Privacy Policy

Overview

This Privacy Policy explains how TrackSights ApS, CVR 44719037, Bredgade 45 C, 1260 København, Denmark ("TrackSights", "we") handles personal data in connection with our website and the TrackSights service ("Service"). We provide the Service to businesses in the automotive trade; it is not intended for consumers.

We handle personal data in two capacities:

• As a controller — for our own website visitors, account holders and billing, for securing and improving the Service, and for our business communications. This Policy covers that processing.
• As a processor — for the business content our customers put into the Service ("Customer Data"), which we process on the customer's behalf and on their instructions under our Data Processing Agreement (DPA) at https://www.tracksights.com/data-processing-agreement. There, the customer is the controller.

Personal data we collect

• Account and User data — name, business email, role, and login/security data when you or your colleagues register and use the Service.
• Business-verification data — your company's CVR or VAT number and business details, which we require because the Service is offered to businesses only.
• Billing data — billing contact, address, VAT status and payment metadata. Card details are handled by our payment processor; we do not store full card numbers.
• Usage data — IP address, device and browser information, pages and features used, and VIN-lookup and other usage metering needed to operate the Service, enforce plan allowances, secure the Service and prevent abuse.
• Customer Data — content you or your Users submit to or generate in the Service (e.g. cases, valuations, and data relating to vehicles, owners, dealers or counterparties). We process this as processor under the DPA; you are responsible for having a lawful basis to submit it and must not submit special-category data.
• Communications — messages you send us (support, sales) and your marketing preferences.

Why we use it, and our legal bases

• To provide the Service and your account — performance of a contract (Art. 6(1)(b)).
• To bill and collect payment, keep records and meet accounting/tax obligations — contract and legal obligation (Art. 6(1)(b), (c)).
• To secure the Service and prevent abuse (including verifying trial eligibility, deduplicating accounts by CVR/domain, and detecting scripted or fraudulent use) — legitimate interests (Art. 6(1)(f)).
• To compile, enrich and maintain vehicle records — when a VIN or vehicle is looked up through the Service, we retrieve, match and combine vehicle information from our licensed data providers and public sources and may retain the resulting vehicle records to operate and improve the Service, including serving future lookups. We act as controller for this processing; to the extent such records constitute personal data (for example where a vehicle is linkable to a private owner or sole trader), our legal basis is legitimate interests (Art. 6(1)(f)) in providing accurate vehicle intelligence to the automotive trade.
• To support and communicate with you about the Service — contract and legitimate interests.
• To improve and develop the Service, including analytics and training models — legitimate interests, and only using aggregated and anonymised data that no longer identifies you, any individual or any specific vehicle transaction. We do not train models on identifiable Customer Data without your separate, revocable consent.
• To send marketing to business contacts where permitted — legitimate interests or consent; you can opt out at any time.
• To comply with law and establish, exercise or defend legal claims — legal obligation and legitimate interests.

Cookies and similar technologies

We use necessary cookies to run the site. Analytics and similar technologies are used only with your consent, which you give or decline through the cookie banner shown on our website; you can change or withdraw your choices at any time via the banner. Any device or browser signals we use to prevent trial abuse are used for security purposes and no more than necessary.

Data retention

We keep personal data only as long as necessary for the purposes above, then delete, destroy or anonymise it. In particular:

• Trial account data is retained for 30 days after a trial ends without conversion (during which you may request export or upgrade), after which it is deleted.
• Subscription Customer Data is deleted following termination of the agreement; if you request return or export in writing within 30 days of termination, we will provide it before deletion, as further set out in the DPA.
• Billing and accounting records are kept for 5 years from the end of the financial year they concern, as required by the Danish Bookkeeping Act.

Deletion does not extend to aggregated and anonymised data that no longer identifies you, any individual or any specific vehicle transaction, which we may retain and use to operate and improve the Service. Routine backups expire on a rolling basis, and we may retain data longer where required by law or to establish, exercise or defend legal claims.

Sub-processors and international transfers

We use vetted service providers (sub-processors) — for example hosting, database, storage, email delivery, customer support, and analytics/monitoring — under contracts requiring appropriate protection. The current list is available on request at legal@tracksights.com.

Our providers process personal data primarily within the EU/EEA. Where a provider processes personal data outside the EU/EEA, we rely on a European Commission adequacy decision (including, for certified US providers, the EU–US Data Privacy Framework) or the EU Standard Contractual Clauses, with supplementary measures where required.

Your rights

Subject to conditions in the GDPR, you have the right to access, rectify, erase, restrict or object to processing, to data portability, and to withdraw consent where processing is based on consent. Where we process Customer Data as a processor, please direct requests to the relevant customer (the controller). To exercise your rights or ask a question, contact us at legal@tracksights.com. You also have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet) or your local supervisory authority.

Changes to this Policy

We may update this Policy to reflect changes in our practices or the law. We will post the updated version with a new effective date and, for material changes affecting account holders, provide reasonable notice.

Contact

Questions about this Policy or our data practices:

Anders Holm-Jensen (privacy contact)
legal@tracksights.com
TrackSights ApS
Bredgade 45 C
1260 København
Denmark.