Privacy policy

This policy describes how we process the personal data of users of the P1 Performance FileService (the “Service”).

1. Data controller

The data controller is [Company name / full name], [address], tax ID [tax ID], contact: [email].

2. What data we process

• Account data: name/company, email address, password (stored as an encrypted hash).
• Order data: vehicle details, uploaded files (ECU/TCU reads), chat content, statuses, credit billing.
• Technical data: IP address, essential session and security cookies.

3. Purposes and legal bases

• Providing the service and managing the account — Art. 6(1)(b) GDPR (contract).
• Billing and accounting obligations — Art. 6(1)(c) GDPR (legal obligation).
• Security and abuse prevention — Art. 6(1)(f) GDPR (legitimate interest).

4. Cookies

The Service uses only essential cookies: keeping the session, login, CSRF protection and remembering your chosen language. We do not use tracking or marketing cookies.

5. Data recipients

Data may be entrusted to infrastructure providers (hosting, email, payment processor) only to the extent needed to provide the service, under data-processing agreements. [Fill in the list of sub-processors].

6. Retention

Account and order data are kept for the duration of using the Service and the period required by law (incl. tax). Client files are deleted per our retention policy [period to be defined].

7. Your rights

You have the right to access, rectify, erase, restrict and port your data, and to object. You may also lodge a complaint with a supervisory authority. For data matters write to: [email].

8. Security

Passwords are stored as hashes, the connection is encrypted (HTTPS), client files are kept on private storage with authorized access, and admin login is protected by 2FA.

9. Changes

We may update this policy. We will announce material changes in the Service.