Privacy policy

Autofiscaliteit is published by Sami Elhamdaoui, Belgium. For anything to do with your data, you can reach us at contact@autofiscaliteit.com.

The distinction matters for your rights, which is why it comes first.

Your account details (your email address, your name, your company name and optionally your company number) we process as data controller. Without them you cannot sign in and we cannot tell your company apart from any other.

The data you enter about your fleet we process as data processor, on behalf of your company. Your company decides what is entered and remains responsible for it. We use that data solely to show the calculation to the users of your company, never for anything else, and never to pass it on to third parties.

The vehicle form has an employee field and a number plate field. Both are personal data, and both are entirely optional: the calculation works exactly the same if you leave them empty or enter an internal code such as “car 3”.

Our recommendation is therefore not to fill them in. Not collecting personal data is simpler than protecting it.

• Account: email address, name, password (stored encrypted; we cannot read it).
• Company: company name, optionally the company number, and which users belong to it.
• Fleet: the technical and financial details you enter yourself, plus the optional fields above.
• Saved comparisons: the title, the note and the outcome of decisions you save.
• Technical: the session cookie that keeps you signed in, and the standard server logs of our hosting providers.

The application runs on Vercel and the database on Supabase. We deliberately choose storage within the European Union. Both suppliers act as sub-processors and are contractually bound by the GDPR.

There are no other recipients. We do not sell data, we do not share it with advertisers, and there is no advertising or tracking network built into the application.

Autofiscaliteit sets only the cookies needed to keep you signed in. There are no analytics, advertising or tracking cookies. That is also why you see no cookie banner here: strictly necessary cookies do not require consent.

For as long as your account exists. If you delete your company, the company, all user accounts, all vehicles and all saved decisions are deleted immediately and permanently. Backups held by our suppliers disappear within thirty days.

You have the right to access, rectify, erase, restrict and port your data, and you can object to the processing.

Two of those you can exercise straight away, without asking us: in your settings you change your company details and delete your company with all the data in it. For the rest, a message is enough.

If you disagree with how we handle your data, you can lodge a complaint with the Belgian Data Protection Authority, Drukpersstraat 35, 1000 Brussels.

Each company sees only its own data. That separation does not live in the website but in the database itself: every query there is constrained to the company from your session. Traffic runs exclusively over HTTPS and passwords are stored hashed.

If you do spot a security problem, please let us know before making it public. We will be grateful.