Privacy policy

Last updated 1 November 2026

This policy explains what personal data gjejvetura.com collects, why, who it is shared with, and what rights you have over it.

Who is responsible for your data

Gjej Vetura SHPK, Aktash, Prishtina, Kosovo, is the company that decides how data collected through gjejvetura.com is processed.

For any question or request about your data, write to [email protected].

What we collect

We collect only what you give us or what arises from using the site:

Your account. An email address is required. Name, phone number and address are optional and stored only if you add them. Signing in uses a link sent to your email; a password is optional and, if you set one, is stored only in hashed form.
Enquiries and custom orders. When you ask about a car or request one, we store your name, phone, email if given, your message, the car you asked about, and the preferences you select (make, model, budget, year, fuel).
Orders in progress. For cars you order we store status, dates and shipment tracking details, along with photos and documents belonging to that order.
Saved searches and favourites. If you save a search we store its criteria and email you when matching cars appear. If you mark cars as favourites we store that list.
Technical data. The server logs incoming requests, as any website does. We do not build advertising profiles and we do not sell data.

Why we use it

To reply when you ask about a car.
To fulfil and track your orders.
To send alerts for searches you saved yourself.
To keep your account and sign-in session working.
To understand which pages are viewed most, in aggregate.

We do not use your data for personalised advertising and do not share it with ad intermediaries.

Cookies

The site sets these functional cookies:

`kcars_customer` — keeps you signed in.
`kcars_favorites` — keeps your favourites list without an account.
`NEXT_LOCALE` — remembers your chosen language.
`kcars_theme` — remembers light or dark appearance.
`kcars_admin` — only for our own staff sign-in.
`kcars_consent` — remembers your answer about analytics cookies, for 6 months.

These are needed for the site to work and are set without consent.

Google Analytics cookies (`_ga`, `_ga_*`) are set only if you accept them in the cookie notice. You can change your choice at any time from the Cookie settings link at the bottom of every page; withdrawing consent deletes those cookies.

Analytics

We use Google Analytics 4 to measure how many people visit and which pages they view. Google processes this as a service provider for us. We do not combine analytics with your account, and we do not run the Facebook advertising pixel.

If you don't accept analytics cookies, Google Analytics sets no cookies and the page sends Google only cookieless signals (for example, that a page was opened). These don't link you across visits and only let us estimate overall visit numbers. No advertising signals are sent, whatever you choose.

Our admin panel is deliberately excluded from measurement, because internal company work is not visitor traffic.

Who we share it with

We do not sell your data. We share it only with the providers needed to run the site, and only for that purpose:

Hetzner (Germany) — server and database.
Cloudflare — site delivery and storage of car photos.
Resend — sending email (sign-in links, search alerts).
Google — visit analytics.

We may also share data where the law requires it.

Facebook and Instagram

We publish cars to our own Facebook page and Instagram account through Meta's official interface. That process sends only photos and details of cars in our inventory — it sends none of your data and receives nothing from your social media profiles.

If you interact with our posts on Facebook or Instagram, that interaction is governed by Meta's privacy policy, not this one.

Where data is stored

The server and database are in Germany, inside the European Union. Photos are stored on Cloudflare's network. Email goes through Resend and analytics through Google, which may process data outside the EU under their standard safeguards.

How long we keep it

Account and orders — for as long as you keep your account, and after closing it for the period tax and accounting law requires for sales records.
Enquiries without an order — up to two years after the last contact.
Email sign-in links — expire shortly after being sent.

When data is no longer needed for the purpose it was collected for, we delete it.

Your rights

Under Kosovo's personal data protection law, and under the GDPR for visitors from the European Union, you have the right to:

request a copy of the data we hold about you;
have inaccurate data corrected;
request deletion of your data;
withdraw consent for email alerts at any time;
object to processing or ask us to restrict it.

Write to [email protected] and we will respond within 30 days. You can delete saved searches yourself from your account, and turn alerts off there.

Vehicle data

Vehicle data — specifications, photos, accident history and inspection reports — comes from the Korean platform Encar and from each car's official Korean documents. This is not personal data about visitors to this site.

Changes

If we change this policy we update the date at the top of this page. Material changes will be emailed to you if you have an account.