Skip to content
TUNING-CHECK
EN

Legal

Privacy policy

What happens to your data when you visit this website – and what does not.

In brief: This website sets no cookies, uses no advertising or analytics services and does not load any content from third-party servers. That is why there is no cookie banner. Data arises in the following situations: when the page is accessed (server log), when you use the chat, when you verify a report number, when you write to us or use the enquiry form, and when you give us a read-out, a file, a log file or an ECU to check.

1. Controller

The controller responsible for data processing on this website within the meaning of the EU General Data Protection Regulation (GDPR; in German: Datenschutz-Grundverordnung, DSGVO) is:

Maik Schneider
Berliner Straße 54
15234 Frankfurt (Oder) OT Booßen
Email: info@tuningcheck.de

We have not appointed a data protection officer; we are not legally required to do so. For all questions about data protection, you can reach us using the details above.

2. Hosting and server log files

This website is hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur. When a page is accessed, the server automatically records data that your browser transmits:

  • IP address of the accessing device
  • date and time of access
  • name and URL of the file accessed
  • amount of data transferred and whether the request was successful
  • previously visited page (referrer), if any
  • browser and operating system used

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the technically error-free operation and the security of the website. This data is not combined with other data sources. We have a data processing agreement with IONOS pursuant to Art. 28 GDPR.

3. Encrypted transmission

This website uses SSL or TLS encryption. You can recognise this by “https://” in the address bar and the padlock symbol in your browser. As long as encryption is active, the data you transmit to us cannot be read by third parties.

4. Chat on this website

On every page there is a chat window at the bottom right that you can use to ask us questions. It only opens when you click on it; nothing is transmitted before that. The answers are generated with the help of a language model.

What is processed

  • Your messages and the conversation so far. These are transmitted to our server and forwarded from there to our service provider Anthropic, which generates the answer from them (see below).
  • Information you enter voluntarily – such as name, email address, vehicle details – if you want to send us an enquiry via the chat.
  • Your IP address as a hash value. To prevent automated misuse of the chat, we store a hash value of your IP address together with the time for each request. We use this to limit the number of requests per hour and per day. These entries are deleted after 24 hours at the latest. The IP address itself is not stored in plain text.
  • Usage statistics. For each question we record: the time, a session identifier, the sequence number of the question within the conversation, the path of the page on which the chat was used, and the text of your question (up to 500 characters). The session identifier is a hash value made from your first question and the date – it only serves to group the questions of one conversation. No IP address is stored in these statistics. We evaluate them to see which questions our website does not yet answer.

How long

  • Entries for limiting misuse: no more than 24 hours.
  • Usage statistics including question text: 90 days, then automatic deletion.
  • Enquiries you send us via the chat are treated like an email to us (see section 7) and kept accordingly.

Use of Anthropic

To generate the answers, we use Anthropic Ireland, Limited, 6th Floor, South Bank House, Barrow Street, Dublin 4, D04 TR29, Ireland, as our processor. For this purpose, your messages are transmitted to Anthropic’s servers and processed there, including in the USA. This means data is transferred to a third country (USA).

The basis for this transfer is Anthropic’s Data Processing Addendum, which forms part of our contractual relationship via the Commercial Terms of Service. It contains the Standard Contractual Clauses of the European Commission (Modules Two and Three) and thus provides appropriate safeguards within the meaning of Art. 46(2)(c) GDPR. We will send you a copy of the Standard Contractual Clauses on request to info@tuningcheck.de. The sub-processors used by Anthropic are published at anthropic.com/subprocessors.

According to Anthropic, inputs and outputs are deleted within 30 days. They are only kept longer if Anthropic’s review systems classify a request as a violation of its usage policy (up to two years), if the law requires it, and in other special cases named by Anthropic.

Under the Commercial Terms of Service, Anthropic may not use the content transmitted via the API to train models. This applies both to your input and to the answers generated.

The legal basis for operating the chat is Art. 6(1)(f) GDPR – our legitimate interest in being able to answer enquiries quickly and outside opening hours. If you give contact details in the chat because you would like a quote, the processing is additionally based on Art. 6(1)(b) GDPR (pre-contractual measures).

Please note: Do not enter any particularly sensitive data in the chat, or any information that is not needed to answer your question. For anything confidential, please use email or the enquiry form. Using the chat is voluntary – you can reach us just as well by any other means.

5. Verifying a report number

On the “Verify a report” page you can enter a report number. Only the report number you enter is transmitted to our server. The number, date, level, ECU, software number and hash value of the read-out are shown – no names, no VIN. The information on server log files in section 2 also applies.

To protect against misuse, we store a non-reversible hash value of your IP address together with the time of each check for no more than 24 hours in order to limit too many checks within a short time. The legal basis is Art. 6(1)(f) GDPR.

6. Submitted read-outs, files and ECUs

If you send us an ECU, a read-out, a tuning file or a log file, we process this data to produce the findings report. Read-outs may contain the vehicle identification number (VIN).

The legal basis is Art. 6(1)(b) GDPR (performance of the order). We keep read-outs, files and the report for 24 months so that the report number can be verified during this time; after that, we delete them.

The analysis is partly AI-assisted. Parts of the read-out may be transmitted to the service provider Anthropic named in section 4; what is stated there about the third country and safeguards applies to this transfer.

View log file (no transfer)

On the “View log file” page, the file you select is read exclusively in your browser and drawn as graphs. It is not transmitted to our server and not stored by us; we receive no data in the process. If you choose “Have this recording analysed” there, your browser briefly stores the file in its own storage and attaches it to the enquiry form. It is only sent when you submit the form; section 7 then applies.

7. Contacting us by email, enquiry form and chat

If you send us an enquiry – by email, via the enquiry form or via the chat – we process your details to handle this enquiry. These are usually your name, your contact details, details of the vehicle and the content of your message.

Enquiry form and file uploads

In the enquiry form, you enter your name, your email address and details of the vehicle, the ECU and the reason for your enquiry, and you can upload files – read-outs, tuning files and log files, up to 50 MB per file. The transfer is encrypted. We store your details and files on our web space (see section 2) in an area that cannot be accessed from the internet, and we receive a notification by email. Section 6 applies to uploaded files, including the retention period of 24 months.

To protect against misuse, when you submit the form we store a non-reversible hash value of your IP address for no more than 24 hours in order to limit too many enquiries within a short time. The legal basis is Art. 6(1)(f) GDPR.

The legal basis is Art. 6(1)(b) GDPR if the enquiry relates to a contract or its preparation, and otherwise Art. 6(1)(f) GDPR based on our legitimate interest in answering it.

We keep this data until your enquiry has been dealt with and no retention obligations prevent its deletion. Invoices and other documents that we must keep under tax law are stored on the basis of Art. 6(1)(c) GDPR for the statutory periods of six, eight or ten years (Section 147 of the German Fiscal Code, Abgabenordnung; invoices as accounting vouchers: eight years).

For an enquiry we need your name and email address as well as details of the vehicle and the ECU; for an order we also need the file or the ECU. You are not obliged by law or contract to provide them. Without this information, however, we cannot process your enquiry or prepare a report.

We forward enquiries from the chat to ourselves by email and also store a backup copy on our server so that no enquiry is lost due to a fault in email delivery.

Some pages contain links to other websites, for example, in the legal notice, to the Chamber of Crafts and to gesetze-im-internet.de. These are plain links – no content from these websites is embedded in our pages, and no data flows to them when you simply visit our pages. Only when you click on such a link do you reach the respective provider, and its privacy policy then applies.

9. No cookies, no tracking

This website does not store any cookies on your device. Only the “View log file” tool saves anything in your browser’s storage: whether you have switched on “Expert” there and, if you have a recording analysed, briefly the log file for the enquiry form (see section 6). The file only reaches us when you send the enquiry. We do not use any analytics, audience measurement or advertising services and do not create user profiles. Fonts, images and program code are loaded exclusively from our own server.

The chat conversation only exists while the page is open; if you reload the page, the conversation starts again from the beginning.

10. Your rights

You have the following rights in relation to us:

  • Access to information about which data we process about you (Art. 15 GDPR)
  • Rectification of incorrect data (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection to processing based on a legitimate interest (Art. 21 GDPR)

To exercise these rights, an informal message to info@tuningcheck.de is enough.

Your right to object (Art. 21 GDPR). Where we process your data on the basis of our legitimate interest (Art. 6(1)(f) GDPR) – for example server logs, protection against misuse, the chat and usage statistics – you can object to this processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

There is no decision based solely on automated processing, including profiling, within the meaning of Art. 22 GDPR. The partly AI-assisted analysis prepares the findings; Maik Schneider checks the result and the report and takes responsibility for them.

Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:

Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg (Brandenburg data protection supervisory authority)
Stahnsdorfer Damm 77
14532 Kleinmachnow

11. Changes to this policy

We update this privacy policy as soon as the processing on this website changes – for example because a new function is added. The version published here applies in each case.

Last updated: November 2026