Privacy policy

ELEKO SARL, 60 rue François Ier, 75008 Paris, France — SIREN 991 589 110.
Contact for any data-related question: contact@homologa.eu.

• Identity and contact: name, e-mail, phone, billing and delivery addresses.
• Vehicle: VIN, make, model, date of first registration, country of origin.
• Documents: copy of the registration certificate, supporting documents, the certificate obtained.
• Order and payment: references, amounts, status, invoices. Homologa stores no card data.
• Business account: company name, VAT number, linked users.
• Technical: connection logs, IP address (security, abuse prevention), language preference.

• Performing the order and liaising with the manufacturer — performance of the contract (art. 6(1)(b) GDPR).
• Invoicing and accounting — legal obligation (art. 6(1)(c)).
• Support and order tracking — performance of the contract.
• Securing the service (rate limiting, fraud detection) — legitimate interest (art. 6(1)(f)).
• Audience measurement and non-transactional e-mails — consent (art. 6(1)(a)), withdrawable at any time.

Your data is passed to the manufacturer or its representative strictly to the extent needed to obtain the certificate (applicant identity, VIN, supporting documents).

Processors bound by a data processing agreement are also involved: the host, the transactional e-mail provider, the payment providers and, where paper delivery is chosen, the carrier. An up-to-date named list is available on request at contact@homologa.eu.

No data is ever sold or rented to third parties.

Hosting and document storage are located in the European Union. Where a processor handles data outside the EU, the transfer is covered by the European Commission’s standard contractual clauses, supplemented where appropriate by technical measures (encryption).

• Order documents (registration certificate, certificate obtained): 5 years after delivery, then automatic deletion.
• Invoices and accounting records: 10 years (legal obligation).
• Inactive customer account: 3 years after the last contact, then anonymisation.
• Technical logs: 12 months.
• Consent records: 3 years.

The documents you upload are encrypted at rest (AES-256-GCM) and accessible only to authorised staff, with every access logged. Back-office access requires two-factor authentication. Traffic is encrypted in transit (TLS).

You have the rights of access, rectification, erasure, restriction, objection and portability.

From your customer area, exporting your data and deleting your account take one click. You may also write to contact@homologa.eu: we reply within one month.

You may lodge a complaint with the French supervisory authority, the CNIL (cnil.fr), or with the supervisory authority of your country of residence.

Only strictly necessary cookies (session, security, language preference, cart) are set without consent. Any audience-measurement tracker waits for your choice. See the cookies page.