Privacy policy

Last updated: [TODO — insert date]

1. Data controller

The data controller for personal data collected through the AutoPraca platform is:

  • Entity: [TODO — legal company name]
  • Tax ID (NIF): [TODO — tax identification number]
  • Address: [TODO — full address], Azores, Portugal
  • Email: info@autopraca.pt

2. What data we collect

We collect the following types of personal data:

  • Registration data: name, email, phone number, password (encrypted)
  • Profile data: account type (private or professional), location
  • Listing data: vehicle photographs, descriptions, prices, vehicle technical data
  • Usage data: IP addresses, browser type, pages visited, visit duration
  • Communication data: messages exchanged between users on the platform
  • [TODO — complete with other collected data]

3. Why we process your data

We use your personal data to:

  • Create and manage your user account
  • Publish and manage vehicle listings
  • Facilitate communication between buyers and sellers
  • Process photographs with artificial intelligence to extract vehicle details (see section 7)
  • Calculate tax estimates (ISV, IUC)
  • Improve and optimize the platform
  • Send service-related communications
  • Comply with legal obligations
  • [TODO — complete with other purposes]

4. Legal basis for processing

The processing of your data is based on:

  • Contract performance: necessary to provide the platform service (Art. 6(1)(b) GDPR)
  • Consent: for AI photo processing and marketing communications (Art. 6(1)(a) GDPR)
  • Legitimate interest: for platform improvement and fraud prevention (Art. 6(1)(f) GDPR)
  • Legal obligation: for compliance with tax and regulatory obligations (Art. 6(1)(c) GDPR)
  • [TODO — legal review of legal bases]

5. Data retention

We retain your personal data for the period necessary for the purposes for which it was collected:

  • Account data: while the account is active, plus [TODO] months after deletion
  • Listing data: while the listing is active, plus [TODO] months after removal
  • Usage data: [TODO] months
  • Tax data: as required by law (minimum [TODO] years)
  • [TODO — define specific periods with legal support]

6. Your rights

Under the GDPR, you have the right to:

  • Access: request a copy of your personal data
  • Rectification: correct inaccurate or incomplete data
  • Erasure: request the deletion of your data ("right to be forgotten")
  • Restriction: restrict the processing of your data
  • Portability: receive your data in a structured format
  • Object: object to the processing of your data
  • Withdraw consent: withdraw consent at any time

To exercise your rights, contact us at info@autopraca.pt. You also have the right to lodge a complaint with the CNPD (Portuguese Data Protection Authority).

7. AI photo processing disclosure

AutoPraca uses artificial intelligence technology to analyze vehicle photographs uploaded by users. This processing is intended to:

  • Automatically extract vehicle details (make, model, year, color, body type)
  • Improve the quality and completeness of listings
  • Reduce the time needed to create a listing

Legal basis: This processing is carried out based on your explicit consent (Art. 6(1)(a) GDPR). You may withdraw consent at any time and choose to fill in listing details manually.

Data processed: Only vehicle photographs are sent to the AI service. No biometric data or photographs of people are processed. [TODO — specify AI provider and processing location]

Retention: Photographs processed by AI are [TODO — define retention policy for processed photographs].

8. Cookies

AutoPraca uses cookies and similar technologies for:

  • Essential cookies: necessary for the platform to function (session, authentication)
  • Analytics cookies: to understand how users use the platform [TODO — specify tools]
  • Preference cookies: to save your preferences (language, region)

[TODO — implement cookie banner and detailed cookie policy]

9. Data Protection Officer (DPO)

For questions related to the protection of your personal data, you can contact our Data Protection Officer:

  • Email: [TODO — dpo@autopraca.pt or alternative contact]

10. Changes to this policy

We may update this privacy policy from time to time. Any significant changes will be communicated through the platform or by email. The date of the last update is indicated at the top of this page.