Privacy Policy & Cookie Notice
Last updated: [DATE: fill before publishing]
1. Data controller
CivilAuto is operated by [LEGAL ENTITY NAME], registered at [REGISTERED ADDRESS], company number [NUMBER]. For privacy enquiries, contact privacy@civilauto.eu.
2. What data we collect and why
2a. Analytics (Google Analytics 4)
When you consent to analytics cookies, we use Google Analytics 4 to understand how visitors navigate CivilAuto: pages visited, time on site, referral source, and device type. No personally identifiable information is shared with Google Analytics beyond an anonymised client ID. Data is retained for 14 months.
Legal basis: consent (GDPR Art. 6(1)(a)).
2b. Advertising (Google AdSense)
When you choose "Accept all", we load Google AdSense, which may set advertising cookies to show you relevant ads based on your browsing activity. You can withdraw consent at any time using the cookie settings link in the footer.
Legal basis: consent (GDPR Art. 6(1)(a)). Google's privacy policy: policies.google.com/privacy.
2c. Email notifications (programme alerts)
If you sign up for programme alerts, we collect your email address to send you notifications when subsidy programme status changes for your chosen countries. We do not share your email with third parties. You can unsubscribe at any time via the link in any notification email.
Legal basis: consent (GDPR Art. 6(1)(a)).
2d. Technical data (server logs)
Our hosting provider retains standard server logs (IP address, request path, timestamp) for up to 30 days for security and operational purposes.
Legal basis: legitimate interests (GDPR Art. 6(1)(f)).
3. Cookies
| Cookie | Purpose | Retention |
|---|---|---|
| civilauto_consent_v2 | Stores your cookie consent decision | 1 year |
| _ga, _ga_* | Google Analytics: anonymised usage statistics (analytics consent required) | 14 months |
| IDE, DSID, DoubleClick | Google Advertising: personalised ads (advertising consent required) | Up to 2 years |
4. Your rights (GDPR)
Under EU data protection law you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request erasure of your data ("right to be forgotten")
- Restrict processing in certain circumstances
- Data portability for data you have provided by consent
- Withdraw consent at any time (without affecting prior processing)
- Lodge a complaint with your national supervisory authority
To exercise any of these rights, email privacy@civilauto.eu. We respond within 30 days.
5. Data transfers
Google Analytics and Google AdSense may transfer data outside the EEA. Google relies on Standard Contractual Clauses approved by the European Commission. See Google's GDPR commitments for details.
6. Changes to this policy
We may update this policy. Material changes will be announced on the site. The "last updated" date above reflects the most recent revision.