Version 0.1
Garagist — Privacy notice
Draft, version 0.1, 2026-11-11. Not yet reviewed by a lawyer.
Garagist is a tool for keeping the record of a vehicle and for inspecting a vehicle before buying it. This notice says what personal data the service holds, why, where, for how long, and what you can do about it.
Who is responsible
Radim Kozel, K Hajovne 47, 252 41 Dolni Brezany, Czech Republic ("we"). For anything about your data, write to privacy@garagist.work.
What we hold
| Data | Where it comes from |
|---|---|
| Account: your email address, the name you choose, your language | You, at sign-up |
| Your garage: vehicles (make, model, year, VIN, registration plate, mileage), jobs, parts, costs, reminders, notes | You enter it |
| Files: photos and documents such as invoices and inspection certificates | You upload them |
| Inspections: your answers, notes and photos about a vehicle for sale, and any details of the seller or the listing you enter | You enter it |
| Technical records: IP address, browser and device type, time of each request | Created automatically when you use the service |
| Notification address: a technical identifier issued by your browser, if you switch on notifications | Your browser |
We do not use advertising, analytics or tracking tools, we do not build profiles, and we do not sell or rent data to anyone.
Why we hold it, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Running your account and storing and showing you your records | Performing our agreement with you (Article 6(1)(b) GDPR) |
| Sending sign-in messages and the reminders you set up | Performing our agreement with you |
| Sending notifications to your device | Your consent, which you can withdraw at any time in your device or browser settings |
| Keeping the service secure, finding faults, keeping backups | Our legitimate interest in a safe and working service (Article 6(1)(f)) |
| Answering your requests and meeting legal duties | Legal obligation (Article 6(1)(c)) |
Other people's data in your records
Invoices, listings and inspection notes often contain details of other people: a seller, a workshop, a previous owner. You decide what you store, and you are responsible for having a good reason to store it. We hold it only to provide the service to you. When you share a report or publish a vehicle page, the seller's identity, the listing address, the VIN and the registration plate are hidden unless you choose to show them.
If you are such a person and want to know whether Garagist holds data about you, write to privacy@garagist.work.
Where it is stored and who else handles it
- Hosting. The service runs on a server rented from Hetzner Online GmbH, Germany, in a data centre in Germany, inside the European Union. Hetzner acts on our instructions under a data-processing agreement.
- Email. Messages are sent through Brevo (operated by Sendinblue SAS, France), which acts on our instructions under a data-processing agreement.
- Notifications. If you switch them on, each notification travels through the delivery service of your browser or device maker (Apple, Google or Mozilla), which may process it outside the European Union under its own terms. The notification contains only its title and one line of text.
- Backups are kept on our own storage server in the Czech Republic, inside the European Union.
Apart from the notification route above, we do not transfer your data outside the European Economic Area.
On your device
So that Garagist works without a connection, it keeps a copy of your records and photos in your browser's storage on your own device. Removing the app from your Home Screen, or clearing the site's data in your browser, deletes that copy; what has already been sent to the server remains in your account.
The service sets two cookies, both necessary: one keeps you signed in, one protects forms against forgery. There are no others.
How long we keep it
| Data | Kept for |
|---|---|
| Account, garage, files, inspections | Until you delete them or your account |
| After deletion | Removed from the running service at once; gone from backups within 35 days |
| Technical records | 14 days |
| Messages you send us | Two years after the matter is closed |
An account that has not been used for three years is deleted after two warnings by email.
Your rights
You can, at any time and free of charge:
- see and export everything in your account (Account → Export);
- correct it, in the app;
- delete single records or the whole account (Account → Delete account);
- ask us to restrict a use of your data or object to a use that rests on our legitimate interest;
- withdraw consent to notifications;
- receive your data in a machine-readable form.
Write to privacy@garagist.work; we answer within one month. You can also complain to the supervisory authority: Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Praha 7, www.uoou.gov.cz.
Age
Garagist is for people aged 15 and over.
Changes
If this notice changes in a way that matters, we tell you by email before the change takes effect. Earlier versions are available on request.