VIRSystems
← Back to the site

Privacy

How we handle personal data on this website and around VIR and VirAuto. Last updated .

The short version

  • This website sets no cookies of its own and uses no analytics, tracking or advertising. Everything it needs — fonts, images, scripts — comes from this website itself.
  • The contact form does not send anything. It opens your own email app with your details filled in, and you decide whether to send it.
  • If you write to us or call us, we use what you tell us to answer you and nothing else.
  • VIR itself runs on your own computer. Your production and employee data stays there; we don't receive it.
  • VirAuto, our software for car repair shops, also runs on the workshop's own computer. To renew its licence it sends us the workshop's name, email and phone and a few technical details — never its customers, cars, repair orders, money or staff.

Who is responsible

The controller for personal data on this website is VIR Systems, , OIB . For anything about your data, write to . Full company details are in the impressum.

Visiting this website

When you open a page, your browser sends our web host the technical information every website receives: your IP address, the time, the page asked for, and your browser type. The host keeps this in server logs for a short time to deliver the website and protect it from abuse. We don't use these logs to identify visitors. Legal basis: our legitimate interest in running a secure website (GDPR Art. 6(1)(f)). The website is hosted by , a US company certified under the EU-U.S. Data Privacy Framework, which covers any transfer of these logs outside the EU.

Settings saved in your browser

If you switch the language or the light/dark theme, your choice is saved in your browser's local storage so the next page opens the same way. It never leaves your device, holds nothing about you, and you can clear it at any time in your browser's settings. This is not a cookie and needs no consent.

The interactive demo at demo.vir.systems works the same way. It is a separate page with made-up data, and what you do in it is kept only in your browser's local storage, so it can carry on where you left off. Nothing you do there is sent to us; “Start over” in the demo, or clearing your browser data, removes it.

To protect the website from attacks and automated abuse, our host may set a strictly necessary security cookie (for example __cf_bm) for up to 30 minutes. It is used only to tell people from bots, is not used to track you, and needs no consent.

When you contact us

If you email us (including through the demo form) or call us, we receive what you choose to tell us — typically your name, company, email address, phone number and your message. We use it only to answer you, arrange a demo and, if you want one, prepare a quote. Legal basis: steps taken at your request before a contract (Art. 6(1)(b)) and our legitimate interest in answering enquiries (Art. 6(1)(f)).

We keep this correspondence for as long as the conversation needs it and delete it no later than two years after our last contact, unless you become a customer. For customers, correspondence belonging to the contract is kept for its duration, and invoices and other accounting records for as long as Croatian law requires (currently eleven years). We don't send newsletters and we never sell or share your details for marketing.

Our email and phone providers process these messages on our behalf so that they can be delivered.

Downloads

The brochures, the VirAuto free trial and its manuals download directly. You don't have to give any details to get them.

VIR, the software

VIR is installed on a computer in the customer's own building. The work orders, stock, hours, pay rates and employee details recorded in it stay on that computer and in the customer's own backups — they are not sent to us. For that data the customer is the controller.

An installation with a subscription checks its licence with us once a night. It sends the installation's random id, the VIR version, the state of its licence, whether its program files are unchanged, and how many records each paid module holds. It sends no names, usernames, customers, job titles, hours, pay or files. We keep this to renew the licence and to support you.

If we install VIR, train your staff or help when something goes wrong, we may see some of that data while doing so. We then act only on your instructions, as a processor under an agreement (GDPR Art. 28), keep what we see confidential, and take no copies unless you ask us to. VIR comes with its own data-protection guide describing what it stores and how to remove a person from it.

The same applies when we build custom software for you and need to work with your data to do it: we use it only for that work and only on your instructions, under an agreement made for that project.

VirAuto, the software

VirAuto is installed on a computer in the workshop. The customers, cars, repair orders, payments, hours and staff recorded in it stay on that computer and in the workshop's own backups — they are not sent to us. For that data the workshop is the controller.

Every few hours VirAuto checks its licence with our licence server (licence.vir.systems). It sends the installation's random id, the VirAuto version, the state of its licence, whether its program files are unchanged, the versions of Windows and Node.js it runs on, and the workshop's name, email address and phone number as entered in VirAuto's settings, so that we know whose free trial or subscription it is. It never sends anything about the workshop's customers, cars, repair orders, money or staff.

When an installation first connects, the licence server also keeps a one-way hash of the internet address it came from, which cannot be turned back into the address, so that one place can't start more than a few free trials a day. The address itself is not stored.

We use this to issue and renew the licence, to see that an installation keeps working, and to contact the workshop about its trial or subscription. Legal basis: the subscription contract, or steps taken at the workshop's request before one (GDPR Art. 6(1)(b)), and our legitimate interest in preventing misuse of the free trial (Art. 6(1)(f)). The register is stored with our host, , inside the EU. Each check-in is deleted after a year. An installation's entry is kept while it is in use and deleted no later than two years after its last check-in, unless the workshop has become a customer — then what belongs to the contract and the accounts is kept for as long as the law requires.

Your rights

You can ask us what personal data we hold about you and receive a copy, have it corrected, have it deleted, limit how we use it, object to its use, and receive it in a portable format. Write to ; we answer within one month. You also have the right to complain to the Croatian data-protection authority: Agencija za zaštitu osobnih podataka (AZOP), Selska cesta 136, 10000 Zagreb, azop.hr.

Changes

If we change how we handle personal data, we update this page and the date at the top.