1. Data controller
The data controller responsible for the processing described in this policy is:
- Company name:
- Registered address:
- Country:
Contact for data-protection matters: info@dsgclinic.com
Where this policy refers to "we", "us" or "DSG Clinic", it means the controller named above.
2. Scope of this policy
This policy applies to personal data collected through the website at https://dsgclinic.com and through correspondence generated by it (quotation requests and replies).
It does not apply to any third-party website reachable by a link from this site. Such websites have their own privacy policies.
3. What data we collect
3.1 Data you provide voluntarily
When you submit a quotation request, we collect the information you enter into the form. Depending on the fields you complete, this may include:
- First and last name
- Email address
- Phone number (optional)
- Country
- Company name (optional)
- Vehicle details — make, model, year, engine, VIN
- Mechatronic part number and transmission code
- Fault codes you provide
- Any message text you write
- Any additional information you send by email in reply to our confirmation
This website does not accept file uploads. If you wish to send photos or documents, you do so by replying to the confirmation email after your request has been received. Those attachments are then processed by your email provider and ours, and are stored only in the email accounts involved.
3.2 Data collected automatically
When you visit this website, our hosting provider records technical information in server logs, which typically includes:
- IP address
- Date and time of the request
- Requested URL and HTTP status code
- Browser and operating-system information (user-agent string)
- Referring page, if any
These logs are used for the technical operation and security of the website. They are not used for profiling or automated decision-making.
3.3 Cookies and similar technologies
This website uses only essential cookies required for the functioning of the quotation request form (session and anti-spam tokens). We do not use analytics, advertising or third-party tracking cookies. See the Cookie Policy for details.
4. Why we process your data, and on what legal basis
We do not use your data for automated decision-making, and we do not use it for direct marketing unless you have asked for it or unless the law permits it in the context of an existing business relationship.
5. Who we share data with
We share personal data only where necessary and only with parties who process it on our behalf or where the law requires it. Recipients may include:
- Our hosting provider:
- Our email provider:
- Professional advisors — accountants, tax advisors and lawyers, where necessary
- Public authorities — where we are legally obliged to provide information
Where a recipient is located outside the European Economic Area, we ensure that an appropriate safeguard applies — for example the European Commission's standard contractual clauses — or that the recipient is in a country recognised as providing an adequate level of protection.
6. How long we keep data
7. Your rights
Under the GDPR you have the following rights regarding your personal data:
- Right of access — you can ask whether we process your data and request a copy of it.
- Right to rectification — you can ask us to correct inaccurate or incomplete data.
- Right to erasure — you can ask us to delete your data where the legal conditions are met.
- Right to restriction of processing — you can ask us to restrict the processing of your data in certain circumstances.
- Right to data portability — you can ask us to provide your data in a structured, commonly used, machine-readable format, or to transmit it to another controller, where technically feasible.
- Right to object — you can object to processing based on legitimate interests. We will then stop processing unless we can demonstrate compelling legitimate grounds.
- Right not to be subject to automated decisions — we do not make automated decisions about you.
- Right to withdraw consent — where processing is based on consent, you can withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.
To exercise any of these rights, contact us at info@dsgclinic.com. We will respond within the time limits set by the GDPR.
8. Right to lodge a complaint
If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority — in particular in the EU member state of your habitual residence, place of work, or the place of the alleged infringement.
The supervisory authority responsible for DSG Clinic is:
9. Security
We take reasonable technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. This includes:
- Encrypted transmission over HTTPS
- Server-side input validation and sanitisation of the quotation form
- Rate limiting and anti-spam measures on the quotation form
- Restricted access to the receiving mailbox
No system can guarantee absolute security. If you have reason to believe that your data has been compromised, contact us immediately at info@dsgclinic.com.
10. Minors
This website is intended for use by adults and is not directed at children. We do not knowingly collect personal data from minors.
11. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or in the law. The version in force is the one published on this page at the time you access it. The "Last updated" date at the top of the page indicates when the current version was published.
12. Contact
Questions about this Privacy Policy or about how we handle your personal data can be sent to:
DSG Clinic Email: info@dsgclinic.com