odochecker.com
Last updated: March 2026
The data controller for personal data collected via the website odochecker.com (hereinafter "the Website") is:
For any questions regarding the processing of personal data or the exercise of the rights described in this policy, the User may contact the data controller via the contact form.
Personal data means any information relating to an identified or identifiable natural person, within the meaning of Article 4 of the General Data Protection Regulation (GDPR - Regulation EU 2016/679).
The Website collects the following personal data, depending on the User's interactions:
Last name, first name, email address.
Last name, first name, email address, phone number, postal address, billing address.
IP address, connection data, behavioural data (pages visited, clicks, visit duration), cookie identifiers.
Personal data is collected and processed for the following purposes:
Legal basis: User consent (Article 6.1.a of the GDPR).
Legal basis: performance of the contract between the Customer and INOVATECH SOLUTIONS LTD (Article 6.1.b of the GDPR).
Legal basis: performance of the contract (Article 6.1.b of the GDPR).
Legal basis: User consent for analytical cookies (Article 6.1.a of the GDPR).
Legal basis: User consent (Article 6.1.a of the GDPR).
Legal basis: legitimate interest of the data controller (Article 6.1.f of the GDPR).
The data controller undertakes not to process data for purposes other than those mentioned above. In the event of new processing, the User's consent will be obtained beforehand.
In accordance with Article 8 of the GDPR, the Website's Services are intended for persons aged 15 or over. Minors under the age of 15 must obtain the consent of their legal representative to use the Website.
Personal data is retained for the period strictly necessary for the purposes for which it was collected:
Upon expiry of these periods, data is deleted or anonymised. The data controller may retain certain data beyond these periods to fulfil its legal or regulatory obligations.
The Website is hosted by Amazon Web Services, Inc. (AWS) on servers located within the European Union. The hosting provider has limited access to data within the scope of its hosting services.
The Website uses the following sub-processors:
| Sub-processor | Purpose | Accessible Data | Transfer outside EU |
|---|---|---|---|
| AWS (Amazon) | Hosting | User data hosted on the Website | No (EU servers) |
| Google Analytics | Traffic analysis | Browsing data, IP address, approximate location | Yes (USA - standard contractual clauses) |
| Google Ads | Customer acquisition | Connection data, conversions | Yes (USA - standard contractual clauses) |
| Meta (Facebook Ads) | Customer acquisition | Behavioural data, user ID | Yes (USA - standard contractual clauses) |
| Snapchat Ads | Customer acquisition | Behavioural data, user ID | Yes (USA - standard contractual clauses) |
| TikTok Ads | Customer acquisition | Behavioural data, user ID | Yes (USA/Singapore - standard contractual clauses) |
| Taboola | Customer acquisition | Behavioural data, IP address | Yes (USA - standard contractual clauses) |
| Outbrain | Customer acquisition | Behavioural data, IP address | Yes (USA - standard contractual clauses) |
| Cookiebot | Consent management | IP address, consent preferences | No (EU servers) |
Each sub-processor is contractually bound to process data in compliance with the GDPR.
Certain sub-processors are located outside the European Union (notably in the United States). These transfers are governed by standard contractual clauses adopted by the European Commission, ensuring an adequate level of protection for personal data.
Data may be disclosed to competent authorities in response to legal, judicial, or regulatory obligations.
The data controller does not sell, rent, or transfer any personal data to third parties.
The data controller implements appropriate technical and organisational measures to ensure the security and confidentiality of personal data, in accordance with Article 32 of the GDPR.
However, no method of transmission over the Internet or method of electronic storage can guarantee absolute security. In the event of a personal data breach likely to result in a high risk to the rights and freedoms of data subjects, the data controller will inform the affected Users and the competent supervisory authority within the timeframes provided by the GDPR.
In accordance with the GDPR (Articles 15 to 22), the User has the following rights over their personal data:
The User may exercise their rights by the following means:
The request must include the User's last name, first name, and email address, and be accompanied by proof of identity. Requests are processed within one (1) month of receipt. This period may be extended by two (2) months in the event of complexity or a high number of requests, in accordance with Article 12.3 of the GDPR.
In the event of difficulty in exercising their rights, the User may lodge a complaint with the competent supervisory authority (for France: CNIL - www.cnil.fr; for Bulgaria: CPDP - www.cpdp.bg).
A cookie is a small text file placed on the User's device (computer, tablet, phone) when browsing the Website. It is used to store certain information relating to the User's browsing.
The Website uses the following categories of cookies:
| Cookie | Purpose | Provider | Category | Duration |
|---|---|---|---|---|
| _ga | Traffic statistics | Google Analytics | Analytical | 13 months |
| _gid | User behaviour analysis | Google Analytics | Analytical | 24 hours |
| _gads | Advertising performance | Google Ads | Advertising | 13 months |
| _fbp | Interaction tracking | Meta | Advertising | 90 days |
| fr | Conversion tracking | Meta | Advertising | 90 days |
| sc_at | Advertising performance | Snapchat Ads | Advertising | 1 year |
| ttclid | Click and conversion attribution | TikTok Ads | Advertising | 13 months |
| taboola_usg | Advertising targeting | Taboola | Advertising | 1 year |
| obuid | Advertising targeting | Outbrain | Advertising | 90 days |
In accordance with CNIL guidelines and Directive 2002/58/EC (ePrivacy), the placement of analytical and advertising cookies is subject to the User's prior consent, collected via the cookie management banner (Cookiebot) displayed upon the first visit. This consent is valid for 13 months.
The absence of action by the User (simply continuing to browse) does not constitute valid consent. No non-essential cookies are placed before consent has been obtained.
The User may modify their cookie preferences at any time:
Refusing analytical and advertising cookies does not prevent access to the Website but may limit certain features.
The data controller reserves the right to amend this policy in order to comply with legislative developments or to adapt its practices. Any amendment will be published on the Website. In the event of a substantial amendment affecting User rights, new consent will be obtained.
This policy is governed by the General Data Protection Regulation (GDPR - Regulation EU 2016/679), Directive 2002/58/EC (ePrivacy) and, subsidiarily, by Bulgarian data protection legislation.
In the event of a dispute, the User may lodge a complaint with the supervisory authority of their habitual residence, place of work, or the place where the alleged infringement occurred, in accordance with Article 77 of the GDPR.
INOVATECH SOLUTIONS LTD - Jawaharlal Neru n.28, Silver Center, fl.2, office 64. 1324 Sofia, Bulgaria - No. 207787211