Privacy Policy

Introduction

lotimgmx B.V. ("we", "our", or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, process, and protect your personal information when you use our car detailing services or visit our website at lotimgmx.live.

As the Data Controller, we are responsible for ensuring your personal data is processed in accordance with the General Data Protection Regulation (GDPR) and other applicable privacy laws in the European Union.

Data Controller Information

Data Collection

The data we collect includes personal information such as your name, email address, phone number, postal address, and vehicle information when you book our services or contact us. We also collect technical data when you visit our website, including IP addresses, browser type, device information, and cookies data.

We collect this information through various means including:

• Direct interactions when you contact us or book services
• Automated technologies such as cookies and similar tracking technologies
• Third parties such as analytics providers and payment processors
• Public sources when necessary for business verification

How We Use Your Information

We explain how we use your information in this section to ensure transparency about our data processing activities. Your personal data is processed based on various legal bases under GDPR, including contract performance, legitimate interests, and consent where applicable.

Specifically, we use your data for:

• Service Delivery: To provide car detailing services, schedule appointments, and communicate about your bookings
• Customer Support: To respond to your enquiries, resolve issues, and provide technical support
• Business Operations: To manage our business, process payments, and maintain records
• Legal Compliance: To comply with legal obligations and protect our legitimate business interests
• Marketing: To send you promotional communications about our services (with your consent)
• Website Improvement: To analyse website usage and improve user experience

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal bases:

• Contract Performance: Processing necessary to perform our car detailing services
• Legitimate Interests: For business operations, fraud prevention, and service improvement
• Consent: For marketing communications and non-essential cookies
• Legal Obligation: To comply with applicable laws and regulations

Data Sharing and Disclosure

We do not sell or rent your personal data to third parties. We may share your information with:

• Service Providers: Payment processors, email providers, and other business partners who assist in service delivery
• Legal Authorities: When required by law or to protect our legal rights
• Business Transfers: In the event of a merger, acquisition, or sale of assets

All third parties are contractually obligated to protect your data and use it only for the specified purposes.

Data Retention

We retain your personal data only as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements.

Specific retention periods include:

• Customer Data: 7 years after last service for business and tax purposes
• Marketing Data: Until you withdraw consent or 3 years of inactivity
• Website Data: Analytics data retained for 26 months
• Communication Records: 3 years for customer service purposes

Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for marketing or cookies

To exercise these rights, please contact us at privacy@lotimgmx.live.

Data Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and staff training
• Secure data storage and backup procedures

Cookies and Tracking

Our website uses cookies and similar tracking technologies to enhance user experience and analyse website usage. For detailed information about our cookie practices, please refer to our Cookie Policy.

You can manage your cookie preferences through your browser settings or our cookie consent banner.

International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place, such as:

• European Commission adequacy decisions
• Standard Contractual Clauses (SCCs)
• Binding Corporate Rules or certification schemes

Children's Privacy

Our services are not directed to children under 16 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete such information promptly.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable laws. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.

Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or need to contact us regarding your personal data, please reach out using the following contact information:

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe we have not handled your personal data appropriately.