Parties and roles
The garage is normally the controller for customer, vehicle, booking, job and invoice records entered into GoGarageFlow. Robert-Iulian Kerszka trading as Smart Flow Systems normally acts as processor for that data. GoGarageFlow is the software product used to provide the processing services.
Subject matter and duration
Processing covers the provision, support, maintenance and security of the GoGarageFlow platform for the duration of the garage's subscription or agreed support period, plus any reasonable wind-down, retention or legal compliance period.
Nature and purpose of processing
Processing is carried out to operate garage workspaces, manage staff access, store customer and vehicle records, support bookings and jobs, issue invoices, handle SMS/reminder workflows, provide support, monitor security and maintain reliable service operation.
Categories of personal data
- garage staff account and access data;
- customer contact and booking information;
- vehicle registration, mileage, MOT, service and job history information;
- invoice, payment-status and subscription-related records;
- support messages, uploaded files and troubleshooting details; and
- technical, audit, security and device metadata.
Processor commitments
Smart Flow Systems will aim to:
- process personal data only for the agreed platform purposes and documented garage instructions;
- use appropriate technical and organisational security measures;
- restrict access to people and providers who need it for service operation;
- assist with reasonable data protection requests where required and technically possible;
- use subprocessors responsibly and maintain public subprocessor information; and
- support deletion, return or retention of data at the end of service in line with the agreement and law.
Garage commitments
Each garage remains responsible for its own privacy notices, lawful bases, staff permissions, customer communications, data accuracy, retention decisions and requests from its own customers.
Subprocessors
Smart Flow Systems may use subprocessors for hosting, authentication, database, payment, communication, support, storage and security services. The public list is available at /subprocessors.
Security
Security measures include access controls, authentication, role-based permissions, audit records, managed infrastructure, backups, monitoring, update controls and operational support procedures. The public security summary is available at /security-overview.
International transfers
Where suppliers process or access data outside the UK, Smart Flow Systems aims to use appropriate safeguards such as adequacy decisions, approved contractual clauses, transfer risk checks or equivalent protections required by UK data protection law.
Contact
Data processing enquiries can be sent to admin@gogarageflow.com.