Privacy Policy
Updated: 2026-05-17
Techmatik & Robotics processes customer personal data under EU Regulation 2016/679 (GDPR) and applicable Italian law.
Data Controller
Techmatik & Robotics. Privacy contact: info.techmatik@gmail.com.
Data collected
Email, phone, country of residence, vehicle data, uploaded ECU files. Payment data (card number, CVV) never reaches our servers: payment is processed directly on PayPal.
Purposes
Performance of service contract (ECU remapping), order status communication, tax compliance, IT security and fraud prevention.
Legal basis
Contract performance (art. 6.1.b GDPR), legal obligation (art. 6.1.c), legitimate interest in security (art. 6.1.f).
Retention
The original ECU file (ORI) is retained encrypted for 90 days after delivery; the modified ECU file for 180 days after delivery; billing data for 10 years per Italian tax law. Technical security logs are retained for up to 12 months, fiscally/transactionally relevant logs for up to 5 years.
Recipients and transfers
Data hosted on EU servers (Neon Postgres EU-Central, Cloudflare R2 EU). To deliver the service we rely on processors (sub-processors): database hosting, object storage, PayPal payment processor, Clerk authentication, Resend email delivery, Inngest background jobs, Sentry error monitoring (EU region). The complete and up-to-date sub-processor list is available at /legal/subprocessors. Non-EU transfers are covered by Standard Contractual Clauses approved by the EU Commission.
Data subject rights
Access, rectification, deletion, portability, restriction, objection, consent withdrawal. Exercise: info.techmatik@gmail.com. Complaint: Italian Garante Privacy (www.garanteprivacy.it).
Security
AES-256 at-rest encryption of ECU files, TLS 1.3 in transit, signed PASETO tokens for download links, bcrypt-hashed admin passwords.