Tovak Privacy Policy

Last updated: April 22, 2026

1. Who We Are (Data Controller)

Website: https://www.tovak.com
Tovak operates an online platform that connects users with roadside assistance and towing service providers (“Providers”).

Data Controller: Tovak
Email: [email protected]

2. What Personal Data We Collect and Why

2.1 Provider Data
  • Business name
  • Phone number
  • Email address
  • Business description
  • Parking address (including postal code)
  • Website
  • Vehicle photos

Purpose: Display Providers and enable user contact
Legal basis: Contract, Legitimate Interest

2.2 Location Data

Providers: Last known location (stored up to 1 hour, publicly visible)

Users: Approximate location (<3 km²)

Purpose: Match users with nearby Providers
Legal basis: Legitimate Interest / Consent

2.3 Device & Technical Data
  • IP address
  • Browser type
  • Device identifiers
  • Operating system
2.4 Usage Data (Analytics)
  • Pages visited
  • Interaction data
  • Referrer URLs
2.5 Comments

We collect data shown in the comment form, plus IP address and browser user agent for spam detection. Approved comments display the name publicly.

2.6 Media

Uploaded images may contain location data (EXIF GPS) which can be extracted by others.

2.7 Cookies

We use cookies for authentication, preferences, security, and analytics.

  • Login cookies (up to 2 weeks)
  • Comment cookies (1 year)
  • Session cookies

You can disable cookies in your browser settings.

2.8 Security Logs

We log IP addresses, login attempts, and user activity for security purposes. Retention period: 14 days.

3. Embedded Content

Pages may include embedded content (videos, social media). These services may collect data and track interactions according to their own privacy policies.

4. Who We Share Your Data With

Public Provider Data

The following data is publicly accessible: business name, phone, description, address, website, photos, and location.

Service Providers

We may share data with hosting, analytics, and security providers (e.g., brute-force protection, malware scanning).

5. International Data Transfers

Data may be transferred outside the EEA with appropriate safeguards such as Standard Contractual Clauses.

6. Data Retention

  • Security logs: 14 days
  • Comments: indefinitely
  • Provider data: until deletion request
  • Analytics data: as needed

7. Your Rights

You have the right to:

  • Access your data
  • Correct inaccurate data
  • Delete your data
  • Restrict processing
  • Data portability
  • Object to processing

Contact us at [email protected]

8. Data Protection

We implement security measures including access control, monitoring, and protection against unauthorized access.

9. Data Breach Procedures

In case of a breach, we investigate, mitigate, and notify users and authorities where required.

10. Third-Party Data Sources

We do not receive personal data from third-party brokers or advertisers.

11. Automated Decision-Making

We do not use automated decision-making or profiling with legal effects.

12. Regulatory Disclosure

Tovak is a platform connecting users with independent service providers and does not directly provide towing services.

13. Where Your Data Is Sent

Security-related IP data may be shared with protection services. Comments may be processed by spam detection systems.

14. Contact

Email: [email protected]