Πολιτική Απορρήτου

1. Data Controller

The data controller for this website is:

• Company: Athens Data Lab
• Address: Athens, Greece
• Email: contact@enginescope.gr
• Website: enginescope.gr

We are a registered Greek company specialising in data analytics, database construction, and business advisory services.

2. Data We Process

Google Analytics 4

When you consent to analytics cookies, we collect the following through Google Analytics 4 (measurement ID: G-GZ3R1D8JNM):

• Anonymised IP address
• Pages visited and time spent
• Device type, browser, and operating system
• Referring website or search engine
• Country and city-level geolocation (approximate)

IP anonymisation is enabled. We do not collect names, email addresses, or any directly identifying information through analytics.

VIN Decoder

When you use our VIN Decoder tool, the VIN you submit is sent to our server for processing. VINs are not stored, logged, or retained after the response is returned. No database record is created from your submission.

What We Do NOT Collect

• No user accounts or registration
• No personal profiles
• No user-generated content
• No email addresses (unless you contact us directly)
• No payment or financial data

3. Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process data on the following legal bases:

• Consent (Art. 6(1)(a) GDPR): Analytics cookies are only activated after you provide explicit consent via our cookie banner.
• Legitimate interest (Art. 6(1)(f) GDPR): Processing necessary for the basic functionality of the website, such as serving pages and processing VIN decoder requests in real time.

4. Data Recipients

• Google LLC (Google Analytics 4) — Google processes analytics data under the EU-US Data Privacy Framework (DPF). Google's privacy policy: policies.google.com/privacy

We do not sell, rent, or share personal data with any other third parties.

5. Data Retention

• Google Analytics data: retained per Google's default retention settings (14 months for user-level data). We do not extend this period.
• VIN submissions: not retained. Processed in memory and discarded immediately.
• Server logs: standard web server logs may be retained for up to 30 days for security and debugging purposes.

6. Cookies

Strictly Necessary Cookies

We currently do not use any strictly necessary cookies. The site functions without them.

Analytics Cookies (require consent)

• _ga — Google Analytics, distinguishes users. Duration: 2 years.
• _ga_* — Google Analytics, maintains session state. Duration: 2 years.

Analytics cookies are only set after you provide consent. You can withdraw consent at any time by clearing your browser cookies or using your browser's cookie settings.

7. Your Rights Under GDPR

Under Articles 15-22 of the GDPR, you have the following rights:

• Right of access (Art. 15): request a copy of your personal data
• Right to rectification (Art. 16): request correction of inaccurate data
• Right to erasure (Art. 17): request deletion of your personal data
• Right to restriction (Art. 18): request limitation of processing
• Right to data portability (Art. 20): receive your data in a structured, machine-readable format
• Right to object (Art. 21): object to processing based on legitimate interest
• Right to withdraw consent (Art. 7(3)): withdraw your consent at any time without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at contact@enginescope.gr. We will respond within 30 days.

8. Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the supervisory authority:

• Hellenic Data Protection Authority (HDPA)
• Kifissias 1-3, 115 23 Athens, Greece
• Website: www.dpa.gr
• Email: contact@dpa.gr

9. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically.