Privacy Policy – HJULFIX
Effective Date: 06 July 2025
Last Updated: 06 July 2025
1. Introduction
Hjulfix ApS (“HJULFIX”, “we”, “our”, or “us”) operates the HJULFIX mobile application (the “App”). We respect your privacy and are committed to protecting your personal data in accordance with the EU General Data Protection Regulation 2016/679 (“GDPR”) and applicable Danish data-protection law.
This Privacy Policy explains:
- what personal data we collect and why,
- how we use and safeguard that data,
- your rights and choices, and
- how to contact us.
2. Data Controller
Hjulfix ApS
CVR-nr.: 40666486
Gladsaxe Møllevej 21, 2860 Søborg, Denmark
Tel.: +45 42 46 27 75
E-mail: kontakt@hjulfix.dk
3. What Data We Collect
| Category | Examples | Legal Basis (GDPR Art. 6) |
|---|---|---|
| Account/Identity Data | Name, e-mail address, phone number | (b) Contract performance; (f) Legitimate interest (app administration) |
| Optional Location Data | GPS coordinates when a dealer submits a vehicle job (only when the user actively confirms) | (a) Consent |
| Media | Photos of vehicle rims uploaded via Camera or Gallery | (b) Contract performance |
| Usage & Device Data | Device model, OS version, crash logs, interaction events (via Google Analytics for Firebase and Crashlytics) | (f) Legitimate interest (service improvement & security) |
We do not collect payment information or in-app advertising identifiers.
4. How We Collect Data
- Provided by you – when you register, submit a vehicle, upload rim photos, or contact support.
- Automatically – analytics SDKs collect pseudonymous usage and crash data.
- Optional – location data is collected only if you grant permission during a job submission.
5. Purposes of Processing
- Provide and operate the App for dealers, customers, admins, and workers.
- Match uploaded jobs to the correct vehicle and track repair status.
- Communicate with you about job updates, support requests, or policy changes.
- Improve reliability & user experience through aggregated analytics and crash diagnostics.
- Ensure security and prevent misuse of the App.
We do not use your data for advertising nor sell it to third parties.
6. Sharing of Personal Data
We share data only with service providers that act as our processors and operate under written data-processing agreements:
| Processor | Purpose | Safeguards |
|---|---|---|
| Google Firebase (Analytics & Crashlytics) | Usage analytics, crash reporting | Standard Contractual Clauses; data minimisation |
| Google Cloud Platform | Encrypted data storage, backup | EU data-centres where possible; SCCs for any extra-EEA transfers |
No other third-party disclosures are made unless required by law or court order.
7. Data Retention
- Active account – we keep your data as long as your account remains open.
- Account deletion – when you delete your account, all associated personal data and media are erased from production systems within 30 days and from backups within 90 days.
- Jobs & media – if deletion is requested by the original uploader, the same timelines apply.
8. Your Rights (GDPR Arts. 12–23)
Within the EEA you may:
- Access the personal data we hold about you.
- Rectify inaccurate or incomplete data.
- Erase (“right to be forgotten”) personal data.
- Restrict our processing of your data.
- Object to processing based on legitimate interest.
- Data portability – receive your data in a structured, machine-readable format.
- Withdraw consent at any time (affects future processing only).
- Lodge a complaint with Datatilsynet (the Danish Data Protection Authority).
To exercise these rights, contact us at kontakt@hjulfix.dk.
9. Security Measures
- All traffic is encrypted via TLS 1.2+.
- Media and personal data are stored encrypted at rest.
- Role-based access controls restrict staff access.
- Regular penetration tests and vulnerability scans are performed.
While we follow industry best practices, no method of transmission or storage is 100% secure.
10. International Transfers
Some Firebase services may process data outside the EEA. In such cases Google relies on EU Standard Contractual Clauses and, where applicable, supplementary measures to ensure your data receives essentially equivalent protection.
11. Children’s Privacy
The App is not intended for children under 16 years of age. We do not knowingly process personal data of children under 16 without parental consent. If you believe we have collected such data, please contact us so we can delete it promptly.
12. Changes to This Policy
We may update this Privacy Policy to reflect changes in legal requirements or our practices. Significant changes will be announced in-app or by e-mail. The “Last updated” date at the top will be revised accordingly.
13. Contact
For any questions about this Privacy Policy or our data practices, please contact:
Data Protection Officer
HJULFIX ApS
Gladsaxe Møllevej 21, 2860 Søborg, Denmark
Tel.: +45 42 46 27 75
E-mail: kontakt@hjulfix.dk
Thank you for trusting HJULFIX with your information.
Comments
Post a Comment