Global Privacy & Cross-border Transfer Consent

[Required] Article 1 (Purpose & Items of Personal Data Collection and Use)

The Company collects and processes the following data through its customer support platform (Zendesk) to provide technical support, diagnose vehicle software/hardware defects, and analyze diagnostic error logs:

• Collected Items: Full name, email address (distributor/technician), distributor/dealer code, software/app version, scanner/VCI Serial Number (all GIT diagnostic/VCI hardware with serial numbers), 17-digit Vehicle Identification Number (VIN), and vehicle details required for ticket resolution.
• Purpose of Use: Error log analysis, defect tracking, responding to technical inquiries, and remote diagnostic troubleshooting and case management.
• Retention Period: Retained until the purpose of collection is fulfilled or until the statutory retention period expires.

[Required] Article 2 (Data Minimization, 17-Digit VIN Processing & Pseudonymization)

In accordance with EU GDPR and data protection principles, the Company practices strict Data Minimization:

• For automated log synchronization (FindYourLog) and long-term statistical retention, the Vehicle Indicator Section (VIS, last 6 digits) of the VIN is masked with asterisks (******) and stored in pseudonymized form.
• [Diagnostic Exception] However, when you submit a 1:1 technical support ticket requiring exact vehicle specification matching, ECU compatibility verification, or root-cause defect analysis, the full 17-digit VIN you provide is processed in encrypted form and pseudonymized or destroyed without delay once the support purpose is fulfilled.
• This safeguard ensures compliance with regional data localization mandates (including CIS/EEU) and prevents direct identification of data subjects during cross-border transfers.

[Required] Article 3 (Data Processing Delegation & Cross-border Transfer Consent)

To operate centralized global customer support and R&D escalation systems, your personal data is transferred internationally to the following recipients:

• Recipients: GIT Co., Ltd. (HQ R&D and Global Technical Support Divisions, Republic of Korea) and Zendesk, Inc. (Cloud customer support platform provider).
• Destination Countries: Republic of Korea (recognized under the EU GDPR Adequacy Decision), United States, and Ireland (including jurisdictions outside the EU/EEA).
• Transfer Timing & Method: Real-time encrypted transmission (HTTPS/TLS) upon submitting a Help Center request or chatbot support inquiry.
• Purpose of Transfer: Receiving customer inquiries, monitoring error logs, managing HQ R&D escalation workflows, and administering support tickets (Cases).
• Safeguards: All transferred data is encrypted in transit and at rest and protected under our signed Data Processing Agreement (DPA, Contract ID: 98326de1-af6c-4df3-ab26-b13a69b98cf1) incorporating EU Standard Contractual Clauses (SCCs), Binding Corporate Rules (BCRs), and the EU-U.S. Data Privacy Framework (DPF).

[Required] Article 4 (Retention Period & Destruction)

Collected personal and diagnostic data is retained only until the support purpose is achieved or applicable statutory retention periods expire, after which it is promptly destroyed or permanently anonymized in accordance with our Data Retention Policy.

Article 5 (Right to Refuse or Withdraw Consent & Consequences of Refusal)

You have the right to refuse consent to the collection, use, and cross-border transfer of your personal data, and you may withdraw your consent or request access/deletion at any time by contacting gitas@gitauto.com. However, because these items are essential for vehicle diagnostics and global technical support, refusing consent will restrict ticket submission and remote diagnostic A/S support. (Browsing and searching Help Center FAQ articles via the website or AI chatbot remains available without consent.)