Privacy policy

Data controller

The data controller is Alexis DA CRUZ (SIREN 829 534 262), who can be reached at contact@dczimports.fr. No data protection officer (DPO) has been appointed; any request relating to your personal data is handled through this address.

Personal data we collect

• Account: email address, name, organisation.
• Where you sign in with Google or Facebook: your email address, your name and your provider identifier, passed on by the provider during authentication.
• Business data you enter: vehicles, cost calculations, import files, documents, customers and sales.
• Payment: handled by Stripe, we never store your card number.
• Audience measurement (where you consent to it): browsing statistics via Google Analytics.
• Listings analysed: vehicle characteristics only (make, price, mileage, CO₂ and so on). No personal data relating to the seller (name, telephone number, email address) is collected or stored.

Purposes & lawful bases

• Providing the service (cost calculation, tracking, invoicing): performance of the contract.
• Signing in with Google or Facebook: your consent (given by using that sign-in method).
• Audience measurement (Google Analytics): your consent (cookies), which you may withdraw at any time.
• Security and improvement of the service: legitimate interest.
• Accounting and tax obligations: legal obligation.

Recipients & processors

Your personal data is processed by the following providers as part of delivering the service:

• Supabase, data hosting (European Union).
• Vercel, application hosting (United States).
• Stripe, payment.
• Google (Sign-in, Tag Manager & Analytics), authentication and audience measurement (United States).
• Meta / Facebook, authentication (where you use that sign-in method).

Some transfers outside the European Union (to the United States) may take place; they are governed by the European Commission’s standard contractual clauses and/or by the EU-US Data Privacy Framework.

Data retention periods

• Account data and business data: for as long as the account remains open, then deleted no later than 12 months after it is closed.
• Invoicing records: 10 years (legal obligation).
• Audience measurement cookies: 13 months at most.
• Immediate deletion is available at any time (see below).

Your rights

You have the right of access, the right to rectification, the right to erasure, the right to restriction of processing, the right to data portability and the right to object. You may exercise these rights at contact@dczimports.fr, or delete your account and your data directly from the data deletion page. You may also lodge a complaint with the French data protection authority (CNIL) (www.cnil.fr).

Cookies

The site uses strictly necessary cookies (authentication session), which do not require consent. Audience measurement cookies (Google Analytics) are only set after you have given your consent through the banner provided for that purpose. You may change your choice at any time using the “Cookies” link in the footer. No advertising cookies are used.

Last updated: June 2026.