Privacy & Cookie Policy
Last updated: 4 November 2026
This policy explains how we process your personal data when you use the powerlab.works website and dealer portal, or contact us by phone, WhatsApp or e-mail. It is prepared under the EU General Data Protection Regulation (GDPR) and Turkish Personal Data Protection Law No. 6698 (KVKK).
1. Data controller
Powerlab Works OÜ
Registry code: 14811825
Address: Sakala 7-2, 10141 Tallinn, Estonia
E-mail: info@powerlab.works
Turkey contact point: Powerlab Works HQ Türkiye, Kazımdirik Mah. 283. Sk. No:3/A, 35100 Bornova / İzmir — Phone/WhatsApp: +90 532 786 66 35
2. What data we process
- Contact data: Name, phone number, e-mail address and the content of your WhatsApp/phone/e-mail communication.
- Vehicle data: Make, model, engine details, VIN (if you provide it) and ECU software files of your vehicle.
- Dealer portal data: Company name, contact person, e-mail, country, address, tax/VAT number, uploaded and delivered files, order, invoice and payment records.
- Technical data: IP address, browser and device information, server logs.
- Cookie data: Advertising measurement cookies only if you consent (see Section 5).
We never receive your card details; online payments are processed directly by PayPal or Stripe.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Answering your request, giving quotes, delivering our services | Performance of a contract (GDPR Art. 6(1)(b)) |
| Invoicing, accounting and tax obligations | Legal obligation (GDPR Art. 6(1)(c)) |
| Security of the website and portal, preventing abuse | Legitimate interest (GDPR Art. 6(1)(f)) |
| Measuring the effect of our ads (Google Ads) | Consent (GDPR Art. 6(1)(a)) |
4. Who we share data with
We do not sell your data. We only share it with service providers needed to run our services:
- Our server/hosting provider
- Google (Google Ads measurement — only with your consent)
- Meta (WhatsApp messaging)
- PayPal and Stripe (online payments)
- GoDaddy (business e-mail)
- SimplBooks (invoicing and accounting)
- Public authorities where legally required
Some of these providers are located outside the EEA (e.g. in the USA). Such transfers are based on the European Commission's Standard Contractual Clauses or other safeguards permitted by GDPR.
5. Cookies
- Strictly necessary preference record: We store a pl_consent entry in your browser to remember your cookie choice.
- Advertising measurement (Google Ads): Only activated if you click "Accept" in the cookie banner. If you reject, Google Consent Mode ensures no advertising cookies are set.
You can change your choice at any time via the "Cookie settings" link at the bottom of every page, or delete/block cookies in your browser settings.
6. How long we keep data
- Communication records: up to 2 years after your request is completed.
- Uploaded and delivered ECU files: up to 2 years, then deleted.
- Invoices and accounting records: 7 years, as required by Estonian accounting law.
- Cookie preference: in your browser until you delete or change it.
7. Your rights
Under GDPR you have the right to access, rectify and erase your data, to restrict or object to processing, to data portability, and to withdraw your consent at any time (without affecting prior processing).
Send your requests to info@powerlab.works; we reply within 30 days. You may also lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or your local supervisory authority.
8. Changes
We may update this policy when needed. The current version is always published on this page.