1. Data Protection at a Glance
The protection of your personal data is important to us. In this Privacy Policy, we inform you about which data is collected, processed and stored when using the ECU Jobs platform.
Processing is carried out in compliance with the General Data Protection Regulation (GDPR) and all applicable data protection regulations.
2. Controller
The controller is the provider named in the Legal Notice.
3. Purpose of the Platform
ECU Jobs is an online platform for brokering file service requests between customers and professional file service providers.
The platform exclusively brokers contact between the parties. Contracts for services are concluded exclusively between the customer and the provider.
4. Personal Data Collected
Depending on how the platform is used, we process in particular the following data:
Customers
- Name
- Email address
- uploaded vehicle and job data
- communication data
- IP address
- technical log data
File service providers
- Name
- company name
- address
- email address
- phone number
- billing data
- VAT ID, if provided
- Stripe customer number
- verification documents
- profile information
- IP address
- log data
5. Registration and User Account
During registration, the data required to create a user account is processed.
The email address is verified using a double opt-in process.
6. Requests and Communication
The following information is processed for brokering services:
- vehicle data
- ECU information
- descriptions
- uploaded files
- offers
- messages within the platform
This data is processed exclusively for carrying out the brokerage process.
7. Payment Processing
For paid premium memberships, we use the payment service provider Stripe.
Personal data may be transmitted to Stripe in this context.
Further information: https://stripe.com/privacy
Payment data is not stored on our servers.
8. Invoices
Invoices for premium memberships are created by Stripe.
Links to invoices or invoice PDFs may be displayed in the user account.
9. Business Verification
Documents may be uploaded for the verification of professional file service providers.
These documents are used exclusively for review.
After completion of the verification process, documents that are no longer required are deleted in accordance with our internal processes.
10. Release of Contact Details
Contact details between customer and provider are only released once an offer has been accepted.
Until that point, personal contact details remain protected.
11. Cookies and Sessions
We use technically necessary cookies and session data to provide the platform.
These are required for the secure operation of the platform.
12. Microsoft Clarity and Analytics Cookies
On the public website, we may use Microsoft Clarity to better understand how visitors use the website and to improve content, navigation and conversion elements.
Microsoft Clarity is loaded only if you actively allow analytics cookies. Without consent, Clarity is not started for analytics purposes.
If consent is granted, usage data such as page views, clicks, scrolling behavior, technical browser information and pseudonymous identifiers may be processed. The provider is Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. You can change your decision at any time using the “Cookie settings” link in the footer.
Further information: https://privacy.microsoft.com/privacystatement
13. Security Measures
To protect the platform, we use, among other things, the following security measures:
- HTTPS encryption
- CSRF protection
- login protection
- rate limiting
- bot protection
- audit logging
- upload security checks
- security headers
14. Log Files
When visiting the platform, technical information is automatically processed, for example:
- IP address
- browser type
- operating system
- time of access
- pages accessed
- error messages
This data is used exclusively for system security and error analysis.
15. Legal Bases
Processing is carried out in particular on the basis of:
- Art. 6(1)(b) GDPR (performance of a contract)
- Art. 6(1)(c) GDPR (legal obligations)
- Art. 6(1)(f) GDPR (legitimate interest)
16. Retention Period
Personal data is stored only for as long as necessary for the respective purposes or as required by statutory retention obligations.
17. Your Rights
You have, in particular, the following rights:
- access
- rectification
- erasure
- restriction of processing
- data portability
- objection
- complaint with a data protection supervisory authority
18. External Service Providers
The following service providers, among others, may be used to provide the platform:
- Stripe (payment processing)
- Hetzner (hosting)
- Cloudflare Turnstile (bot protection, if enabled)
- Microsoft Clarity (analytics only after consent)
- SMTP mail service for sending transactional emails
Only the data required for the respective service is processed.
19. Changes to this Privacy Policy
We reserve the right to amend this Privacy Policy in the event of technical or legal changes.
The current version published on the platform applies.
Last updated: July 2026