Privacy Policy
This Privacy Policy explains which personal data CHIPTUNER S.L. processes through chiptuner.net and its related channels, what it uses them for, the legal basis for the processing, how long it keeps them and how data subjects can exercise their rights.
Last updated: 20 July 2026
1. Data controller
The data controller is:
- Company name: CHIPTUNER S.L.
- Tax ID: B24802159
- Registered address: C. Jose Maria Peman 22 B, 29660 Marbella, Málaga, España
- Website: https://chiptuner.net
- Privacy email: info@chiptuner.net
For any data protection enquiry, write to info@chiptuner.net using «Data protection» as the subject.
2. Personal data we may process
Depending on your relationship with CHIPTUNER S.L. and the features you use, we may process the following categories of data:
- Identification and contact data: first name, surname, postal address, email address and phone number.
- Professional or business data: company, tax number, position, country, town and professional contact details.
- Account data: user identifier, encrypted credentials, access history and preferences.
- Order, booking and service data: products or services requested, order-related communications, incidents, returns and after-sales support.
- Technical vehicle or equipment data: make, model, engine, year, registration plate or VIN where necessary, ECU/TCU references, hardware and software versions, original files, calibrations, diagnostic logs and any other technical information supplied so that the service can be delivered.
- Billing and payment data: billing address, tax number, amounts, invoices and payment status. CHIPTUNER S.L. does not store full card details when the payment is processed by an external provider.
- Communications: messages sent through forms, email, phone, messaging apps or support channels.
- Browsing and security data: IP address, device and browser type, online identifiers, technical logs and usage events. Data obtained through non-necessary cookies are processed only once you have given consent.
We do not intentionally request special categories of personal data. Please do not include sensitive information that is not needed in forms, technical files or communications.
3. How we obtain the data
Data may come directly from you when you create an account, fill in a form, make a purchase, request a quote or support, send a file or contact us. They may also be generated while the service is delivered, or collected automatically through technical technologies and, with your consent, through analytics or advertising cookies.
If you provide another person's data, you declare that you have a legitimate basis for doing so and that you have informed them of the essential content of this policy.
4. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Answering enquiries, preparing quotes and handling requests for information | Consent and pre-contractual measures |
| Creating and administering user accounts | Performance of the contract and pre-contractual measures |
| Managing orders, bookings, payments, licences, activations, technical files, support and after-sales service | Performance of the contract |
| Checking compatibility, delivering calibration or programming services and resolving technical incidents | Performance of the contract and pre-contractual measures |
| Issuing invoices, keeping accounts and complying with tax, commercial or administrative obligations | Compliance with legal obligations |
| Protecting the website, accounts and transactions, preventing fraud, abuse or unauthorised access | Legitimate interest in the security and continuity of the service and, where applicable, legal compliance |
| Sending newsletters, promotions or requested commercial communications | Consent; where the law allows it, a prior contractual relationship covering similar products or services, with an unsubscribe option in every message |
| Measuring audience, analytics or non-necessary personalisation | Consent given through the cookie panel |
| Bringing, exercising or defending claims | Legitimate interest and compliance with legal obligations |
Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out beforehand.
5. Retention periods
We keep the data only for as long as the corresponding purpose requires and, afterwards, duly blocked for the applicable statutory limitation or retention periods.
- Enquiries and quotes: until the request is resolved and, afterwards, for as long as needed to handle any liability.
- Customers, orders and services: while the contractual relationship lasts and for the statutory tax, accounting, commercial and liability periods.
- Technical files and support: while the service, its warranty or the associated support is delivered and for the applicable liability periods, unless a different term is agreed.
- User account: while it remains active and, after closure, for the periods needed to meet legal obligations or handle claims.
- Marketing: until you withdraw consent, unsubscribe or object to the processing.
- Security data: for as long as reasonably needed to investigate incidents and protect the service.
- Cookies: for the period stated for each cookie in the settings panel and in the Cookie Policy.
6. Recipients and providers
CHIPTUNER S.L. does not sell personal data. Providers that help us run the business may access them, always within their own remit, for example:
- web hosting, infrastructure, maintenance, security and backups;
- email, customer care and communications;
- e-commerce platforms, order management and invoicing;
- payment institutions, banks and fraud prevention;
- transport and logistics companies;
- manufacturers, distributors or licence providers where needed to activate, register, deliver or support the product purchased;
- legal, tax, accounting advisers or insurers;
- analytics or advertising services, only where you have consented to the corresponding cookies;
- public authorities, courts and competent bodies where the law requires it.
Where a provider acts as a processor, CHIPTUNER S.L. signs the contract required by data protection law and gives it only the instructions needed to deliver the service.
7. International transfers
Some technology providers may process data outside the European Economic Area. Where an international transfer takes place, a mechanism recognised by the GDPR is used, such as an adequacy decision, standard contractual clauses approved by the European Commission or another valid safeguard. You can request further information by writing to info@chiptuner.net.
8. Rights of data subjects
You may exercise the following rights:
- access to your personal data;
- rectification of inaccurate data;
- erasure where applicable;
- objection to the processing;
- restriction of the processing;
- data portability;
- withdrawal of consent at any time;
- not to be subject to decisions based solely on automated processing where they produce legal effects or significantly affect you, in the cases provided for by law.
To exercise them, send a request to info@chiptuner.net with «Data protection» as the subject, stating the right you wish to exercise and the information needed to identify your request. We may ask for additional data or supporting identification only where that is necessary to verify your identity.
If you believe the processing of your data breaches the law, you can lodge a complaint with the Spanish Data Protection Agency (AEPD) through https://www.aepd.es.
9. Whether providing data is mandatory
Fields marked as required are necessary to process the request or perform the contract. If you do not provide them, we may be unable to reply, create the account, process the order or deliver the service. All other data are provided voluntarily.
10. Security
CHIPTUNER S.L. applies technical and organisational measures that are reasonable and proportionate to the risk in order to protect data against loss, alteration, unauthorised access, use or disclosure. That said, no system connected to the Internet can guarantee absolute security. If you notice an incident affecting your data or your account, report it as soon as possible to info@chiptuner.net.
11. Minors
The website and the services of CHIPTUNER S.L. are not aimed at children under 14. Data of children below that age must not be provided without valid authorisation from whoever holds parental responsibility or guardianship. If we find that a child's data have been collected without sufficient authorisation, we will take reasonable steps to delete them.
12. Cookies
chiptuner.net uses strictly necessary cookies and may use cookies from other categories once the user authorises them. You can accept, reject or change your preferences from the consent panel. See the Cookie Policy for detailed information.
13. Changes to this policy
We may update this Privacy Policy when the processing, the services or the applicable law change. The version in force is the one published on this page and shows the date it was updated. Where a change is significant, it will be communicated by reasonable means.