2.5.    You may, at any time, prevent the setting of cookies through our website by adjusting the settings on your browser and already set cookies may be deleted at any time via an internet browser or other software programs (see your browser Help for how to do this, some links below).

2.6.    You can manage cookies in all popular internet browsers, such as Firefox, Chrome, Internet Explorer, Microsoft Edge, Safari, etc.

2.7.    Be aware that if you disable cookies off, some features will be disabled that make your Website experience more efficient and some of our services will not function properly, although, you can still place orders. However, it is recommended that you do not disable cookies. 

Direct Marketing and User Communication

 

2.8.    We may process the following Personal Data for direct marketing purposes: name, surname, email address, other information that a user may provide, date of consent.

2.9.    We prioritize clear and effective communication with our users, ensuring they receive valuable updates and insights without overwhelming them. Our approach is designed to provide pertinent information about their vehicles and the latest features of our products, all while respecting their preferences and privacy:

2.6.1.    Targeted Advertising: Through selective use of Google Ads and Facebook Ads, our goal is to grow out community and keep it informed about significant updates and enhancements. This method allows us to share news about our products and services, including new functionalities that can enrich the user experience, in a non-intrusive manner;

2.6.2.    Insightful Analytics: We apply tools like the Google Firebase, Facebook Pixel, aiming to gather insights that help us understand what information our users find most useful. This helps us refine our messaging to ensure relevance and value, focusing on updates such as vehicle status and new product features that genuinely interest our users;

2.6.3.    Curated Email Communications: Our email communications are thoughtfully crafted to bring the most relevant news directly to our users. This includes concise updates on vehicle status, introductions to new features, and tips on how to get the most out of our products. We strive to keep these emails informative and to the point, respecting our users' time and attention.

2.6.4.    Direct Notifications: For real-time updates that matter, we use web push and mobile push notifications. These alerts are reserved for important announcements, ensuring that our users are the first to know about critical updates or new features that could impact their experience with their vehicles.

2.10.    Our communication strategy is centred around keeping our users informed in a respectful and considerate manner. We understand the importance of balancing informative updates with the need for privacy and discretion. Users have full control over their communication preferences, allowing them to opt in or out of different types of notifications as they see fit. This approach reflects our commitment to building a trust-based relationship with our community, ensuring they stay informed about their vehicles and our products in a way that feels comfortable and secure for them.

Surveys, Research and/or Studies

 

2.11.    We may process the following Personal Data for surveys, research and/or studies purposes: name, surname, email address, other information that a user may provide, date of consent. 

2.12.    If you register on the Application or the Website, we may contact you via the Application (if installed) to offer you to participate in our surveys, research and/or studies in order to improve our services and/or products. This is done in order to ensure that only users who give their consent would participate in our surveys, research and/or studies.

Recruitment

 

 

2.13.    We collect, process, and store your personal information which is necessary for the recruitment purposes. This could, but not necessarily, include your personal data such as: (i) name and surname; (ii) email address; (iii) telephone number; (iv) qualifications; (v) current workplace; (vi) LinkedIn URL; (vii) GitHub URL; (viii) Information relating to your remployment history; (ix) skills and experience; (x) eduation; (xi) language proficiency; (xii) certifications; (xiii) recommendations; (xiv) additional trainings; (xv) CV; (xvi) cover letter; (xvii) other information submitted by you.

2.14.    Most of the time we collect the information received directly from you (via email, our website’s or workable career’s pages, online job sites and etc.). However, there are some cases when we obtain your personal data from the other sources: (i) our employees (referrals); (ii) Career-related social media accounts such as Linkedin or other business-related social media sources; (iii) job portals such as LinkedIn.com
 
3.    Purpose of Processing

 

3.1.    We use Personal Data for various purposes stated in this Privacy Policy:

3.1.1.    To provide and maintain the Services;
3.1.2.    To notify you about changes to our Services;
3.1.3.    To allow you to participate in interactive features of our Services when you choose to do so;
3.1.4.    To provide customer care and support;
3.1.5.    To provide analysis or valuable information so that we can improve the Services;
3.1.6.    To monitor the usage of the Services;
3.1.7.    To detect, prevent and address technical issues;
3.1.8.    Send information, respond to inquiries, and/or other requests or questions;
3.1.9.    Process orders and to send information and updates pertaining to orders;
3.1.10.    We may also send you additional information related to your product and/or service.

4.    Lawfulness of Processing

 

4.1.    Processing of Personal Data is necessary for the performance of a contract to which the data subject is party (Article 6(1)(b) of the GDPR), i.e. to purchase our products, install and use the Application. The provision of such Personal Data is a contractual requirement, and the data subject is obliged to provide the Personal Data, otherwise the data subject will not be able to purchase our products and/or use the Application.

4.2.    Processing of Personal Data is also necessary when the data subject has given consent to the processing of his or her Personal Data for direct marketing purposes (Article 6(1)(a) of the GDPR). The data subject is not obliged to provide such Personal Data. However, if such Personal Data is provided, the data subject has the right to withdraw consent at any time.

4.3.    Processing of Personal Data is necessary to ensure the fulfilment of the legal obligations applicable to us in accordance with the applicable legislation (Article 6(1)(c) of the GDPR). This may include the processing of the Personal Data for the purposes of: handling claims submitted by the users (their representatives); fulfilling requirements of legal acts regulating the provision of Services; carrying our internal investigations and operational risk events; fulfilling other legal requirements in accordance with applicable legislation in areas such as accounting, taxation, Personal Data protection, governance and management of our company.

4.4.    Processing of Personal Data is necessary due to our legitimate interests, which are balanced against the users (as a data subject’s) interests and rights (Article 6(1)(f) of the GDPR). We may process your Personal Data on the basis of our legitimate interest, for example, for the purposes of: preventing and investigating unauthorised use of the Services or disruption of the Services, including implementing the necessary security measures; preventing fraud; asserting, enforcing, defending or transferring of legal claims and storing of information for this purpose; archiving our files; Service‘s incident management for the purpose of maintaining, examining, developing and improving our activities, products; monitoring our performance indicators and financial planning.

5.    Data Transfers

 

 

5.1.    We may share information as discussed below, but we will not sell it to advertisers or other third parties:
Post and Courier services

5.1.1.    In order to be able to send you our products, which you purchased in our Website, we must provide the delivery companies your personal information, such as your name and surname, shipping address and telephone number. We provide these shipping methods:

•    Standard shipping. Package will be sent via Lithuanian post (Lietuvos paštas, AB, company code: 121215587, address: Juozo Balčikonio g. 3, LT-08247 Vilnius, Lithuania).
•    Express shipping. Package will be sent via DHL express (DHL Lietuva, UAB, company code: 111529785, address: Rodūnios kel. 36, LT-02187 Vilnius, Lithuania).
•    United Parcel Service (UPS). Package will be sent via UPS (Skubios siuntos, UAB, company code: 134678891, address: Inovacijų g. 3, Biruliškių k., Kaunas district, Lithuania, which is Authorised Service Contractor for UPS).
•    Deutsche Post. Package will be sent via DHL (DHL Lietuva, UAB, company code: 111529785, address: Rodūnios kel. 36, LT-02187 Vilnius, Lithuania).
•    Siųsk Pigiau. Package will be sent in Lithuania via Siųsk Pigiau partners: DHL, TNT, Venipak, LP express, GLS, Omniva, DPD, FedEx, SST, Itella etc. (Technologijų era, UAB, company code: 300151980, address: Veiverių g. 142, LT-46353 Kaunas, Lithuania).
•    DPD Lietuva. Package will be sent via „DPD “(DPD Lietuva, UAB, company code: 111639299, address: Terminalo g. 7, LT-54469, Biruliškių k., Kaunas district, Lithuania).
•    Amazon fulfillment. Package will be sent via „Amazon fulfilment center“ (Amazon Corporate, address: 410 Terry Ave. North, Seattle, WA, 98109-5210).

Others working for us

5.1.2.    We use certain trusted third parties (for example, providers of customer support, IT service providers, payment service providers, cloud computing, hosting services) to help us provide, improve, protect, and promote our Services. These third parties will access your information only to perform tasks on our behalf in compliance with this Privacy Policy, and we will remain responsible for their handling of your information per our instructions.

Law and Order 

5.1.3.    We may disclose your information to third parties if we determine that such disclosure is necessary to (a) comply with the law; (b) protect any person from death or serious bodily injury; (c) prevent fraud or abuse of us or our users; or (d) protect our property rights. This includes but are not limited to supervisory authorities, tax administration, law enforcement authorities, bailiffs, notaries, courts, non-judicial dispute resolution institutions.

Manufacturer of supported vehicles

5.1.4.    After each connection to the control unit, protected by SFD (Schutz Fahrzeug Diagnose / Vehicle Diagnostic Protection), some of your data (the pseudonymised user ID (name), pseudonymised workshop ID (if applicable), country and or the vehicle VIN number) will be transferred to the Volkswagen Group, which will analyse your actions.If the Volkswagen Group detects violations of security requirements or other non-compliances and submits a request to us, we will also transfer to the Volkswagen Group and/ or investigative authorities your other Personal Data – full name, address, email, telephone number and workshop ID and address (if applicable).

5.2.    If we ourselves or using service providers transfer your Personal Data to the non-EU/EEA countries, we comply with the relevant requirements of the GDPR (Article 44 et seq.) and oblige our service providers to comply with these regulations too. Therefore, we will transfer your data to the non-EU/EEA countries only by ensuring the level or security provided by the GDPR. This level of security is primarily ensured by the EU Commission’s adequacy decision. If with regard to a particular country there is no adequacy decision of the EU Commission, we will ensure that your rights and freedoms are properly protected by concluding relevant data transfer agreements containing the EU Standard Contractual Clauses or other authorised data protection clauses. In other cases, we may transfer data based on your express consent. You can withdraw your consent at any time by contacting us. 

5.3.    Personal Data can be transferred to non-EU/EEA countries if, for example, it:

5.3.1.    is necessary for the performance of a contract to which you are a party or for the fulfilment of your requests;

5.3.2.    takes place as part of the performance of the contract when service providers are involved;

5.3.3.    is necessary to safeguard our legitimate interests;

5.3.4.    is required by law or you have given your consent.

5.4.    If we transfer Personal Data to the recipient, which is unable to ensure an adequate level of data protection, based on your consent alone, we point out that the following risks arise: it is possible that the adequate protection of Personal Data is not sufficiently regulated, there is no data protection supervisory authority; there is no control over the further processing of Personal Data (including transfer to third parties); the implementation of your data protection rights can be impeded or disregarded.

5.5.    Furthermore, your information, including Personal Data, may be transferred to and stored on servers or computers located outside your state, province, country, or other governmental jurisdiction, where data protection laws may differ from those in your region. By consenting to this Privacy Policy and submitting your Personal Data, you agree to this transfer. 

6.    Retention of Personal Data

 

6.1.    When you purchase our products, we will keep your Personal Data for no longer than 10 years (unless we need to keep the data longer under our agreement with the Volkswagen Group - as described below) after which time it will be destroyed.

6.2.    If you delete your accounts from our Services, we will also delete this information. But please note: (1) there might be some latency in deleting this information from our servers and back-up storage; and (2) we may retain this information if necessary to comply with our legal obligations, resolve disputes, or enforce our agreements.

6.3.    Please note that a different procedure than the one above applies to your Personal Data, which we must provide to the Volkswagen Group.

6.4.    We will store your Personal Data, e.g. first name, surname and contact details (postal code, city, street, phone number and email), as well as the VIN number and the pseudonymised ID code assigned to you, for 30 years from the last use of the SFD service (even after your account is removed from our system). The above storage and transfer of your data is required for the traceability of changes made to the SFD-protected control unit (the changes you can make using the Application and OBDevelen hardware).

6.5.    The Volkswagen Group, after receiving your Personal Data, can analyse and store it in its system for 30 years from the last access to the SFD service. The Volkswagen Group will process your Personal Data, if necessary, under the ground of a legitimate interest (Article 6(1)(f) of the GDPR and in compliance with the legal obligations imposed on the Volkswagen Group by Regulation (EU) 2018/858 of the European Parliament and of the Council of 30 May 2018 on the approval and market surveillance of motor vehicles and their trailers, and of systems, components and separate technical units intended for such vehicles).

6.6.    As well as in other cases, when your Personal Data is processed for the purpose of providing it to the Volkswagen Group, you can exercise your rights as a data subject - to object to the processing of Personal Data, to request the deletion of Personal Data, correction of inaccurate data, etc.). In order to exercise the above rights, you must first contact us, and we will forward your request to the Volkswagen Group. Detailed information on how the Volkswagen Group can process your Personal Data can be found here. 

6.7.    We will inform you each time when there is a change in the Volkswagen Group's data processing rules (as far as the processing of your Personal Data is concerned).

6.8.    By deleting your account, you lose your vehicle’s history, PRO/Ultimate subscription, and all credits. Used PRO/Ultimate subscription that you have will not work anymore with another account.

6.9.    If you consent to receive marketing emails from us, we will retain your Personal Data for this purpose for up to 2 years from the date of your receipt. After this period, your data will be securely deleted unless you renew your consent. If you consent to participate in surveys, research and/or studies organized by us, we will retain your Personal Data for this purpose for up to 2 years from the date of your receipt. After this period, your data will be securely deleted unless you renew your consent.

6.10.    When you apply for a particular job position, we keep your personal data for no longer than it is required for recruitment purposes. Basically, we will store your personal data until the end of the recruitment process for a particular position. However, in all cases, we will not store the personal data you submitted while applying for a particular job position for more than 1 year unless you give us consent to contact you regarding future job opportunities as described below.

6.11.    When you give us permission to contact you about future job opportunities, we will store your personal data for 3 (three) years from the date you last submitted or updated your data. Or we have resumed contact with you and received your permission to continue the process of keeping your data. You can withdraw your permission at any time.

7.    Children’s Privacy

 

7.1.    Our Service does not address anyone under the age of 14 ("Children"). We do not knowingly collect personally identifiable information from anyone under the age of 14. If you are a parent or guardian and you are aware that your Children has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers.

8.    User Rights

 

8.1.    We respect your legal rights to Personal Data. Your rights under law and measures we take to implement them are:

8.1.1.    The right to be informed: Before using Website and Application we provide you with information on processing of your Personal Data and guarantee the access to our Privacy Policy. We strive to be transparent about how we use your data;

8.1.2.    The right to access: You have the right to access your information. You can receive the information about purposes of processing; Personal Data we keep; providers and receivers of your Personal Data; retention period and your rights if requested;

8.1.3.    The right to rectification: If the Personal Data we hold about you is inaccurate or not complete, you have the right to ask us to rectify it. If that Personal Data has been passed to a third party with your consent or for legal reasons, then we must also ask them to rectify the data;

8.1.4.    The right to erasure: If we do not have a legal basis to continue processing your Personal Data, you can ask to exercise your “right to be forgotten”;

8.1.5.    The right to restrict processing: You have the right to ask for restriction on how we process your Personal Data This means we are permitted to store the Personal Data but not further process it;

8.1.6.    The right to data portability: We must consider your right to reuse gathered Personal Data for your own purposes across services in a safe and secure way without this affecting the usability of your data;

8.1.7.    The right to object: If the processing of Personal Data is based on your consent, legal obligation or legitimate interest you have the right to object such processing;

8.1.8.    The right to withdraw consent: If the processing of Personal Data is based on your consent, you can reject your consent at any time;

8.1.9.    The right to complain to a Supervisory Authority: Protection Inspectorate of the Republic of Lithuania (Valstybinė duomenų apsaugos inspekcija (https://www.ada.lt/), L. Sapiegos str. 17, Vilnius, [email protected])

8.2.    We will do our best to help you exercise your rights, All the requests regarding your rights on Personal Data can be sent to us by email [email protected] or by mail Karaliaus Mindaugo str. 38, Kaunas, Lithuania, along with document proving the identity of data subject. 

9.    Language, Translations and Changes to Privacy policy

 

 

9.1.    This Policy may be translated into other languages for convenience. However, translated versions may not always be complete or up to date.

9.2.    In the event of any conflict or inconsistency between the English version of these Terms and a translated version, the English version shall prevail and govern your use of the Services.

9.3.    OBDeleven may amend this Policy at any time. Updated Policy will become effective upon publication on the Webite or within the Applications. In cases where a change materially affects your rights or obligations, we will make reasonable efforts to provide notice. Your continued use of the Services after publication of updated Policy constitutes acceptance of such changes.

10.    Data Processing Agreement (US Customers)

 

California

10.1.    To the extent that we process on behalf of customer any personal information in scope of the California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act of 2020, and its implementing regulations (collectively, the CPRA) (such personal information being California Personal Information), the provisions of this clause apply.

10.2.    We will not sell or share California Personal Information that it collects (as that term is defined in the CPRA) under the Agreement.

10.3.    The specific business purpose (as that term is defined in the CPRA) for which we process California Personal Information is to provide, manage and secure the Services, and customer discloses the California Personal Information to us for the limited and specified Services purposes.

10.4.    We will not retain, use, or disclose the California Personal Information that it collects for any purpose other than for the Services purposes, unless permitted by the CPRA.

10.5.    We will not retain, use, or disclose the California Personal Information that it collects under the Agreement for any commercial purpose (as that term is defined in the CPRA) other than the Services purposes, unless permitted by the CPRA.

10.6.    We will not retain, use, or disclose the California Personal Information that it collects outside the direct business relationship between us and customer, unless permitted by the CPRA.

10.7.    We will comply with all applicable sections of the CPRA, including - with respect to the California Personal Information that we collect when providing the Services - providing the same level of privacy protection as required of businesses by the CPRA.

10.8.    We grant customer the right to take reasonable and appropriate steps to ensure that we use the California Personal Information that it collects under the Agreement in a manner consistent with customer’s obligations under the CPRA.

10.9.    We will notify customer if it determines that it can no longer meet its obligations under the CPRA.

10.10.    We grant customer the right, upon notice, to take reasonable and appropriate steps to stop and remediate our unauthorized use of California Personal Information.

10.11.    We will enable customer to comply with consumer requests made under the CPRA. customer will inform us of any consumer request made under the CPRA with which customer must comply and provide the necessary information for you to comply with the request.

10.12.    The customer agrees that we may engage other service providers (as that term is defined in the CPRA) to assist in providing the Services to customer (Sub-Processors). A list of our current Sub-Processors can be found in our Privacy Policy.

Virginia

10.13.    To the extent that we process on behalf of customer any personal data in scope of the Virginia Consumer Data Protection Act (VCDPA) (such personal data being Virginia Personal Data), the provisions of this clause apply.

10.14.    We will ensure that each person processing Virginia Personal Data is subject to a duty of confidentiality with respect to the Virginia Personal Data.

10.15.    At customer’s discretion, we will delete or return all Virginia Personal Data to customer as requested at the end of the provision of the Services, unless retention of the Virginia Personal Data is required by law. If customer reasonably requests it, we will make available to customer all information in its possession necessary to demonstrate its compliance with the obligations under the VCDPA.

10.16.    We will allow, and cooperate with, reasonable assessments by customer or customer’s designated assessor. Alternatively, we may arrange for a qualified and independent assessor to conduct an assessment of our policies and technical and organizational measures in support of the obligations under the VCDPA using an appropriate and accepted control standard or framework and assessment procedure for such assessments. we will provide a report of such assessment to customer upon request.

10.17.    We will ensure that any subcontractors engaged in the processing of Virginia Personal Data are engaged under a written contract in accordance with the VCDPA that requires the subcontractor to meet our obligations with respect to the Virginia Personal Data.