Cartax.be
fr nl en

Privacy Policy

1. Data Controller & Scope

This Privacy Policy applies to the CarTax widget and its associated pages (hereinafter "the Publisher"). It outlines how we handle data during the use of our Belgian automotive tax simulator.

2. Data Processed

CarTax does not collect identifiable personal data (such as name, email address) by default. The simulator processes solely the technical parameters entered by the user, for example: region, vehicle type, fuel powertrain, power (kW), engine displacement (cc), vehicle age, leasing status (yes/no), LPG (yes/no), CO₂ emissions, gross vehicle mass (GVW/MMA), list price, fuel card, corporate tax rate, etc.

These parameters are used exclusively to calculate fiscal results (TMC/BIV registration tax, annual road tax, company car benefit in kind ATN/VAA, corporate tax impact). They do not allow direct personal identification.

3. Local Storage (localStorage)

To enhance the user experience, CarTax may store simulation scenarios in your browser's localStorage (active tabs, last selected parameters…). This data remains on your device under your exclusive control and can be cleared at any time via your browser settings.

4. Server-Side Processing (API)

If the integrator enables server-side calculation, only the technical parameters required for the tax computation are transmitted.

API responses contain only the calculated tax amounts (e.g., TMC, road tax) and potential technical calculation notes. The API must not be used to collect personal data without a valid legal basis and appropriate consent.

5. Cookies & Third-Party Tools (Google Analytics, Google Ads, Hotjar)

CarTax does not install advertising cookies by itself. However, the integrating host website may deploy third-party analytics and measurement tools:

  • Google Analytics: audience measurement (page views, user journeys, simulator interactions). Recommended implementation: IP anonymization, restricted data retention, full consent enforcement.
  • Google Ads: conversion tracking and campaign optimization. Requires Consent Mode where activated, and prior consent for marketing cookies.
  • Hotjar: UX analysis (heatmaps, user feedback, optional session recordings). Configured to prevent capturing personal data and adhering strictly to user consent.

Consent & Management

The activation of analytical and marketing cookies is strictly subject to your prior consent, collected via a compliant Consent Management Platform (CMP) cookie banner. You can accept, refuse, or withdraw your consent at any time via the cookie settings on the site.

6. Sharing & Recipients

The technical parameters entered are used exclusively for calculation purposes and are never sold or transferred to third parties. When third-party tools (Analytics/Ads/Hotjar) are enabled by the host website, certain technical information may be transmitted to them in accordance with their respective privacy policies.

7. Security

We implement reasonable and appropriate technical safeguards (TLS/HTTPS encrypted transit, server-side access restrictions, strict data minimization). The integrator agrees to secure the API endpoint, protect API keys/tokens, and keep software components up to date.

8. International Data Transfers

Certain service providers (Google, Hotjar) may process data outside the EU/EEA. In such cases, appropriate mechanisms (such as European Commission Standard Contractual Clauses and supplementary measures) are put in place by these providers. Refer to their policies for detailed specifications.

9. Data Retention Periods

  • localStorage: persists until you clear your browser cache or use the "Reset" feature in the simulator.
  • Server logs (API): limited retention strictly for security diagnostics and abuse prevention (period set by the integrator, typically 30–90 days).
  • Analytics/Marketing cookies: retention periods configured by the integrator and/or third parties, subject to your prior consent.

10. Your Rights (GDPR)

Because CarTax does not collect identifiable personal data by default, standard GDPR rights (access, rectification, erasure, restriction, objection, portability) are generally not applicable. If personal data were collected by the integrating website (e.g. via a contact form), you may exercise your rights directly with the Publisher.

You also have the right to lodge a formal complaint with the supervisory authority: the Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données - APD/GBA) in Belgium.

11. Amendments

This Privacy Policy may be updated to reflect service updates or statutory legal requirements. The most recent version is always published on this page. Continued use of CarTax constitutes acceptance of the revised policy.

Last updated : October 3, 2026.