Privacy Policy

1. Who we are

ECAH (European Contemporary Automotive Heritage) is a non-profit association registered in Europe. Our website is autoheritage.eu. This privacy policy explains how we collect, use, and protect your personal data when you use our platform.

2. Data we collect

We collect minimal data necessary to operate the archive and communicate with our community:

• Newsletter subscriptions: Email address only. Used exclusively to send archive updates and editorial content.
• Contact form submissions: Name, email, organization (optional), message content, and inquiry type selections.
• Analytics: Anonymous usage data (pages viewed, time on site) through privacy-respecting analytics. No personal identifiers are tracked.

3. How we use your data

• To send newsletter updates about new archive entries, journal articles, and Auto Heritage developments
• To respond to contact form inquiries
• To improve the archive based on anonymous usage patterns
• We never sell, rent, or share your personal data with third parties for marketing purposes

4. Data storage and security

Your data is stored securely using industry-standard encryption. Newsletter subscriptions and contact form data are stored in our database hosted within the European Union. Images and static assets are served through Cloudflare's global CDN network.

5. Your rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the right to:

• Access — Request a copy of the personal data we hold about you
• Rectification — Request correction of inaccurate data
• Erasure — Request deletion of your personal data
• Portability — Request your data in a machine-readable format
• Withdraw consent — Unsubscribe from the newsletter at any time via the link in every email

6. Cookies

Auto Heritage uses only essential cookies required for the website to function. We do not use advertising cookies, tracking pixels, or third-party cookies for marketing. See our Cookie Policy for details.

7. Third-party services

• Cloudflare — CDN and security (processes IP addresses for DDoS protection)
• Vercel — Hosting platform (processes server logs)
• Logo.dev — Brand logo rendering (no personal data shared)

8. Contact

For privacy-related requests, contact us at privacy@autoheritage.eu or through our contact form.