Privacy and personal data

Updated: 5 October 2026

Who processes your data

EVOCHECK SRL · Tax ID 52370669 · Trade Register J2025063283005. Registered office: 29C Petru Aron Street, Roman, Neamț County, Romania. For personal data requests: evochecktuning@gmail.com; telephone 0784 111 538. This notice applies to evocheck.com and files.evocheck.com.

Data and purposes

When you submit a request or register, we receive your name, email, phone number and billing details; for businesses, the company name and tax identifier. In the portal, we process vehicle details, ECU/TCU information, original and modified files, quotes, messages, order status and payment references. Files may contain vehicle identifiers. Do not send data that are unnecessary for the job.

We use these data for assessment, quotations, service delivery, account management and requested notifications. Processing necessary for a request or contract is based on pre-contractual steps and performance of the contract; invoicing and mandatory records are based on legal obligations. Security, preventing abuse and defending rights are based on legitimate interests, assessed against your rights.

Access and providers

Files and orders are accessible to their owner and authorised EVOCHECK staff. We use GoDaddy hosting and email services, communications providers and, where necessary, accounting and advisory services. Data may be disclosed to authorities as provided by law. Messages sent to the Gmail address are also processed through Google’s email service. We do not sell data or use the portal for advertising profiling or solely automated decisions with legal effects.

Provider services may involve processing outside the European Economic Area. Information about destinations and applicable safeguards, including standard contractual clauses or other permitted mechanisms, can be requested at the contact address. See also GoDaddy’s policy and Google’s policy.

Data retention

Account data are required while the account is in use. For orders and files, retention depends on completion of the job, support or remediation needs, and any complaints or disputes. Financial and accounting documents are retained for the applicable statutory periods. Data no longer needed are deleted or anonymised, except where required for legal obligations or the defence of rights.

Password reset links remain valid for one hour. The portal limits login attempts and retains restricted technical logs for security. Deletion from the portal does not immediately remove backups or emails already delivered; relevant retention cycles and obligations apply.

Your rights

You may request access, rectification, erasure, restriction and portability, and object to processing based on legitimate interests, subject to the law. Where consent is used, it may be withdrawn for the future. We normally respond within one month; we will inform you if a lawful extension is needed. We may request proportionate information to verify your identity. You may lodge a complaint with ANSPDCP and seek a remedy before a court.

Mandatory data are needed for your account or to fulfil your request; without them we may be unable to provide the service. This notice does not constitute mandatory consent to marketing.

Payments, credits and acceptance of terms

For payments we process the amount, currency, order/top-up reference, transaction status and identifiers returned by the processor. When you choose card payment, EuPlătesc receives the transaction details, including reference, amount, currency and email. Card details are entered on the processor’s page; EVOCHECK does not store the full card number or CVV. EuPlătesc and payment institutions provide their own notices for payment processing, security and fraud prevention.

We keep billing country, credit balance and transactions, applied promotions and, if you use referrals, the link needed to award the bonus. When you accept Terms at card checkout we record the account, payment reference, amount, currency, time, language and document version. These records support the contract, accounting obligations and, where applicable, our legitimate interest in preventing abuse and evidencing transactions. Accepting Terms is not GDPR marketing consent.

External services on the website

Links to Google Maps, Facebook, TikTok and WhatsApp open services with their own policies.