← KolayVignet

Privacy Policy — KolayVignet

In short. We use your data (such as licence plate and e-mail address) only to buy and deliver your e-vignette — not for advertising, and we never sell it.

Last updated: 27 June 2026

1. Who we are (data controller)

KolayVignet is a service that purchases official electronic toll vignettes (e-vignettes) on your behalf on the official government and operator websites of various European countries (Austria/ASFINAG, Hungary, Czechia, Bulgaria and Slovakia). We buy the official vignette in your name / for your licence plate and deliver the confirmation and the official vignette document to you digitally.

The data controller for the processing described in this policy is:

• Company name: KolayVignet
• Chamber of Commerce (KvK) number: 42094534
• Address: Strevelsweg 700 303 G6757, 3083 AS Rotterdam
• E-mail / privacy contact: destek@kolayvignet.com

Do you have questions about this privacy policy or about the processing of your personal data? Please contact us at destek@kolayvignet.com.

2. Which personal data we process

We process only the data necessary to purchase your vignette and deliver it to you:

• E-mail address — to confirm your order, deliver the official vignette document/PDF, and for necessary communication about your order.
• Licence plate data (licence plate and country of registration) — because the vignette is linked to your vehicle / licence plate at the official vignette site.
• Vehicle identification number (VIN/chassis number) — only for the countries that require this for the registration of the vignette.
• Order and payment data — such as the chosen country, the vignette type, the validity period, the order number and the status of your order. The actual payment is processed via Stripe (see below); full card details are processed by Stripe and do not reach us.

We do not process special categories of personal data.

3. Purposes of the processing

We process your personal data for the following purposes:

1. Purchasing and registering the official e-vignette to your licence plate on the official vignette website on your behalf.
2. Processing your payment (vignette price plus a clearly stated service/processing fee of approximately EUR 2) via our payment service provider.
3. Delivering the order confirmation and the official vignette document/PDF by e-mail.
4. Customer service and handling questions or problems with your order.
5. Complying with our legal obligations (such as administrative and tax retention duties).

4. Legal basis

• The processing of your e-mail address, licence plate and (where required) VIN for purchasing, registering and delivering the vignette is based on the performance of the contract you conclude with us (Art. 6(1)(b) GDPR). Without this data we cannot purchase or deliver the vignette; providing it is a necessary condition for concluding and performing the contract. If you do not provide this data, we cannot deliver the service.
• Retaining order, payment and invoice data for the purpose of our administration and tax obligations is based on compliance with a legal obligation (Art. 6(1)(c) GDPR).
• To the extent that we process data to secure our service, prevent fraud or defend our rights, we rely on our legitimate interest (Art. 6(1)(f) GDPR).

We therefore do not base the core processing on your consent. (Your separate, express consent to immediate performance of the service — and the consequent loss of the right of withdrawal — is a separate contractual matter governed by the Terms of Service and does not constitute a legal basis within the meaning of the GDPR.)

5. Recipients and processors

To provide the service, we share your data with the following parties. Where required, we conclude a data processing agreement with our processors.

• The official vignette websites / operators (including ASFINAG (Austria) and the official vignette/toll systems of Hungary, Czechia, Bulgaria and Slovakia) — we pass your licence plate and, where required, your VIN to these parties in order to actually register the vignette to your vehicle. These parties are themselves data controllers for the registration of the vignette under their own terms.
• Stripe (Stripe Payments Europe, Ltd.) — our payment service provider, which processes your payment and payment data. See Stripe's privacy policy for more information.
• Our e-mail / mail-host provider — for sending the order confirmation and the official vignette document to your e-mail address, and for receiving the official document from the operator.

We do not sell your personal data and do not share it with third parties for commercial purposes.

6. Transfers outside the EEA

Your data is, in principle, processed within the European Economic Area (EEA). In certain cases, our service providers (for example Stripe or the mail host) may process data outside the EEA. To the extent this happens, we ensure that appropriate safeguards apply, such as an adequacy decision of the European Commission or the Standard Contractual Clauses; you can request a copy of these safeguards from us at destek@kolayvignet.com. In addition, your licence plate and VIN data is transferred to the relevant national vignette/operator systems in the country for which you buy a vignette; this is inherent and necessary in order to purchase the vignette.

7. Retention periods

We do not retain your personal data longer than necessary:

• Order and delivery data (e-mail, licence plate, VIN if applicable, vignette document): for the period needed to perform the order, support the validity of the vignette and handle any complaints or questions, and thereafter until 12 months after the expiry of the vignette's validity.
• Payment, invoice and administrative data: for as long as legally required under the tax retention obligation (in the Netherlands, in principle 7 years).

After the applicable retention period has expired, your data is deleted or anonymised.

8. Security

We take appropriate technical and organisational measures to protect your personal data against loss, misuse and unauthorised access, such as encrypted connections (TLS/HTTPS), access restrictions and minimising the data processed. Full card details are processed exclusively by Stripe in a PCI-DSS-compliant environment and do not reach us.

9. Automated decision-making

We do not take automated decisions producing legal effects or similarly significant effects concerning you, and we do not apply profiling within the meaning of Article 22 GDPR. The automated purchase of the vignette is a technical execution step and does not constitute automated individual decision-making about you.

10. Your rights

Under the GDPR you have the following rights regarding your personal data:

• Right of access — you may request which data we process about you.
• Right to rectification — you may have incorrect or incomplete data corrected.
• Right to erasure ("right to be forgotten") — you may request deletion of your data, insofar as we are not legally obliged to retain it.
• Right to restriction of the processing.
• Right to object to certain processing, including processing based on our legitimate interest.
• Right to data portability.

You can exercise these rights by contacting us at destek@kolayvignet.com. We respond, in principle, within one month. We may ask you for additional information to verify your identity. Exercising these rights is, in principle, free of charge for you.

11. Complaint to the supervisory authority

If you disagree with how we handle your personal data, you have the right to lodge a complaint with the competent supervisory authority. In the Netherlands this is the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, AP) via autoriteitpersoonsgegevens.nl. You may also turn to the supervisory authority in the EU country where you live.

12. Changes to this privacy policy

We may amend this privacy policy from time to time. The most current version is always available on our website. In the event of material changes, we will inform you where reasonably possible.

13. Contact

For questions about this privacy policy or about the processing of your personal data:

• KolayVignet
• Strevelsweg 700 303 G6757, 3083 AS Rotterdam
• destek@kolayvignet.com