Last updated: June 2025
Celoce OÜ ("we", "us") is the data controller for personal data processed through autobaltix.com. We are committed to protecting your privacy in accordance with the EU General Data Protection Regulation (GDPR) and applicable national data protection law.
1. Data we collect
Customers: name, email address, phone number, and vehicle registration plate (hashed for recall purposes). Vehicle make, model, and year. Job description. Workshops: company name, email address, country, service regions, billing information (processed by Stripe — we do not store card details). All users: IP address, browser type, and usage logs collected automatically for security and debugging.
2. How we use your data
We use customer contact data exclusively to: deliver quote notifications; send the magic-link to manage your listing; notify the accepted workshop of your contact details. We use workshop data to: manage subscriptions; send job-match alerts; operate the billing relationship. We do not sell personal data to third parties or use it for advertising.
3. Vehicle plate data
Vehicle registration plates are used only to pre-fill vehicle data for returning customers within 365 days. The plate is stored as a one-way hash — we cannot reverse it to identify the vehicle owner. We do not perform owner lookups or share plate data with third parties.
4. Data retention
Customer contact data (email, phone, plate hash) is automatically deleted 365 days after the listing was created. Job descriptions may be retained for up to 3 years after anonymisation. Workshop account data is kept for the lifetime of the subscription plus 3 years for tax and accounting purposes.
5. Your rights
Under GDPR you have the right to: access your data; correct inaccurate data; request deletion (customers can do this via the magic-link in the management email); restrict or object to processing; data portability. To exercise any right, contact us at info@autobaltix.com. You also have the right to lodge a complaint with your national supervisory authority (Estonia: Andmekaitse Inspektsioon).
6. Cookies
We use strictly necessary cookies for session management and security (CSRF). We do not use advertising or tracking cookies. No cookie consent banner is required for strictly necessary cookies under ePrivacy rules.
7. Third-party processors
Supabase (EU region) — database and authentication hosting. Stripe — payment processing (PCI-DSS compliant). Resend (EU region) — transactional email delivery. Railway — backend server hosting. Vercel — frontend hosting. Each processor is bound by a Data Processing Agreement and may not use your data for their own purposes.
8. International transfers
All primary data storage and processing takes place within the European Economic Area. Where processors operate servers outside the EEA, Standard Contractual Clauses are in place.
9. Contact
Data controller: Celoce OÜ, Estonia. Email: info@autobaltix.com. For data protection questions or to exercise your rights, email us with the subject line 'GDPR Request'.