Privacy Policy

1. Who is responsible

Maranello Ventures B.V., trading as Maranello Data, is responsible for the personal data described in this policy. “We”, “us” and “Maranello Data” mean Maranello Ventures B.V.

• Registered address: Energiestraat 33, 1411 AS Naarden, the Netherlands.
• Chamber of Commerce (KvK): 99417952.
• Privacy enquiries: hello@maranellodata.com.

This policy covers the website, free look-up requests, enquiries and services arranged with our team. It also explains how we handle information about people that appears in car-history sources, including people who have never contacted us.

2. How the current service works

You can browse the public website without an account. A free look-up asks our team to check what information is available for a chassis number. We review the request and arrange the reply directly. Submitting it does not create a paid order.

Other enquiry tools prepare an email draft in your email application. You choose whether to send it. Those tools do not submit an order or payment to us. Customer accounts, automatic checkout and passwordless customer login are not currently offered on this website.

We do not require your name for a free look-up. An email address, chassis number and your relationship to the car are required; a research question is optional. Further information may be needed to agree and fulfil a paid commission or verify an owner's authority.

3. What we collect and why

Free look-ups and enquiries

We handle your email address, the submitted chassis number, your relationship to the car, an optional question and the correspondence that follows. We also keep a request reference, timestamps, review status, relevant research notes, the approved summary and records of changes to the request.

We use this information to respond, check the available material, avoid duplicate requests and organise our work. The legal basis is taking steps at your request before a possible contract, where applicable, and our legitimate interest in answering enquiries and operating a reliable research service. A free look-up is not consent to marketing.

Commissions and payment administration

If you commission a file or investigation, we handle the contact and car information needed to agree and deliver it, the agreed scope, price, delivery arrangements, correspondence and relevant payment or invoice records. The legal bases are performance of the contract and applicable accounting and tax obligations. Any payment method and information needed for it are explained when we agree the order. This website does not collect payment-card details.

Contributions and rewards

If you send material, we handle the material, your contact details, statements about its source and rights, and correspondence about permitted use, credit and any payment. We use this to evaluate the contribution and agree its use. The legal bases are steps towards and performance of the relevant agreement, and our legitimate interests in checking sources and maintaining the historical record. Permission to identify you publicly is handled separately.

Launch announcements

If you explicitly ask for a launch announcement, we handle your email address and a record of that request or consent for that purpose. You can withdraw the request by emailing us. A look-up or purchase does not automatically add you to a newsletter.

Website operation

Our hosting services may process technical request information, such as an IP address, browser information, requested URL and timestamp, to deliver the website, maintain security and investigate faults or abuse. Our legitimate interest is operating and protecting the service. Browser preferences and storage are explained in section 8.

We do not sell personal data or use it for automated decisions producing legal or similarly significant effects.

4. People in car-history records

Sources can contain names of past owners, dealers or drivers; dates and places of deliveries, sales, registrations and events; and photographs or documents showing or naming people. We obtain material from archives, researchers, publications, publicly available sources and contributions from owners and enthusiasts.

Where personal data is needed to research a car's history, we assess our legitimate interest in a reliable historical record against the person's rights and reasonable expectations. An old or publicly available source does not by itself give us unrestricted permission to use personal data.

Customer Chassis Files are private. Separately selected editorial stories, photographs and examples may be published on the public website after review. Public stories are different from a customer's private file or free look-up summary.

• We minimise personal information in the records we deliver or publish, and keep source qualifications with the relevant account.
• We do not identify current owners or contributors publicly without their agreement.
• Private individuals in a car's history are ordinarily described by role and period. Naming someone requires a separate assessment of the source, relevance and lawful basis; being a public figure is not blanket permission.
• Source material may contain addresses or other private information. It must be handled with restricted access and reviewed for redaction before any permitted disclosure.
• Sending us a document for review does not automatically authorise publication of the document or the people named in it.

If information about you comes from someone else, the applicable transparency duties also apply. Where we rely on an exception to individual notification, we must assess and document why it applies and the safeguards needed. This policy is not a blanket exemption from those duties.

If you appear in a record, contact us with enough information to identify the account concerned. You can ask what we hold, seek a correction or request deletion, restriction or consideration of an objection. We assess the request under applicable law; historical interest does not automatically override your rights.

5. Who can receive information

Information is available to the people and service providers who need it for the relevant purpose. Google Cloud provides the website hosting and Firestore storage used by the service. Email correspondence also passes through the email services used by us and by the sender. Hosting, communications, accounting and payment providers may process information needed for their particular role.

Research queries should disclose only what is necessary, such as a chassis number and the research question. We do not routinely identify the person making an enquiry to an archive or researcher. If a commission requires personal information to be shared with another party, its purpose and scope must be considered and explained.

Private summary links

A free look-up summary may be provided through an individual link with an expiry. Anyone who has that link can read the summary until it expires or is withdrawn. It is not a customer login and does not grant access to a customer's underlying documents. Share it only with people you choose and contact us if it should be withdrawn.

Paid-file delivery and permitted sharing are agreed with the team.

We may disclose information where required by law, to establish or defend legal claims, or in connection with a lawful business transfer, subject to applicable safeguards and information duties. We do not share personal data with advertisers.

6. Retention and international processing

We retain personal information for the relevant purpose and for any applicable legal obligations. The criteria differ by record:

• Look-ups and correspondence: the time needed to review, answer and follow up the request, document what was agreed and resolve any outstanding complaint or claim.
• Commission records: delivery and the agreed checks-and-alerts period, together with any necessary record of the contract and its performance.
• Accounting records: the applicable statutory retention period. Dutch basic business records are generally retained for seven years; specific records can have different requirements.
• Launch-announcement requests: the purpose of the announcement and any necessary evidence of consent or withdrawal; the request is not an indefinite marketing subscription.
• Historical source material: its continuing research purpose, lawful basis, relevance, the need to identify a person and appropriate safeguards. Historical material is not retained indefinitely without considering those factors.
• Technical logs and safeguards: the operational or security need, the configured provider retention and any incident that needs investigation. Browser-storage periods are listed below.

Expiry of a summary link ends access through that link; it does not itself erase the underlying request or source material. You can ask us about the retention applying to your information.

Maranello Data is based in the Netherlands. Our service providers may process information in other countries. Where a transfer outside the European Economic Area is involved, it must have a lawful transfer mechanism, such as an applicable adequacy decision or appropriate contractual safeguards, and any necessary supplementary measures. Contact us for the destinations and safeguards applicable to your information. We do not promise that all processing stays within the EU.

7. Security

We use measures appropriate to the information and risk, including restricted service access and individual, expiring summary links. Public website access and any website-preview password are separate from access to private summaries. We limit the information placed in a summary and exclude internal notes and contact details from its content.

No system can be guaranteed perfectly secure. We handle personal-data incidents and notify the relevant authority or affected people where required by applicable law.

8. Cookies and browser storage

We use browser storage for necessary functionality and preferences. The current website does not load Google Analytics, PostHog or advertising trackers.

• Cookie preferences: your choice is stored in local storage for up to 180 days. You can revisit it using Cookie settings in the footer. Allowing analytics does not currently activate a tracking tool.
• Register navigation: limited public browsing context, such as a selected public car and return position, is kept in tab-session storage. It is used for up to 12 hours and does not store your private look-up request.
• Restricted preview: when an authorised visitor signs in to a website preview, a session cookie is used for that access. It is not a customer-file account.

You can remove local preferences through your browser settings. Features may then ask for the preference again. If we introduce optional analytics, it must remain off until the required consent is given, and the provider and processing information must be updated.

9. Your rights

Subject to the conditions in applicable law, you can ask to access or correct your personal data, have it erased, restrict processing, object to processing based on legitimate interests, and receive portable data where that right applies. Where we rely on consent, you can withdraw it without affecting processing that was lawful before withdrawal.

Email hello@maranellodata.com. We may need proportionate information to establish your identity and locate the record; do not send identity documents unless we explain why they are necessary. We normally respond within one month. If a lawful extension is needed for a complex request, we explain it within that first month.

You can complain to the Dutch Autoriteit Persoonsgegevens or another supervisory authority competent under applicable law. Other local privacy rights may also apply. We do not sell personal data or share it for cross-context behavioural advertising.

10. Children, changes and contact

The service is intended for adults. If you believe a child has supplied personal information, contact us so that we can review and address it.

We update this policy when the service or relevant processing changes. The date above identifies this version. For material changes, we provide further notice where appropriate or legally required; a policy change does not authorise an incompatible new use of existing data.

Maranello Ventures B.V., trading as Maranello Data, Energiestraat 33, 1411 AS Naarden, the Netherlands. KvK 99417952. hello@maranellodata.com.