🔒 Privacy Policy

1. Introduction

This Privacy Policy explains how KarmaPower, s.r.o., the operator of VignetteGO, collects and uses personal data when providing its independent paid e-vignette registration service. VignetteGO staff manually process orders and submit the necessary customer and vehicle data to the relevant verified official toll-operator portal or authorised channel on the customer's behalf.

2. Data We Collect

We collect information you provide directly to us when using our vignette service:

• Contact and billing information (including name, email address, phone number, billing address, company and tax details where supplied)
• Order and vehicle information (including country, product, requested start date, licence plate, vehicle category and, where required for the selected official portal, VIN and passport number)
• Payment and transaction information (card details are processed by Stripe; VignetteGO receives payment status and transaction identifiers rather than full card details)
• Technical and usage information (including IP address, browser and device information, cookies, consent records, security logs and interactions with the service)

3. How We Use Your Data

We use the collected information for the following purposes:

• To perform the contract: authorised VignetteGO staff manually review and process the order, submit the required data to the relevant official toll portal or authorised channel, purchase the selected product on the customer's behalf and deliver the available confirmation
• To communicate with you about your orders and account
• To improve and optimize our service
• To comply with legal obligations

4. Data Sharing

We do not sell or rent your personal information. We may share your data only in the following circumstances:

• With the relevant official toll operator, state portal or authorised sales channel as necessary to perform the customer's order
• With service providers acting for us where necessary, including Stripe and payment partners, hosting, email, customer-support, analytics and security providers
• With competent authorities or professional advisers where required by law, necessary for legal claims or needed to protect customers, the service or our rights

5. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

6. Your Rights Under GDPR

Under GDPR, you have the following rights regarding your personal data:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure (right to be forgotten)
• Right to data portability
• Right to object to processing

7. Cookies and Tracking Technologies

We use necessary cookies for security, sessions, language and currency preferences, and checkout. Google Analytics, Meta Pixel and Sklik load only after the relevant optional consent. You can change or withdraw your choice at any time.

For detailed information about our use of cookies, please see our Cookie Policy.

8. Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new privacy policy on this page and updating the "Last Updated" date.

9. Company Information

10. Contact Information

If you have any questions about this Privacy Policy or wish to exercise your rights under GDPR, please contact us using the information provided above.