Privacy Policy & GDPR Statement
How DIYPEV.com collects, processes, protects, and respects personal data in compliance with the EU General Data Protection Regulation (GDPR) and ePrivacy regulations.
This Privacy Policy governs how DIYPEV.com ("we", "us", or "our") collects, processes, and protects information gathered from visitors and users ("User" or "you") of the website https://www.diypev.com.
We are committed to full transparency and protecting the privacy of our visitors. This policy outlines our role as a data controller, what information we collect, the lawful bases we rely on, how your data is handled, and how you can exercise your statutory rights under the GDPR.
1. Data Controller Details (GDPR Art. 13(1)(a))
The data controller responsible for the processing of personal data on DIYPEV.com is:
2. Personal Data We Collect
We collect minimal personal data necessary to operate our website, respond to technical inquiries, and ensure cybersecurity:
- Voluntary Inquiries: Your name, email address, and message content when submitted via our contact form or sent directly to our email.
- Technical Server Logs: Standard web server requests that automatically log your Internet Protocol (IP) address, user agent (browser and device type), timestamp, requested URL path, and referral headers.
- Cookies and Consent Records: Consent status stored locally on your device (`localStorage`) to remember your cookie preferences, as well as cookies set by third-party ad networks if you provide consent.
3. Lawful Bases for Processing (GDPR Article 6)
Under Article 6 of the GDPR, every processing activity must have a valid legal basis. We process your data under the following grounds:
Used for non-essential cookies, analytics, and personalized advertising via Google AdSense. You have the right to grant, decline, or withdraw this consent at any time without penalty.
Used when you send us a message through the contact form. Our legitimate interest is communicating with you and resolving your technical troubleshooting questions or editorial feedback.
Used to process automated server access logs, detect Distributed Denial of Service (DDoS) attacks, block malicious scrapers, and guarantee site stability.
4. Google AdSense & Third-Party Advertising
DIYPEV.com utilizes Google AdSense to serve online advertisements that fund our free repair manuals and component benchmark testing:
- Third-party advertising networks, including Google, use cookies and web beacons to serve ads based on your prior visits to DIYPEV.com or other sites on the web.
- In the European Union (EU/EEA), advertising cookies are only activated if you provide explicit consent via our Cookie Consent banner.
- You can withdraw or update your advertising cookie preferences at any time using our .
- You can also configure personalized ad settings directly through Google Ads Settings or via the European advertising opt-out portal Your Online Choices (EU).
5. Affiliate Referral Programs & External Links
DIYPEV.com participates in affiliate marketing programs (e.g. Amazon Services LLC Associates and AliExpress Partner Program). When you click an external link to purchase recommended tools or replacement parts:
- The merchant may set a referral tracking cookie on your device to attribute the purchase referral to DIYPEV.com.
- No personal identity or payment details are ever received or stored by DIYPEV.com from these merchant transactions.
- Outbound websites operate under their own independent privacy policies.
6. Data Retention Schedule (GDPR Art. 13(2)(a))
We adhere to data minimization and do not store personal data longer than necessary for its designated purpose:
Stored to address questions, after which correspondence is permanently deleted.
Maintained temporarily for security audits and threat mitigation, then overwritten.
Stored locally in your browser to remember your consent preferences across visits.
7. International Data Transfers (GDPR Art. 13(1)(f))
Our content delivery network and service partners (such as Vercel and Google LLC) may operate servers located in the United States and other countries outside the European Economic Area (EEA). Whenever personal data is transferred outside the EEA, we ensure appropriate safeguards are established:
- EU-U.S. Data Privacy Framework (DPF): Transfers to certified US organizations that adhere to validated data protection standards.
- Standard Contractual Clauses (SCCs): Implementation of European Commission approved model contractual clauses ensuring an equivalent level of protection.
8. Your Data Subject Rights (GDPR Articles 15–22)
As a resident of the European Union or European Economic Area, you possess comprehensive statutory rights regarding your personal data:
- Right of Access (Art. 15): Obtain confirmation as to whether your personal data is processed and request a copy.
- Right to Rectification (Art. 16): Request correction of inaccurate or incomplete personal records.
- Right to Erasure / "Right to be Forgotten" (Art. 17): Request deletion of your personal data when no longer required.
- Right to Restriction of Processing (Art. 18): Request that processing be temporarily frozen under specific circumstances.
- Right to Data Portability (Art. 20): Receive your personal data in a structured, commonly used, machine-readable format.
- Right to Object (Art. 21): Object to processing based on legitimate interests at any time.
- Right to Withdraw Consent (Art. 7(3)): You may withdraw previously granted consent at any time as easily as giving it, without affecting processing carried out prior to withdrawal.
To exercise any of these rights, contact us at info@diypev.com. We respond to all legitimate requests free of charge within 30 days.
9. Right to Lodge a Complaint (GDPR Art. 13(2)(d))
If you believe our processing of your personal data infringes data protection laws, you have the statutory right to lodge a complaint with a supervisory authority, particularly in the EU Member State of your habitual residence, place of work, or place of the alleged infringement.
For other European supervisory authorities, consult the directory of the European Data Protection Board (EDPB).
10. Instant Cookie Preferences & Withdrawal
You can view, amend, or revoke your consent for optional tracking and advertising cookies at any moment: