This policy explains what personal data vinzvit.com processes when you use it, why, and what your rights are under the EU General Data Protection Regulation (GDPR). Last updated: 23 October 2026.
Who is responsible
The service is operated by the VINzvit volunteer project. For any question about your data, or to exercise your rights, write to support@vinzvit.com.
What we process when you use the site
The VIN you enter. A VIN identifies a vehicle, not a person, but we treat it carefully: the report is reachable only through a private link and is deleted after 90 days.
Your IP address, to protect the service from abuse and enforce the daily limit of free checks. It is kept in memory and in a short-lived limit file for 24 hours. With each check we store only a keyed hash of the IP (not the address itself), deleted together with the report.
Web server logs (IP address, time, requested page, browser type), kept for 14 days for security and troubleshooting, then deleted automatically.
Anonymous usage statistics: page views and form steps are counted with a hash of the IP that changes every day, so a visitor cannot be followed from one day to the next. No cookies are used for this.
Legal basis
Providing the report you requested (Art. 6(1)(b) GDPR) and our legitimate interest in keeping a free service secure and working (Art. 6(1)(f) GDPR).
Who else processes data
Hosting: Hetzner Online GmbH, Germany — servers and backups are in the EU.
Report summaries: the vehicle facts of a report (never your IP or other details about you) are sent to an AI model through OpenRouter, Inc. (USA) to write a short plain-language summary.
We do not sell or share personal data with anyone else, and we do not use advertising or analytics services.
Vehicle data and people
Vehicle records can sometimes relate to a person — for example, a car's inspection history to its current owner. We show only vehicle facts from open and public sources, never names or contact details. If you believe a record about your vehicle affects you, you can object at support@vinzvit.com; we review every request and remove data when your interests outweigh the public interest in vehicle safety and fraud prevention.
How long we keep data
Reports and their private links: 90 days. Server logs: 14 days. IP-based limits: 24 hours. Messages you send us: as long as needed to answer, then deleted.
Your rights
You can ask for access to, correction or deletion of your data, restriction of processing, data portability, and you can object to processing based on legitimate interest. Write to support@vinzvit.com; we answer within one month.
You can also complain to a data protection authority — for example Datatilsynet (Denmark), the Office for Personal Data Protection — ÚOOÚ (Czech Republic) or the authority in your own country.
Changes
If we change how we process data, we update this page and its date before the change takes effect.