Privacy Policy
Last updated: 18.10.2026
1. Who we are (data controller)
The operator is identified publicly on this site as Custom Center ("Custom Center"). For data protection matters: autoshinesteam@gmail.com.
2. What the site is
Custom Center is an online catalogue of automotive accessories and customised products listed by independent sellers. Visitors can browse listings and contact sellers. Approved sellers can create an account, publish listings and a public profile.
3. What data we process, why and on what legal basis
| Who | Data | Purpose | Legal basis (GDPR) | Retention |
|---|---|---|---|---|
| Visitors | IP address, browser type, pages requested, date and time (server logs) | Operating and securing the site, preventing abuse | Legitimate interest (Art. 6(1)(f)) | according to the hosting provider's technical configuration |
| Visitors | Strictly necessary cookies (session, security, language, cookie choice) | Operating the site | Technically necessary (Art. 5(3) ePrivacy Directive – consent exempt) | as stated in the Cookie Policy |
| Visitors (only with consent) | Usage data via Google Analytics (pages viewed, device, approximate country/region, pseudonymous identifier in a cookie) | Understanding and improving the site | Consent (Art. 6(1)(a)) | according to the active Google Analytics setting |
| Sellers (application) | Public name, username, email, WhatsApp number, city, country, optional social links, password (stored hashed only) | Reviewing, approving, creating and managing the account | Performance of a contract / pre-contractual steps (Art. 6(1)(b)) | until the account/application is deleted; no automatic deletion schedule is configured |
| Sellers (active account) | Listings, product and workshop photos, descriptions, translations and public contact details | Publishing listings on the site | Performance of a contract | while the account/listing is active |
| Visitors who submit reviews | Name, country (optional), email (not shown publicly), rating and review text | Displaying seller reviews and preventing abuse (hashed IP, used to limit submissions) | Legitimate interest / consent (Art. 6(1)(f)/(a)) | while the review is published, deleted on request; IP hash max. 30 days |
| People who contact us | Message content, name, email or phone number | Replying to the request | Legitimate interest / pre-contractual steps | as long as needed to respond to and handle the request |
We do not process special categories of data (Art. 9 GDPR) and we do not make automated decisions with legal effects on you.
4. Sellers' public data
A seller's public name, workshop description and photos, location, WhatsApp, public email, social links and approved reviews are displayed publicly on their profile. The seller chooses which optional details to provide. The seller decides what to fill in and can edit or delete this data at any time from their account. Sellers are responsible for the content they publish.
5. Who we share data with
- Hosting: server propriu / own server.
- Google Ireland Limited (Google Analytics): only after you consent to statistics. Roles and transfer details depend on the Google account configuration; Google's policy.
- DeepL (only if automatic listing translation is enabled with an API key): listing titles, material and descriptions are sent for translation; vehicle fitment fields are not sent.
- WhatsApp (Meta Platforms Ireland Ltd.): when you click a WhatsApp button, the conversation takes place in the WhatsApp app and is subject to Meta's policies. We do not send the message on your behalf.
- Authorities, where the law requires it.
- jsDelivr (CDN): when a seller opens the product form, the browser may load the public VehiclesDB make/model list; the CDN receives standard request metadata.
We do not sell your personal data.
6. Cookies
We use cookies as described in our Cookie Policy. You can change your choice at any time via "Cookie settings".
7. Transfers outside the European Economic Area
Storage location and any international transfers depend on the providers and settings of services used. Google Analytics loads only after consent to statistics. You can refuse or withdraw consent in cookie settings.
8. Security
We use HTTPS, password hashing and access controls. Operational measures and technical retention periods also depend on the server configuration.
9. Your rights
Under the GDPR you have the right to: access, rectification, erasure ("right to be forgotten"), restriction of processing, portability, objection (including to processing based on legitimate interest) and to withdraw consent at any time, without affecting the lawfulness of prior processing. To exercise your rights, write to autoshinesteam@gmail.com. We reply within one month. We may ask for proof of identity.
10. Complaints
If you believe the processing breaches the law, you may lodge a complaint with the data protection authority of your country. The authority competent for us: Data Protection Authority (APD-GBA), Drukpersstraat 35, 1000 Brussels, www.dataprotectionauthority.be.
11. Minors
The site is not aimed at people under 16 and we do not knowingly collect data from them.
12. Changes
We may update this policy. The current version is always on this page with the date of the last update.