Privacy policy

Which personal data we process when you use this website and order a repair, why we do it, and what rights you have.

Last updated: [MISSING: date]

Controller

The controller responsible for processing your data is [MISSING: company and address, see imprint]. Contact for privacy matters: [MISSING: email address for privacy requests] [MISSING: data protection officer, if required]

Repair request and order

When you request a repair, we process: the category and description of your item and its damage, the repairs you chose, your photos, the shipping or drop-off option, your return address if you ship, your email address and optionally your name. Purpose: quoting, carrying out and handling the repair. Legal basis: contract and pre-contractual steps (Art. 6(1)(b) GDPR). Your order is available via a personal link. Anyone who has this link can view the order and accept or decline the quote. Please don't share it.

Photos

When you upload photos, we automatically remove embedded metadata (EXIF) such as location and device. The photos are seen by us and by the partner workshop that prepares your quote. Retention: [MISSING: how long photos are kept] [MISSING: use of photos to improve damage detection only with consent? If so: describe consent and withdrawal]

AI assistant and photo analysis

If you make your request in the chat, you are talking to an AI assistant. Your messages and photos are sent to an AI service that runs the conversation and assesses damage on the photos. We collect your contact details (email address, name, address) in a separate form step; they are not sent to the AI service. Please don't write personal data into the chat. The AI's assessments and prices are non-binding; only the workshop's quote is binding. Provider: [MISSING: AI provider, registered office and server location] Legal basis: [MISSING: Art. 6(1)(b) or (f) GDPR]

Payment

Payments are handled by [MISSING: payment provider, registered office]. You enter your payment details (e.g. card details) directly with this provider, which processes them; we don't receive them. Legal basis: contract (Art. 6(1)(b) GDPR).

Emails about your order

We email you about your quote and the progress of your repair. Sent via [MISSING: email provider, registered office]. Legal basis: contract (Art. 6(1)(b) GDPR).

Recipients and processors

• The partner workshop that carries out your repair: [MISSING: which data the workshop receives, its role (separate controller or processor)] • Shipping carrier: [MISSING: provider] • Hosting and storage: [MISSING: provider and server location] • Payment, AI service and email as described above We have concluded agreements under Art. 28 GDPR with our processors. [MISSING: confirm]

Transfers to third countries

[MISSING: whether data is processed outside the EEA, and on what basis (e.g. adequacy decision, standard contractual clauses)]

Retention

We keep your data as long as the order requires, and beyond that where statutory retention obligations apply (e.g. accounting records, [MISSING: confirm periods]). Photos that never became part of a request are deleted after [MISSING: period].

Cookies

This website only uses technically necessary cookies, for example to remember your language. We don’t use analytics or advertising cookies. [MISSING: review once analytics or monitoring tools are added]

Your rights

You have the right of access, rectification, erasure and restriction of processing, the right to data portability and the right to object. You can withdraw consent at any time with effect for the future. Write to us at [MISSING: email address for privacy requests]. You can also lodge a complaint with the Austrian Data Protection Authority: Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.