AI DamagePrivacy Policy
Updated
Who processes the data
The controller of personal data is a sole proprietor who owns and operates the VinWind service (Ukraine). Full details are provided on request. Personal data enquiries: [email protected].
What data we process
- Account. When you sign in with Google: the name, email, account ID and avatar that Google shares.
- Orders. VIN, lot number or link to the vehicle, order history and finished reports.
- Technical data. IP address, browser and device type, request times — to deliver the site and protect it from attacks and abuse.
- Analytics (only with consent). How visitors move through pages: clicks, scrolling, time on page, session recordings without typed text. The account area, admin area and reports are never recorded.
We do not collect passport data or payment cards and never ask you to send photos of documents. A VIN identifies a vehicle, not a person.
Purposes and legal bases
- Sign-in, account and report preparation — performance of a contract with you (GDPR Art. 6(1)(b)).
- Security, abuse prevention and technical support — our legitimate interest (Art. 6(1)(f)).
- Microsoft Clarity analytics — your consent (Art. 6(1)(a)), which you can withdraw at any time.
- Compliance with legal requirements, should they arise — legal obligation (Art. 6(1)(c)).
Who receives the data
We do not sell personal data. Access is limited to providers the service cannot run without, and only to the extent their task requires:
- the server hosting provider;
- the content delivery and attack protection network;
- Google — authentication when you sign in;
- cloud computing and analytics providers that help prepare reports (they receive vehicle data, not your contact details);
- Microsoft — the Clarity analytics service, only if you have consented.
Some providers are located outside Ukraine and the EU (including the United States). Such transfers rely on the EU Standard Contractual Clauses or an adequacy decision.
How long we keep it
- Account data — while the account exists and up to 30 days after it is deleted.
- Orders and reports — up to 3 years to evidence the services provided and handle claims.
- Technical security logs — up to 30 days.
- Analytics data — up to 13 months on the Microsoft Clarity side.
Cookies
| Cookie | Purpose | Duration | Consent |
|---|---|---|---|
| Sign-in session | Keeps you signed in to your account | until sign-out or session end | not required (essential) |
| vw_in | Tells the site that you are signed in | as the session | not required (essential) |
| vw_consent | Remembers your analytics choice | 180 days | not required (essential) |
| _clck, _clsk, CLID and other Clarity cookies | Microsoft Clarity visit analytics | up to 1 year | required |
You can change your choice at any time: Cookie settings.
Your rights
You can obtain a copy of your data, correct it, delete your account and data, restrict or object to processing, receive your data in a machine-readable format and withdraw consent. We reply within 30 days. Write to [email protected].
You can lodge a complaint with the Ukrainian Parliament Commissioner for Human Rights (ombudsman.gov.ua) or with the data protection supervisory authority in your EU country.
Security and children
Data is transmitted only over encrypted connections and access to it is restricted. The service is not intended for persons under 16.
Changes
We will announce material changes on this page by updating the date at the top. The terms of using the site are in our Terms of Use.