The controller of personal data on ecuflashfiles.com (ECU Flash Files) is CLEAN LOOK TUNING S.R.L., a Romanian limited-liability company (CUI 42630745, VAT RO42630745). The registered office is Str. Bucium nr. 19, Bl. 2-1, Ap. 1, 700153 Iași, județul Iași, Romania.
Customer support is handled on Swiss numbers and email while we prepare to move operations to Switzerland. Write to contact@ecuflashfiles.com · +41 77 912 95 41 (Switzerland) · Contact form. Support languages: English and Romanian. Hours: Monday–Friday 08:00–18:00 Europe/Zurich.
This notice covers GDPR/ePrivacy. When a Swiss company is incorporated and the shops are transferred, we will update the controller details and add the Swiss nFADP notice.
What we do
The site is used for sale of original (virgin) ECU dump files for restore, comparison and workshop use. Stage 1 remaps and deletes are a separate product on ecufilemarket.com.
Data we collect
- Account and orders: name, email, password hash, company/workshop name, billing details and payment status.
- ECU files you send us: the dump and the vehicle identifiers you include (make, model, SW/HW, VIN if you paste it). Treat VIN and full dumps as confidential workshop data. We use them only to deliver the file or calibration you asked for.
- Support: messages sent via the contact form, email or WhatsApp, including any vehicle details you choose to share.
- Technical logs: IP address, browser, pages viewed, approximate location derived from IP, and security/error logs. These are needed to run and protect the site.
- Cookies and ads: see the cookie policy. Statistics and marketing cookies are not set until you accept them.
Why we process it (legal bases)
- Contract: creating your account, taking payment, delivering a file or remap, and answering a job you opened.
- Legitimate interests: securing the shop against fraud and abuse, improving the catalogue, and keeping server logs. You can object; we will stop unless we have a compelling reason.
- Consent: newsletters (if you opt in) and non-essential cookies (analytics, ads, language widgets). You can withdraw consent any time via “Manage consent” or by writing to us.
- Legal obligation: invoicing, tax and accounting retention.
Payments
Card payments are processed by Stripe. We do not store full card numbers. Stripe acts as an independent payment controller/processor — see Stripe’s privacy notice. Swiss/EU transfers follow Stripe’s contractual clauses.
Who we share data with
- Hosting, email (WP Mail SMTP where used), security and form plugins that run this WordPress site.
- Stripe for payments.
- Google (Tag Manager, Site Kit, Ads) only after cookie consent, for audience measurement and ads.
- The sister shop ECU File Market (ecufilemarket.com) when a job genuinely needs both original-file and remap handling. We do not sell your personal data.
- Authorities if the law requires it.
How long we keep it
Account and invoices: for the life of the account plus the Romanian accounting period (typically 10 years for invoices). ECU dumps attached to an order: as long as needed to deliver and support that order, then deleted or archived with the order record. Server logs: normally under 90 days unless needed for a security incident. Cookie lifetimes are listed in the cookie policy.
Your rights
You can ask for access, correction, erasure, restriction, portability, and to object to processing based on legitimate interests. Where we rely on consent, you can withdraw it. You may lodge a complaint with the Romanian supervisory authority ANSPDCP (dataprotection.ro) or with your local EU authority. Write to contact@ecuflashfiles.com or call +41 77 912 95 41.
Children
The shop is for professional workshops. We do not knowingly collect data from anyone under 16.
Changes
We will update this page when the shop or the law changes. The date is the publication date in WordPress. Material changes will also be flagged in the cookie banner if they affect tracking.