Privacy Policy & GDPR Data Protection

Last updated: May 2026

1. Data Controller

WEREMAP, based in the Netherlands, is the data controller for personal data collected through weremap.com. For data-related inquiries, contact us at info@weremap.com.

2. Data We Collect

We collect the following categories of personal data:

  • Account data: name, email address, company name, VAT number, country
  • Order data: vehicle information, ECU files, tuning preferences
  • Payment data: transaction records, credit balances (payment details are processed by our payment providers)
  • Communication data: chat messages, support tickets, emails
  • Technical data: IP address, browser type, session data

3. Purpose & Legal Basis

We process your data for the following purposes:

  • Contract performance: processing orders, delivering files, managing your account
  • Legitimate interest: platform security, fraud prevention, service improvement
  • Legal obligation: invoicing, tax records, regulatory compliance
  • Consent: marketing communications (where applicable)

4. Data Sharing

We share personal data only with:

  • Payment providers: Configured payment providers for payment processing
  • Hosting provider: Hetzner (Germany/Finland) for server infrastructure
  • Cloudflare: for CDN, DNS, and DDoS protection
  • Email provider: for transactional emails

We do not sell personal data to third parties.

5. Data Retention

Account data is retained for the duration of your account plus 12 months after deletion. Order data and invoices are retained for 7 years as required by Dutch tax law. Chat and support data is retained for 24 months. Technical logs are retained for 90 days.

6. Your Rights (GDPR)

Under the GDPR, you have the right to:

  • Access: request a copy of your personal data
  • Rectification: correct inaccurate data
  • Erasure: request deletion of your data (subject to legal retention requirements)
  • Portability: receive your data in a machine-readable format
  • Objection: object to processing based on legitimate interest
  • Restriction: restrict processing while a dispute is resolved

To exercise any of these rights, email us at info@weremap.com. We will respond within 30 days.

7. Cookies

We use essential cookies for authentication and session management. We use Cloudflare Zaraz for anonymous usage analytics. No advertising cookies are used. You can manage cookies through your browser settings.

8. Security

We implement appropriate technical and organizational measures to protect your data, including encrypted connections (HTTPS/TLS), secure password hashing, access controls, firewall protection, and regular security audits.

9. Supervisory Authority

If you believe your data is being processed unlawfully, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.