This Privacy Policy explains how we collect, use, and protect your personal data when you use the Elgarde web and mobile application (the "App"). We are committed to processing your data in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and applicable Portuguese data-protection law.
The controller responsible for processing your personal data is:
We collect only what the App needs to work. Specifically:
| Category | Details | Source |
|---|---|---|
| Account data | Your email address (required to create an account) and, optionally, a display name you choose to enter. | You |
| Inspection content | Vehicle Identification Numbers (VINs) you enter or scan; the answers, notes and ratings you record in an inspection checklist; and photos you attach to an inspection report. | You |
| Approximate location | If — and only if — you grant location permission, we capture a coarsened, approximate location (rounded to roughly 1 km) at the moment a report is created, to note roughly where the inspection took place. We do not track your location in the background and we do not store precise coordinates. | Your device (with consent) |
| Usage & technical data | Basic technical logs needed to run and secure the service — e.g. request timestamps, error logs, device/app version, and IP address as processed by our servers. | Automatically |
We do not intentionally collect special categories of personal data. Please do not include sensitive personal information in free-text notes or photos.
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Creating and managing your account; providing the inspection App and storing your reports. | Performance of a contract — Art. 6(1)(b) |
| Capturing approximate location on a report. | Your consent — Art. 6(1)(a) (device location permission). You can withdraw it at any time in your device settings. |
| Keeping the service secure, preventing abuse, fixing errors, and enforcing usage limits. | Our legitimate interests — Art. 6(1)(f) |
| Complying with legal, accounting and tax obligations. | Legal obligation — Art. 6(1)(c) |
We keep your data on our own self-hosted infrastructure and share it as little as possible:
We do not sell your personal data, and we do not share it with third parties for their own marketing.
Your personal data is processed within the European Union / European Economic Area. We do not transfer your personal data outside the EU/EEA in the ordinary operation of the App. If this ever changes, we will rely on an adequacy decision or appropriate safeguards under GDPR Articles 44–49 and update this policy. Note that if you choose to visit carVertical — or any other third-party partner we may link to — via an outbound link, you leave our service and any processing there is that provider's responsibility, under its own terms and privacy policy.
Under the GDPR you have the right to: access your data; request rectification of inaccurate data; request erasure ("right to be forgotten"); request restriction of processing; data portability (receive your data in a structured, machine-readable format); object to processing based on our legitimate interests; and withdraw consent at any time (for example, by turning off location permission), without affecting processing already carried out.
You can exercise several of these directly in the App — for instance, you can delete an individual report using the in-App Delete function, and you can edit your profile. For any other request, contact us at support@elgarde.com. We will respond within one month (extendable by two further months for complex requests). We may need to verify your identity first.
The App stores a small amount of data on your device to work — for example, your authentication token in secure storage and local drafts of your inspections. For details, see our Cookie & Storage Notice.
We apply appropriate technical and organisational measures to protect your data, including access controls and encryption in transit. No system is perfectly secure, but we work to protect your information and to respond to any incident appropriately.
The App is not intended for children. You must be at least 18 years old to create an account.
If you have a concern, please contact us first. You also have the right to lodge a complaint with the Portuguese supervisory authority:
Comissão Nacional de Proteção de Dados (CNPD)
Av. D. Carlos I, 134, 1.º, 1200-651 Lisboa, Portugal
www.cnpd.pt · geral@cnpd.pt · +351 213 928 400
For consumer complaints, you may also use Portugal's electronic Complaints Book (Livro de Reclamações Eletrónico) at www.livroreclamacoes.pt.
We may update this policy from time to time. We will change the "Last updated" date above and, where changes are significant, take reasonable steps to notify you.