GDPR Compliance for Carjudge.com

1. Introduction

At Carjudge.com, we are committed to protecting the personal data of our users in compliance with the General Data Protection Regulation (GDPR) and relevant national laws. This page outlines how we handle personal data, your rights as a data subject, and our obligations.

2. Data Controller

The data controller responsible for processing personal data is: Atrium Vision Sarl
Address: Rue de la Grotte 6 1003 Lausanne Switzerland. Contact email: contact@carjudge.com

3. Data Categories

We collect and process the following types of personal data:

• Identification Data: Name and email address for creating user accounts and providing services.
• Financial Data: Payment processing is handled by Stripe. Carjudge.com does not store financial information such as credit card details.
• Technical and Behavioral Data: Google Analytics collects technical and behavioral data such as IP addresses, browser types, and browsing habits. Carjudge.com does not store this data directly.

4. Legal Basis for Processing

We process your data under the following legal bases:

• Consent: For marketing communications and non-essential cookies.
• Contractual Necessity: To provide the services you request (e.g., generating vehicle history reports).
• Legitimate Interest: To improve our services through analytics and feedback.

5. Data Sharing

We share your data with the following third-party service providers:

• Google Analytics: For website analytics and understanding user behavior. This data may be transferred outside the EU under Standard Contractual Clauses (SCCs).
  Google Analytics Privacy Policy
• Stripe: For payment processing. Stripe is responsible for handling all financial transactions and complies with GDPR requirements.
  Stripe Privacy Policy

6. Data Retention

• User Data (name and email): Stored until the user deletes their account.
• Financial Data: Managed by Stripe, following their retention policy.
• Analytics and Behavioral Data: Collected and stored by Google Analytics.

7. Data Subject Rights

• Right of Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request corrections to any inaccurate or incomplete data.
• Right to Erasure: You can request the deletion of your personal data (“right to be forgotten”).
• Right to Restrict Processing: You can request a restriction on how your personal data is processed.
• Right to Data Portability: You can request to receive your personal data in a structured, machine-readable format.
• Right to Object: You can object to the processing of your personal data for legitimate interests or direct marketing purposes.
• Right to Withdraw Consent: You can withdraw your consent for processing based on consent at any time.

To exercise any of these rights, contact us at contact@carjudge.com.
If you are not satisfied with how we handle your request, you have the right to file a complaint with CNIL, France’s data protection authority:
CNIL - Commission Nationale de l'Informatique et des Libertés

8. Security Measures

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of sensitive data during transmission and storage.
• Access control to restrict data access to authorized personnel.
• Regular audits to ensure compliance with security practices.

9. Data Breaches

In the event of a personal data breach, we will promptly assess the risk to individuals and, if necessary, notify the relevant data protection authority within 72 hours. If the breach poses a high risk to your rights and freedoms, we will notify you directly without undue delay.

10. International Data Transfers

Data may be transferred outside of the European Economic Area (EEA), and we ensure that appropriate safeguards, such as Standard Contractual Clauses (SCCs), are in place for such transfers.

11. Contact Information

If you have any questions regarding this GDPR Compliance page or how we protect your personal data, please contact us at:

• Email: contact@carjudge.com
• Mailing Address:
  Atrium Vision Sarl Rue de la Grotte 6 1003 Lausanne Switzerland.