Privacy Policy

Last updated: April 2026

1. Who we are

EcuChipService is a product of Webfox-IT, registered in the Netherlands (KvK 82806314). We are the data controller for all personal data processed through this website and the EcuChipService platform.

Questions about this policy or requests regarding your data can be sent to [email protected].

2. Data we collect

2a. This website

  • Contact form — name, email address, company name, and message. Used solely to respond to your enquiry.
  • Analytics (Google Analytics 4) — anonymised usage data (pages visited, session duration, general location). Only collected after you explicitly accept cookies. See section 5 for details.

2b. The EcuChipService platform

The platform is a B2B tool used by ECU tuning dealers. We process:

  • Account data — name, email address, company details provided during onboarding.
  • Portal configuration — branding settings, uploaded files, and data entered by the dealer into their portal.
  • Billing data — subscription status and payment history. Payment transactions are handled by our payment processor; we do not store full card details.

We do not collect or store personal data belonging to the end-customers of our dealers. Any such data entered into the portal is the dealer’s own responsibility.

3. Legal basis (GDPR)

  • Contact form — legitimate interest (Art. 6(1)(f)) to respond to enquiries and, where applicable, pre-contractual steps (Art. 6(1)(b)).
  • Google Analytics — consent (Art. 6(1)(a)).
  • Platform account & billing — performance of a contract (Art. 6(1)(b)).

4. Data storage & security

All platform data is stored on our own VPS hosted by Hetzner Online GmbH in Nuremberg, Germany — within the European Union. No personal data is transferred outside the EU.

We take appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure.

5. Google Analytics

We use Google Analytics 4, operated by Google LLC (USA). GA4 is only activated after you click Accept in the cookie banner. Data collected includes pages visited, session duration, and approximate location (country/region). No personally identifiable information is sent to Google.

Retention: GA4 event data is retained for 14 months. See Google’s privacy policy for details on how Google handles this data.

Withdrawing consent:open your browser’s developer tools → Application → Local Storage, delete the cookie-consent-v1 entry, and reload the page.

6. Data retention

  • Contact form submissions — retained for as long as necessary to handle your enquiry, and deleted thereafter.
  • Platform account data — retained for the duration of your subscription. After cancellation, data is deleted within 90 days unless a legal obligation requires longer retention.
  • Analytics data — 14 months (Google Analytics default).

7. Your rights

Under the GDPR you have the right to:

  • Access — request a copy of the data we hold about you.
  • Rectification — correct inaccurate data.
  • Erasure — request deletion of your data (“right to be forgotten”).
  • Portability — receive your data in a structured, machine-readable format.
  • Objection — object to processing based on legitimate interest.
  • Restrict processing — ask us to pause processing in certain circumstances.

To exercise any of these rights, email [email protected]. We will respond within 30 days.

You also have the right to lodge a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens.

8. Changes to this policy

We may update this policy when our services or legal requirements change. The date at the top of this page reflects the most recent revision. Continued use of the platform after changes constitutes acceptance of the updated policy.