Privacy Policy

1. General Provisions

1.1. SmartLink Auto (the “Operator”, “we”, “us”) considers the principles of lawfulness, fairness, and confidentiality in the processing of personal data, as well as the security of the processing, to be our highest priorities.

1.2. This Privacy Policy (the “Policy”) describes how the Operator collects, uses, stores, and protects personal data of users of the website at https://kautocheck.com/ (the “Site”), and sets out the rights of data subjects and the measures taken to ensure the security of personal data.

1.3. This Policy is a publicly available document. The current version is published on the Site.

2. Definitions

• Personal data: any information relating to a directly or indirectly identified or identifiable natural person (the data subject).
• Data subject: a natural person whose personal data is processed by the Operator.
• Processing: any operation performed on personal data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• Site: the Internet resource owned by the Operator and located at https://kautocheck.com/.
• Confidentiality: the obligation of the Operator and any other persons who have access to personal data not to disclose such data to third parties without the data subject’s consent, unless otherwise required by applicable law.

3. Principles, Purposes and Content of Processing

3.1. The Operator processes personal data in accordance with the following principles: lawfulness and fairness; limitation to specific, pre-determined and legitimate purposes; data minimisation; accuracy; storage limitation; and destruction or anonymisation once the purposes are achieved.

3.2. Personal data is processed for the following purposes:

• concluding, performing and terminating agreements with users and providing the services offered on the Site (including VIN lookup and vehicle history reports);
• communicating with users via the Site and by email, including responding to inquiries and sending reports and information requested by the user;
• complying with applicable legal obligations of the Operator.

3.3. Categories of personal data processed:

• name (first and last name);
• email address;
• phone number (if provided);
• user metadata (cookies, IP address, browser type, pages visited).

3.4. Categories of data subjects:

• customers and counterparties (and their representatives) of the Operator;
• any persons requesting services through the Site or otherwise;
• representatives and employees of customers and counterparties that are legal entities.

3.5. Processing is carried out by a mixed method (both automated and non-automated means) and includes collection, recording, systematisation, accumulation, storage, updating, retrieval, use, transfer, blocking, erasure, and destruction.

3.6. Personal data is retained for the period of interaction between the Operator and the user, and for three (3) years thereafter for the purpose of complying with statutory limitation periods, unless a different period is required by applicable law.

4. Collection via the Site

4.1. The Operator processes personal data that becomes known to it through the user’s interaction with the Site (including forms, VIN search, and support channels) and through email correspondence.

4.2. When visiting the Site, technical information about the user’s device may be passively collected (cookies, IP address, browser, referring URL). This is necessary for the uninterrupted operation of the Site and for security purposes.

4.3. The Operator does not use technical information for direct or indirect identification of data subjects and does not combine it with other personal data for marketing purposes.

4.4. Users may refuse cookies by adjusting their browser settings. This may result in reduced functionality of the Site.

4.5. The Site is not intended for persons under the age of 18. If we discover that a minor has submitted personal data, we will delete it within 10 business days.

4.6. The Operator does not process biometric personal data and does not use personal data for biometric identification or authentication.

5. Transfer of Personal Data

5.1. The Operator may involve third parties in the processing of personal data (for example, hosting providers, payment processors such as Stripe, and analytics providers) only to the minimum extent necessary to achieve the purposes of processing and on the condition that they maintain the confidentiality and security of the data.

5.2. The Operator may also disclose personal data to persons who are entitled to receive it under applicable law (for example, in response to a lawful request from a competent authority).

5.3. Cross-border transfers of personal data are carried out only where necessary to provide the Service (for example, when using cloud infrastructure or payment providers established outside your country) and subject to appropriate safeguards.

6. Termination of Processing and Destruction

6.1. Processing of personal data is terminated on:

• achievement of the purposes of processing or expiry of the maximum retention period;
• loss of the need to achieve the purposes of processing;
• withdrawal of the data subject’s consent, where consent is the only legal basis for processing;
• a request from the data subject to stop processing, except where processing is required by law;
• expiry of statutory limitation periods for the relevant relationship;
• liquidation of the Operator.

6.2. Personal data is destroyed in a way that makes restoration impossible. Destruction is carried out within six (6) months from the event giving rise to it, unless a different period is established by applicable law.

7. Security Measures

7.1. The Operator takes all necessary legal, organisational and technical measures to protect personal data against unlawful or accidental access, destruction, alteration, blocking, copying, disclosure, distribution, or other unlawful actions, including, as applicable:

• adoption of this Policy and internal rules for the processing and protection of personal data;
• internal monitoring and audit of compliance with applicable data protection law;
• training of personnel involved in the processing of personal data;
• identification of threats to the security of personal data;
• application of organisational and technical measures sufficient to ensure confidentiality, integrity, availability and resilience of the processing;
• encryption of data in transit (TLS/HTTPS) and, where appropriate, at rest;
• restriction of access to personal data to authorised personnel only;
• detection of and response to security incidents;
• destruction of personal data using methods that exclude subsequent recovery.

7.2. In the event of an unlawful or accidental transfer of personal data that results in a breach of data subjects’ rights, the Operator will notify the competent authority within the timeframes and in the manner required by applicable law.

8. Rights of Data Subjects

8.1. The data subject has the right to obtain information about the processing of their personal data.

8.2. The data subject may request rectification, blocking or erasure of their personal data where it is incomplete, outdated, inaccurate, unlawfully obtained, or no longer necessary for the stated purpose.

8.3. The data subject may at any time withdraw their consent to processing, in whole or in part, or request that processing be stopped, except in cases provided for by applicable law.

8.4. To exercise their rights, data subjects may contact the Operator by email: support@kautocheck.com.

8.5. The data subject has the right to lodge a complaint with the competent data protection authority and to seek judicial remedy, including compensation for damages.

9. Changes to this Policy

9.1. The Operator may update this Policy from time to time. The updated version will be published on the Site with the date of entry into force. Continued use of the Site after that date constitutes acceptance of the updated Policy.

9.2. This Policy is reviewed as needed, and in any case at least once every three (3) years.

10. Contact

For any questions regarding this Policy or the processing of your personal data, please contact:

Email: support@kautocheck.com