from abuse, the server briefly keeps a hashed form of your IP address in memory only. For account security we keep a log of sign-ins and actions.

Purposes and legal basis

To answer your request, call you back, arrange your booking, carry out the work and run your account: steps before a contract and performance of a contract (GDPR Art. 6(1)(b)).

To meet tax and accounting duties: legal obligation (GDPR Art. 6(1)(c)).

For website security, preventing abuse, aggregate statistics, publishing work and reviews, and defending legal claims: our legitimate interest (GDPR Art. 6(1)(f)).

Fields marked as required are needed to handle your request; without them we can't reply. We don't use your details for advertising and we don't sell them.

Who receives your data

Only the providers we need to run the website, and only what they need for their job: Hetzner (hosting, Germany), Cloudflare (security and network), Fastmail (email) and, for dealer accounts once enabled, Stripe and PayPal (payments) and EVC (tuning tools). Data also goes to our accountant and to public authorities where the law requires it.

Some of these providers process data outside the European Economic Area. Such transfers rely on a European Commission adequacy decision or its standard contractual clauses. You can ask us for more information by email.

Cookies and third-party services

We don't use analytics or advertising cookies, which is why we show no consent banner. We use only what is necessary: sign-in and language cookies on accounts, and Cloudflare's technical security cookies.

Statistics: on our own server we count page views, referring websites and form submissions, without cookies and without storing IP addresses. For unique visitors we use a hash that changes every day and stays in memory only.

Forms: we use Cloudflare Turnstile to tell automated messages (bots) apart. It loads on pages with a form and processes technical data such as your IP address and browser type. For part of this processing Cloudflare acts as an independent controller under its own privacy policy.

Maps: maps load images from OpenFreeMap, so your IP address reaches that service when you open a page with a map.

Videos: YouTube videos load (from youtube-nocookie.com) only when you press play. From then on Google's privacy policy applies.

Bot check

If the automatic check finds a submission suspicious, the message is stored separately and we review it ourselves. We make no decisions with legal or similarly significant effects by automated means alone.

How long we keep it

Requests and bookings that led to no work: up to 24 months. Requests and bookings that led to work: up to 6 years.

Dealer job files: up to 3 years after completion. Attachments of closed support requests: up to 2 years. Invoices, payments and credit movements: as long as tax law requires or as needed for legal claims.

Backups are replaced in rotation, so deleted data may remain in them for a limited time.

Published work and reviews

We publish work on cars and customer reviews on this website, with first name and surname initial. If you recognise your car or review and want it removed, email us.

Your rights

You can ask for access, correction, deletion, restriction or portability of your data, and object to processing based on legitimate interest, by emailing [email protected]. We reply without delay and within one month at the latest. We may ask for details to confirm the request is yours.

You can also lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).