Privacy policy

TURBO EUROPE SAS ("autoKUR", "we") attaches the highest importance to protecting the personal data of visitors to autokur.com. This policy describes what data is collected, for what purposes, and what your rights are, in accordance with Regulation (EU) 2016/679 ("GDPR") and the French Data Protection Act.

1. Data controller

The data controller is TURBO EUROPE SAS, Impasse du Maréchal Gouvion Saint-Cyr, 57360 Amnéville, France — contact@autokur.com.

2. Data collected

• Customer account: identity (first and last name), email address, encrypted password;
• Orders: products ordered, delivery and billing addresses, phone number, purchase history and invoices;
• Payment: handled exclusively by our payment providers; autoKUR never stores bank card numbers;
• Audience measurement: anonymised traffic statistics, collected via cookies only after your consent (section 6).

3. Purposes and legal bases

• Performance of the contract (art. 6 §1 b GDPR): order processing, delivery, customer service;
• Legal obligations (art. 6 §1 c): accounting, invoicing, tax retention;
• Legitimate interest (art. 6 §1 f): website security, fraud prevention;
• Consent (art. 6 §1 a): audience measurement cookies.

4. Retention periods

Account data is kept for the duration of the business relationship and then archived for the applicable legal periods. Invoices and accounting data are kept for ten (10) years (tax obligation). Audience measurement data is kept for a maximum of thirteen (13) months. Exchanges with the AI assistant follow the periods set out in section 8.

5. Recipients of the data

Your data is accessible to authorised autoKUR staff, our hosting provider (OVH SAS), the carriers handling your deliveries the payment providers and, for the AI assistant, Mistral AI (section 8). It is neither sold, nor rented, nor passed on to third parties for commercial purposes. Any transfers outside the European Union are covered by appropriate safeguards.

6. Cookies and audience measurement

The website places cookies that are strictly necessary to its operation (session, cart), which are exempt from consent. Audience measurement (Google Analytics 4) is only activated after your explicit consent, collected through a banner in which accepting and refusing are equally simple. Until you accept, no measurement signal is collected (Consent Mode v2: signals denied by default). Your choice is remembered and can be changed at any time by clearing this website's cookies in your browser.

7. Your rights

You have the rights of access, rectification, erasure, restriction, objection and portability of your data. To exercise them, write to contact@autokur.com, proving your identity. You may also lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).

8. AI assistant

Our AI assistant answers your questions about the catalogue and the shop pages (delivery, terms of sale, legal notice, privacy). It opens only when you choose. Its answers are generated automatically by artificial intelligence and may contain errors: check that a part fits your vehicle before ordering. The assistant only provides information and makes no decision about you.

Your question is cleaned before it is sent or stored: email addresses, phone numbers and licence plates are masked. Names, postal addresses and vehicle identification numbers (VIN) are not masked, so please do not enter them.

• Data processed: your question, the answer, the date, a pseudonymous fingerprint (truncated hash of your IP address and browser), and the cost and status of each answer. A conversation token is kept for 7 days in your browser's local storage so you can resume the thread; it is necessary for the service you request.
• Purpose and legal basis: answering your question and improving the service (legitimate interest, Art. 6(1)(f) GDPR). Questions are reviewed by the site publisher to improve the answers.
• Recipient: Mistral AI, a French company and our processor, receives your question and extracts from the catalogue and shop pages to write the answer. Our data is hosted by OVH in France.
• Retention: questions, answers and conversations are deleted 90 days after the last message. The technical log lines (cost, status, pseudonymous fingerprint, no text) are deleted after 13 months. Deletion is automatic.
• Follow-up: if the assistant cannot find an answer, you may ask to be contacted through the contact form (name, email, message), solely to answer your request. Its retention period is set out in section 4.

You may object to this processing and exercise your other rights as described in section 7.

9. Voice dictation in the AI assistant

If you use the microphone button, your voice is neither recorded nor received by autoKUR: it is converted to text by your browser's speech recognition service (Google for Chrome, Apple for Safari, Microsoft for Edge), only after you click and your browser grants permission, under that provider's terms, which may involve processing outside the European Union. Only the transcribed text reaches us: it is sent when you finish speaking, like a written question. Dictation is optional: you can always type your question.

10. Security

The website is served entirely over HTTPS; access to data is restricted to authorised persons and logged.

11. Updates

This policy may be amended to reflect legal or technical changes; the date of the last update appears at the bottom of the page.

Last updated: 3 October 2026