Privacy Policy (GDPR)

Last updated: June 2026.

Your privacy matters. This policy explains what personal data we process when you use CARSGEST, for what purposes and what your rights are, in accordance with Regulation (EU) 2016/679 (GDPR).

1. Data controller

The controller of your data is CARSGEST. The company’s full details (name, VAT number and contacts) are available on the Contact page.

2. Data we collect

  • Account and billing: name, company, VAT number, email, phone, billing address.
  • Subscription and licence: plan, associated domain, payment history and invoices.
  • Support: messages and requests you send us.
  • Technical data: IP address, licence-validation records and security logs.

3. Purposes and legal bases

  • Providing and managing the Service and your subscription — performance of the contract.
  • Billing and compliance with tax and accounting obligations — legal obligation.
  • Support and communication — contract / legitimate interest.
  • Security, fraud prevention and Service improvement — legitimate interest.
  • Marketing communications, where applicable — consent, withdrawable at any time.

4. Sharing with third parties (sub-processors)

We may use providers that process data on our behalf (e.g. hosting/servers, email delivery, payment processing), bound by contract and by confidentiality and security obligations. We do not sell your data.

5. International transfers

Whenever data is processed outside the European Economic Area, we ensure appropriate safeguards (e.g. the European Commission’s standard contractual clauses).

6. Retention periods

We keep data only for as long as necessary for the purposes above and for legal (notably tax) periods. After that, it is deleted or anonymised.

7. Your rights

You have the right of access, rectification, erasure, restriction, portability and objection, as well as to withdraw consent. To exercise these rights, contact us via the Contact page. You may also lodge a complaint with the competent supervisory authority (in Portugal, the CNPD).

8. Security

We apply appropriate technical and organisational measures, including encryption of sensitive secrets, access control, secure connections (HTTPS) and audit logs.

9. Cookies

Our website uses cookies that are essential to its operation. See the details in the Cookie Policy.

10. Children’s data

The Service is intended for companies and professionals; we do not knowingly collect data from minors.

11. Changes

We may update this policy. The current version is always available on this page, with the date of the last update.

12. Contact

For privacy matters, contact us via the Contact page.