Privacy and cookies

Data controller

Controller: ClockwiseIT (KvK 71214364), email contact@autoseeker.eu. autoseeker is published by ClockwiseIT; the responsible publisher is Dennis de Kruijf. See colophon and contact for the full company details.

Statistics

We use cookieless statistics (Plausible). No cookies, no personal data stored, no cross-site profiles. So no consent banner is needed. If advertising is added later, a consent choice with an equivalent refuse button appears first, and advertising cookies only after consent.

Review form: what we process

Reviews are submitted anonymously. On send we process exactly:

• the chosen model, the title, the text and an optional figure (1-5);
• an optional email address, solely for a possible verification question. Not published. Not used for anything else.
• an irreversibly hashed IP trace (SHA-256 with a fixed, non-public salt), for spam mitigation and a simple rate limit.
• the browser string (user agent), truncated, also against abuse only.
• the time of submission and, after moderation, the time of assessment.

No raw IP is kept, only the irreversible hash. No name asked; reviews appear anonymously. Do not enter personal data or licence plates in the text. The admin (Dennis de Kruijf) receives a notification email for moderation; nothing goes to third parties.

Legal basis

Consent (the mandatory agreement checkbox on the form, GDPR art. 6(1)(a)) for processing and publishing the review. Legitimate interest (GDPR art. 6(1)(f)) for the hashed IP and user-agent, solely for spam mitigation. Consent can be withdrawn via the contact address; that does not affect prior lawfulness.

Retention periods

A published review stays as long as the model page exists. Submissions not published (rejected or permanently queued), with any email and anti-abuse data, are deleted within 6 months. To remove a submitted review, email the contact address.

Processors

The form and its storage run on our hosting environment (acts as processor for storage and email). Statistics run via Plausible (cookieless). No further sub-processors.

Your rights (GDPR)

Access, correction, deletion, restriction and objection for data traceable to you. Because we keep almost nothing, in practice this is limited to a submitted review and any attached email. The hashed IP trace is not person-traceable to us. The Dutch Data Protection Authority is the competent supervisor.

External links

Outgoing links (source citations, advertising, affiliate) lead to sites with their own privacy policy. Affiliate links carry rel="sponsored"; see transparency.

Last revised: 21 May 2026.