Privacy policy

The controller is icheck management services sl, Tax ID B16538316, registered at Calle del Ter 27, first floor, left, 07009 Palma de Mallorca, Spain. The contact and privacy channel is memorauto@memorauto.com. For certain professional services, MEMORAUTO may process information on behalf of a workshop or company; the relevant relationship defines those respective roles.

• Identity, contact and account data: name, email, telephone number, language, protected credentials, role, organisation membership and preferences.
• Professional and commercial data: workshop or company, Tax ID where applicable, address, activity, members, applications, contacts, contracts, plans and support.
• Vehicle and operational data: registration number, VIN when supplied, make, model, mileage, status, authorisations, linked workshops and custody changes.
• Technical history: maintenance, repairs, operations, parts, diagnoses, quotes, orders, appointments, inspections, records, photographs, documents and notes.
• Billing and cost data: tax details, amounts, invoices, payments, receipts and information required for accounting or tax integrations.
• Communications and experience: authorised emails and telephone numbers, invitations, notifications, operational messages, incidents, surveys and responses.
• Technical and security data: IP, browser, device, date and time, session, access events, audit trails and logs used to prevent abuse and protect the service.
• Aggregated public metrics: page, date, general source, campaign, device and conversions. This analytics process does not retain IP addresses or individual histories; a non-reversible daily mark prevents duplicates and is deleted after 35 days.

Data may come from the data subject, their workshop or company, other authorised users involved in managing a vehicle, integrations enabled by the organisation and technical activity generated while using the service. Anyone adding third-party data must have a lawful basis and provide the required information to those people.

• Handle requests for information, demos, registration, validation and activation.
• Create and manage accounts, organisations, roles, permissions and authorisations.
• Provide the digital vehicle history and functions for drivers, workshops and fleets.
• Manage maintenance, repairs, appointments, quotes, documents, communications, billing and support.
• Send operational or commercial messages requested or permitted by law, with a right to object where applicable.
• Provide assisted reading, classification or summarisation functions when enabled.
• Measure public page performance and conversions in aggregate.
• Maintain security, traceability, backups, continuity, fraud prevention and the defence of legal claims.
• Comply with legal, tax, accounting, administrative or judicial obligations.

Depending on the processing, the legal basis may be performance of a contract or the Terms of use, requested pre-contractual measures, a legal obligation, consent, or legitimate interests in operating and protecting the platform, handling requests, preventing fraud and improving the service. When an organisation provides data to manage its vehicles, customers or staff, that organisation may also rely on its own legal basis.

Data is shared only where necessary with authorised users and organisations, public authorities or competent bodies, and providers of hosting, email, SMS, support, security, backups, payments, billing, artificial intelligence or requested integrations. MEMORAUTO does not sell personal data. If a provider processes data outside the European Economic Area, an adequacy decision, standard contractual clauses or another valid safeguard will be used where required. Further information may be requested at memorauto@memorauto.com.

Some optional functions may send specific content to the configured provider, such as an invoice, its text and minimal vehicle data, to propose an extraction or summary. The output is assisted and must be reviewed before it is adopted. MEMORAUTO does not make decisions with legal or similarly significant effects based solely on these outputs.

When sealing is enabled, the blockchain network receives a cryptographic fingerprint and technical transaction data, not the document or full history. Its purpose is to allow integrity checks; sealing does not make inaccurate information originally supplied true.

Data is kept while the relevant account, authorisation, service or relationship remains active and afterwards for as long as needed to meet obligations and address potential liabilities. Data required for tax, accounting, security, integrity or legal defence may be blocked or restricted for statutory periods. Commercial enquiries with no subsequent relationship are deleted or anonymised when no longer needed. Backups are overwritten according to their retention cycles.

You may request access, rectification, erasure, objection, restriction, portability and withdrawal of consent, where applicable, by writing to memorauto@memorauto.com and stating the right exercised. Reasonable information may be requested to verify identity. Withdrawing consent does not affect prior lawful processing.

MEMORAUTO applies technical and organisational measures designed to restrict access, separate organisations, log relevant activity, encrypt communications, maintain backups and reduce risks of loss, alteration or unauthorised access. No connected system can guarantee zero risk.

You may contact MEMORAUTO first. You also have the right to complain to the Spanish Data Protection Agency, https://www.aepd.es, or another competent supervisory authority.

This policy may be updated to reflect legal, technical or functional changes. The date of the current version appears at the end of the document, and material changes will be communicated where required.