Disclaimer, privacy policy and GDPR

• 1. Disclaimer
• 2. Privacy policy
• 3. GDPR – your rights

1. Disclaimer

We only put you in touch. The service compares the numbers users enter themselves and notifies them when two numbers match. We are not a party to any deal between users.

We do not verify the information. We cannot tell whether a number was entered correctly, whether the user owns the item, or whether it was acquired lawfully. A match is not proof that two parts originally belong together. Check the paperwork, ownership and condition yourself before you trade. Suspected stolen parts should be reported to the police.

Deals take place outside the service. Price, payment, shipping and handover are agreed directly with the other user and at your own risk. We are not liable for losses in connection with a deal, including condition, authenticity or non-delivery.

Payment and matching. The payment (one-time fee per number) gives access to having your number registered and compared with other users' numbers. We do not guarantee that a match exists or when it will appear.

Operation. The service is provided as is. There may be errors, downtime and delays, and emails may end up in spam. Please also check “Matches” on the site.

Limitation of liability. To the extent permitted by law, we are not liable for indirect loss, loss of business or loss of profit. We do not limit liability for intent or gross negligence, or where the law does not allow it.

Your responsibility as a user. You must provide accurate information, only enter items you are entitled to dispose of, and only use other users' contact details to arrange a possible deal – not for marketing or other contact. We may close accounts in case of misuse.

Governing law. Danish law applies. If you are a consumer, the mandatory rules of your country of residence continue to apply.

2. Privacy policy

Who is the data controller?

Chassismatch. Contact us at info@chassismatch.dk.

What information do we process?

• Account: name, email address, phone number, city and country, password (only as an encrypted hash), language and the domain you used, your choice about match emails, and the time of sign-up and confirmation.
• Items: frame/chassis/engine number, type, make, model, year, note and whether the item is active.
• Matches and messages: which numbers match, and whether and when we sent you a notification and email.
• Payment: which numbers are paid, amount, time and payment reference. We never receive your card details – Stripe handles them.
• Technical: cookies (see below) and the server's ordinary operating logs (e.g. IP address and time), kept for a short time for operation and security.

Why, and on what legal basis?

• To create and run your account, confirm your email, search for matches and notify you: contract (GDPR Art. 6(1)(b)).
• To give the other user your contact details on a match so you can arrange a deal: contract (Art. 6(1)(b)).
• To process payment and meet bookkeeping requirements: contract and legal obligation (Art. 6(1)(b) and (c)).
• To keep the service running, prevent misuse and troubleshoot: legitimate interest (Art. 6(1)(f)).

We send no marketing, do no profiling and make no automated decisions about you. We do not sell data.

Who receives the information?

• The other user on a match: your name, email, phone number, city and country and the matching number. This happens only when there is a match, and only to the two users who match.
• Hetzner (server hosting), Google Workspace (sending emails) and Stripe (payments). They process data for us or – in Stripe's case – under their own rules for payment data.
• Authorities, if we are legally required to.

Google and Stripe may transfer data to countries outside the EU/EEA, including the USA. This is based on the European Commission's standard contractual clauses and/or the EU–US Data Privacy Framework.

How long do we keep the information?

• Account and items are kept as long as the account exists. You can have them deleted by writing to us.
• Accounts whose email is never confirmed are deleted automatically after 7 days.
• Payment records are kept as long as Danish bookkeeping law requires (up to 5 years after the end of the financial year).
• Database backups may contain your information for a limited time after you are deleted.

Cookies

We only use necessary cookies: a session cookie that keeps you logged in and protects forms against misuse, and a cookie that remembers your language. They do not require consent. We use no analytics, tracking or advertising cookies and load no fonts or scripts from third parties. If you install the site as an app on your phone, your device stores some files (logo, font) for offline use.

Security

The site uses an encrypted connection (HTTPS). Passwords and confirmation links are stored only in encrypted form. Access to administration is restricted. If we discover a personal data breach, we will report it to the Danish Data Protection Agency within 72 hours where the law requires, and inform those affected where there is a high risk.

Age

The service is intended for people aged 18 and over.

3. GDPR – your rights

Under the General Data Protection Regulation (GDPR) you have the right to:

• Access the information we hold about you and get a copy (Art. 15).
• Rectification of incorrect information (Art. 16). You can correct name, phone, city and country yourself under “Account”.
• Erasure (Art. 17), unless we must keep the information by law.
• Restriction of processing (Art. 18).
• Data portability – receiving your information in a common format (Art. 20).
• Object to processing based on our legitimate interests (Art. 21).
• Withdraw consent where processing is based on consent (Art. 7).

Write to info@chassismatch.dk from the email address you registered with. We reply within one month at the latest. We may ask for proof that it is you.

Complaints: You can complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, Denmark, dt@datatilsynet.dk, www.datatilsynet.dk. If you live in another EU country, you can also complain to your local supervisory authority.

Changes: We may update this page. The date at the top shows when it last happened.