Privacy Policy

Diagnostix — remote diagnostic support for repair shops · in effect from 29 July 2026

These rules are §8 (Personal data — GDPR) of the Terms of Service.

Personal data (GDPR)

1. The controller of personal data is the Service Provider identified in §1(2) of the Terms: Jarosław Cichoń, tax number (NIP) 6462069319, statistical number (REGON) 276871956, e-mail [email protected]. All data protection matters should be addressed to that e-mail address.
2. The Service Provider processes: the Client's contact and company details, the content of the submission and correspondence, vehicle data (make, model, year, mileage, VIN, registration number) together with the content of photos, recordings and documents submitted, account data, IP address and the details needed to issue an invoice.
3. Purposes and legal bases: a) conclusion and performance of the contract, handling the case, account and correspondence — Art. 6(1)(b) GDPR; b) issuing and retaining invoices and meeting tax and accounting obligations — Art. 6(1)(c) GDPR; c) website security and establishing, exercising or defending legal claims — Art. 6(1)(f) GDPR (the Service Provider's legitimate interest).
4. Data may be disclosed to processors acting on the Service Provider's instructions: the server and hosting infrastructure provider, the e-mail provider, the payment provider Stripe (Stripe Payments Europe, Ltd.), the anti-abuse protection provider and the accounting office, as well as to entities entitled to obtain data under applicable law. A data processing agreement is in place with each of them. The Service Provider does not receive or store payment card numbers — these are handled solely by Stripe.
5. Data is stored within the European Union. Where any provider processes it outside the European Economic Area, this takes place on the basis of standard contractual clauses approved by the European Commission.
6. Retention periods: case data and attachments — 3 years from completion of the case; billing documentation and invoices — 5 years from the end of the calendar year in which the tax payment deadline fell; account data — until the account is deleted.
7. The Client has the right to access their data and obtain a copy, to rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interest. Requests should be sent to the e-mail address given in §1(2) of the Terms; the Service Provider responds without undue delay and no later than one month.
8. The Client also has the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland.
9. Providing data is voluntary but necessary to accept a submission and perform the contract. The data is not used for automated decision-making or profiling.
10. When submitting data relating to a vehicle or its owner, the Client declares that it has a basis for disclosing it and undertakes to inform the vehicle owner that the data has been passed to the Service Provider. The Client submits only the data necessary for the diagnostics.
11. The Service Provider may use anonymised technical knowledge arising from completed cases (make, model, symptoms, fault codes, cause and repair method) in its own knowledge base. That knowledge base contains no data identifying the Client, the vehicle or its owner. Publishing a write-up of a specific case requires the Client's separate consent.
12. The website uses only cookies necessary for its operation: the login session and the protection of the submission form. The Client can manage them in their browser settings; disabling them makes it impossible to log in to the panel and send a submission.