Privacy policy

Controller

The controller is the person identified in the legal notice. Exercise your rights using the contact email shown here or by writing to the address in the legal notice.

Andrii Shapovalov · info@axiomreparts.es · Legal notice

Data and sources

You provide contact details, descriptions, photographs, business profile and VAT number. Google supplies an identifier, verified email and name; we do not store your profile photograph. VIES supplies the validation result and, where applicable, business details. We generate session data, request history and security logs. Required data are identified in forms; without them we cannot provide the service. We do not make decisions with legal effects based solely on automated processing.

Purposes and legal bases

Enquiries and quotations involve steps prior to a contract (GDPR Art. 6(1)(b)); accounts and orders involve performance of a contract (6(1)(b)); invoices and tax obligations involve a legal obligation (6(1)(c)); optional analytics requires consent (6(1)(a)); technical logs serve our legitimate interest in service security and abuse prevention (6(1)(f)). VAT checks support the business relationship and applicable tax obligations. Acceptance of published terms records the user, time and document version as contractual evidence; that record does not include an IP address.

Retention periods

The following periods apply by purpose. Rejected or inactive enquiries are deleted after the stated period from their last activity; completed orders from closure. Inactive accounts are deleted after the stated period. Tax records are kept separately with restricted access for their legal retention period. An erasure request removes the account and files, except where legal retention applies.

Rejected or inactive enquiries (months)

12

Completed orders (months)

12

Invoices (months)

12

Inactive accounts (months)

12

Backups (days)

30

Technical logs (days)

30

VIES cache (days)

1

GA4 data retention (months)

14

Recipients and transfers

Recipients, processing locations and safeguards appear below. Only the data necessary for each service are shared. Request information or a copy of safeguards using the contact email. External links connect to the provider only when you open them; Google is activated when you request sign-in, and analytics only after acceptance. Hosting stores site data; Google processes the requested connection and identity; VIES receives only country and VAT number. Email links open your email application; this website does not send email. Analytics receives only permitted events without personal content.

Rights and complaints

You may request access, correction, erasure, restriction, objection and portability where applicable, and withdraw consent without affecting earlier lawful processing. JSON export and erasure are available in your account. We respond within one month; if complexity requires an extension of up to two further months, we inform you within the first month. We verify identity proportionately. You may complain to the Spanish Data Protection Agency (AEPD), www.aepd.es.

Security and backups

We use access controls, encrypted transport and image metadata removal. Nginx logs are retained for no more than 30 days; IP addresses are not sent to external tracking systems. Backups are encrypted and expire according to the stated cycle. Erased data disappear from backups when that cycle ends; erasures are reapplied before restoring service.

Sign in with Google

The controller identified in the legal notice uses your Google identifier, email and name to authenticate you and manage your account and orders, at your request and for performance of a contract. We do not store your profile photo or Google tokens. Google is an independent controller under its own policy and may process data in the United States; Google states that it uses the EU–US Data Privacy Framework where applicable. You may request access, rectification, erasure, restriction, objection and portability where applicable, and complain to the AEPD. We record the last account activity at most once per day to manage account retention.

Andrii Shapovalov · Inactive accounts (months): 12

VAT verification

We check business customers’ VAT numbers only when they click “Check”. We send the country and number to the European Commission through VIES and national databases; if configured, we also send our VAT number to obtain a consultation identifier. The purpose is invoice preparation: performance of the contract and compliance with applicable tax obligations (GDPR Art. 6(1)(b)/(c)). We retain country, number, status, date, consultation identifier if available and user ID; we do not retain the name or address returned by VIES. You can change or remove the profile number and export your checks; deleting the account deletes the history. Data included in issued invoices is retained for the applicable statutory period in the invoicing system. You can exercise your rights using the contact in this policy and complain to the AEPD.

Check history: 12 months from each check. Cache: 1 days. Invoices: 12 months under the applicable accounting policy.