Privacy policy
What personal data this website processes, why and on what legal basis – and how you can exercise your rights.
Last updated 29 Sept 2026
Draft – under legal review
1. Who is responsible
The controller within the meaning of the EU General Data Protection Regulation (GDPR) is:
- Company
- YU Auto-Trade Co., Ltd
- Legal form
- [to be confirmed]
- Address
- [street address to be confirmed]
Jeonju, Jeonbuk State
Republic of Korea - Represented by
- [to be confirmed]
- [email address to be confirmed]
- Phone
- +82 10 5556 8394
- Telegram
- @AutoTradeCoLtd
Our representative in the EU under Art. 27 GDPR: [name and address to be confirmed]
We have not appointed a data protection officer. [to be confirmed]
2. When you visit the website
Every time you open a page, your browser sends our server the technical data it needs to deliver that page: your IP address, the date and time, the address of the page, the page you came from and your browser’s identification (user agent).
Our application does not store this data in its database. To protect the enquiry form and the cost calculator from abuse, it counts requests per IP address (for IPv6, per network) over one minute. These counters are kept only in the server’s working memory, are not written to a database or to log files, and are discarded when newer entries need the space or the server restarts.
Whether the web server also keeps access logs, what they contain and how long they are kept: [to be confirmed]
Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is delivering the website securely and keeping it available.
3. Enquiries through our form
When you send us an enquiry through the form on this website, we process:
- your name, if you give it (optional);
- your phone number (required, so that we can contact you);
- your message (optional), for example your budget or the car you are looking for;
- the listing number, if you send the enquiry from a car’s page;
- the language version of the site you used and, if you chose one, the import destination (Russia or Germany);
- the fact that you ticked the consent box, and the date and time of your enquiry.
The form also contains a field that people cannot see. If it is filled in – which only automated programs do – the submission is discarded and nothing is stored.
We use this data to answer your enquiry, to suggest cars that match it and to estimate the cost of delivery and customs clearance. We do not use it for newsletters or advertising, and we do not sell it.
Legal basis: Art. 6(1)(b) GDPR, because your enquiry is a step you have asked us to take before a possible contract. Where an enquiry does not lead to a contract, Art. 6(1)(f) GDPR: our legitimate interest in answering the questions people send us.
Your enquiry is stored in our database on a server in the Russian Federation, provided by [hosting provider to be confirmed]. What this means for data from the EU is explained under Transfers outside the EU.
We do not collect passport details or payment information through this website, and we do not ask for documents here. If you go on to buy a car, those are exchanged directly with your manager.
4. How your enquiry reaches our managers
As soon as your enquiry is saved, our server sends it through the Telegram Bot API to a private Telegram chat of our managers. The message contains your name, phone number and message, and a link to the listing if there is one. If Telegram cannot be reached, the server tries again later; your enquiry stays in our database either way.
Telegram processes this message as part of its service. Provider and country: [to be confirmed]
Legal basis: Art. 6(1)(b) and (f) GDPR – we need your enquiry to reach a manager quickly.
5. Who receives your data
- Our managers, who handle your enquiry.
- The provider of our server in the Russian Federation, which hosts the database on our behalf ([provider and data processing agreement to be confirmed]).
- Telegram, as described under How your enquiry reaches our managers.
- Public authorities, only where the law requires us to disclose data.
- If you buy a car, the details needed for the purchase, shipping and customs clearance go to those involved in it, such as the customs broker – as part of that contract, not through this website.
6. Transfers outside the EU
We are based in the Republic of Korea. The European Commission has decided that the Republic of Korea ensures an adequate level of protection for personal data (Implementing Decision (EU) 2022/254).
Our database is on a server in the Russian Federation. There is no adequacy decision for Russia. Safeguard for this transfer (Art. 46 or Art. 49 GDPR): [to be confirmed]
Telegram: country and safeguard [to be confirmed]
YouTube, only if you play a video (see Videos from YouTube): Google may process data in the United States. Google LLC is certified under the EU–US Data Privacy Framework, for which the European Commission adopted an adequacy decision on 10 July 2023.
7. Videos from YouTube
Some pages show short videos from our YouTube channel. Until you click one, you see only a still image that our own server fetches and delivers; your browser does not connect to YouTube.
When you click a video, the YouTube player is loaded from www.youtube-nocookie.com and starts playing. From that moment, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) receives your IP address and information about your device and the page, and YouTube may store cookies or similar information on your device. How Google uses this data is explained in Google’s privacy policy.
Legal basis: your consent, given by clicking the video (Art. 6(1)(a) GDPR and § 25(1) TDDDG). [to be confirmed] You can withdraw it at any time with effect for the future by not playing further videos and deleting YouTube’s cookies in your browser.
9. Fonts and images
Fonts are delivered from our own server; your browser does not contact Google Fonts or any other font service. Car photos come from the Korean platform Encar, but they too are delivered through our server, so your browser does not connect to Encar.
10. Links to other services
The website links to our Telegram channel and manager, our YouTube channel and WhatsApp. These are ordinary links: nothing is transmitted until you click one. When you do, the provider concerned processes your data under its own privacy policy. The WhatsApp link passes through the redirect service wa.clck.bar before WhatsApp opens (operator: [to be confirmed]).
11. How long we keep your data
- Enquiries: [retention period to be confirmed]. If you ask us to delete your enquiry sooner, we will do so, unless the law requires us to keep it.
- Web server access logs: [to be confirmed]
- Abuse-protection counters: in working memory only, see When you visit the website.
12. Your rights
Under the GDPR you have the right to:
- access the data we hold about you (Art. 15);
- have inaccurate data corrected (Art. 16);
- have your data erased (Art. 17);
- have its processing restricted (Art. 18);
- receive your data in a portable format (Art. 20);
- withdraw your consent at any time, with effect for the future (Art. 7(3)).
To exercise these rights, write to [email address to be confirmed], message us on Telegram (@AutoTradeCoLtd) or call +82 10 5556 8394.
13. Your right to object
Where we process your data on the basis of Art. 6(1)(f) GDPR, you may object to this at any time on grounds relating to your particular situation (Art. 21 GDPR). We will then stop processing it, unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is needed to establish, exercise or defend legal claims.
14. Your right to complain
You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the EU member state where you live or work or where you believe the infringement took place.
15. Do you have to give us your data?
No law or contract requires you to give us your data. Without a phone number, however, we cannot handle an enquiry sent through the form. We do not make automated decisions about you, including profiling (Art. 22 GDPR).
16. Vehicle data
The information about the cars in our catalogue comes from the Korean platform Encar and is updated automatically. It is not personal data about visitors to this website. Cost estimates are for information only and are not a binding offer.
17. Changes to this policy
We will update this policy when our website or the law changes. The current version is always on this page; the date at the top shows when it was last updated.