Privacy policy

Responsible person

Patrick Lakatos, Asphalt Motorsport, Collmanngasse 5, 1100 Vienna
E-mail: asphalt.motorsport.wien@gmail.com
Phone: +43 660 5555780

Technical access data

When you access a hosted website, the hosting provider may process technically necessary server log data, such as IP address, time, file accessed, browser and operating system. This processing serves the secure operation of the website.

File-service portal: account, sign-in and synchronisation

When you register or use a file-service account, we process your username, email address, display name, a technically secured password verifier, verification and account status, registration and sign-in timestamps, and your current credit balance. Time-limited confirmation or reset identifiers may also be processed for registration, email verification, sign-in and password reset. Passwords are not stored in plain text. The legal basis is Article 6(1)(b) GDPR for providing the account and file service; security and abuse-prevention measures are additionally based on Article 6(1)(f) GDPR.

The online portal and ECU Workstation access the same file-service data. This keeps the account, jobs, files, project chat, credits, payment status and notifications synchronised across both access methods. The data is available to you in your signed-in account and to authorised staff in the job overview; synchronisation does not publish it to unrelated third parties.

File-service jobs, vehicle data, files and project chat

For a file-service job, we process the vehicle, ECU or TCU, hardware, software, flash-tool and read-method data you enter, requested services and additional options, technical notes, job status and timestamps. This also includes original, result and chat files that you deliberately upload, together with their filename, size, type, technical checksum and assignment to the corresponding job.

In project chat, we process messages, attachments, sent and read timestamps, and the associated job and notification status. This processing is required to clarify questions, handle the job professionally, provide results and keep the processing status traceable. The legal basis is Article 6(1)(b) GDPR; secure assignment, logging and abuse prevention are additionally based on Article 6(1)(f) GDPR.

Credits and payment status

When credits are purchased or used, we process the credit package, amount and currency, selected payment method, payment and crediting status, timestamps, and transaction or reference identifiers supplied by the payment provider. These details are required to process and clearly assign the payment, credit the account and prevent duplicate bookings. The legal basis is Article 6(1)(b) GDPR; payment and accounting records required by law are retained under Article 6(1)(c) GDPR.

Card or PayPal payments are processed by the payment provider shown during checkout, in particular Stripe or PayPal. Asphalt Motorsport does not store full card details or credentials for your PayPal account. The privacy information of the selected payment provider also applies to payment processing.

Contact and service request

If you contact us by phone, email, WhatsApp or through the service-request form, we process the information you provide in order to handle your request, assign it correctly from a technical perspective and arrange an appointment. The service-request form requires your name, the requested service, a message and at least one contact method. Additional vehicle information is voluntary. The legal basis is Article 6(1)(b) GDPR for pre-contractual measures taken at your request and, where applicable, Article 6(1)(f) GDPR for secure and traceable processing.

Voluntary file uploads

You may voluntarily submit a registration document or other vehicle documents as a PDF or image. These documents are not mandatory and are used exclusively to identify the vehicle and process the specific request. The website does not store the attachment permanently as a public file; it is sent to Asphalt Motorsport by email together with the request. Please upload only the documents that are required and redact any information that is not needed for the request.

Non-binding brokerage request for Microtronik products

If you submit a tool request list, we process the selected products, variants and quantities together with the customer type, name, company details, email address, mobile number, street, postal code, city, state or province, country, any optional address supplement and your voluntary message. Asphalt Motorsport needs this information to review and clearly assign your selection and to contact you personally about the next steps. The request is non-binding and does not create a purchase contract or trigger a payment. The legal basis is Article 6(1)(b) GDPR for pre-contractual measures taken at your request.

The request list is sent to Asphalt Motorsport by email. You also receive an automatic confirmation of receipt containing your reference number and product selection at the email address you provided. The website does not automatically transfer your form data to Microtronik. If data must later be passed to Microtronik L.L.C. in Dubai for a direct purchase, this is handled separately as part of the subsequent process agreed with you, not through this request form.

Email delivery via Google

Service requests and tool request lists are transmitted server-side to Asphalt Motorsport's business Gmail inbox. Form information, product selections and any voluntary attachments are therefore processed by Google services. Google may also process data on servers outside the European Economic Area and describes the applicable legal framework and safeguards in its privacy policy. Further information: Google Privacy Policy.

Storage period

Requests and submitted documents are retained in the business email inbox only for as long as required to process the request, handle a possible engagement and meet legal documentation and retention obligations. Voluntary documents that are no longer needed are deleted as soon as they are no longer required for the purpose of the request.

Within the file service, job files, result files and chat attachments are retained for up to 14 days from upload. Written project-related chat history is retained for twelve calendar months. Account, job, credit and payment-status data is processed for as long as required for the account, contract performance, traceability of bookings and statutory retention duties; afterwards it is deleted or anonymised unless a legal duty or legitimate reason requires further retention.

Vehicle configurator and WhatsApp preparation

The entries in the vehicle configurator and in the WhatsApp contact preparation are initially processed exclusively in the browser. Only when you click on a WhatsApp or email link will the prepared information be passed on to the respective service. Separately, the service request form actively transmits the information you have confirmed to the website server.

External services

Links to WhatsApp and Google Maps lead to external providers. Their privacy rules apply when you open those services. No vehicle or form data is transferred through these links unless you actively click them. When you initiate a payment, the data required for that transaction is transferred to the displayed provider, in particular Stripe or PayPal; that provider's privacy policy also applies.

Technically necessary session, cookies and analytics

After a successful sign-in, the file-service portal sets a technically necessary HttpOnly session cookie. It is used solely to maintain your signed-in session, cannot be read by browser JavaScript, and is not used for advertising or analysing your behaviour. The session ends when you sign out or when its technically defined validity period expires. Apart from this, the website does not use analysis, marketing or tracking cookies in this version.

Your rights

You have the right to information, correction, deletion, restriction, data portability and objection within the scope of the legal requirements. You also have the right to lodge a complaint with the Austrian Data Protection Authority.