Privacy

Effective date: 30 January 2026

1. Introduction
This Privacy Policy ("Policy") describes how SIERMARU CORP ("we," "us," or "our") collects, uses, and protects your personal information when you use our website vingtop.online and our services for facilitating the purchase of electronic road toll vignettes. By accessing our site or using our services, you agree to the terms of this Policy.

2. Data Controller
The controller of your personal data is:
SIERMARU CORP
127 N HIGGINS AVE STE 307D #2058
Missoula, Montana 59802
United States
Employer Identification Number (EIN): 30-1465346
Email: info@vingtop.online

3. Information We Collect
We collect the following categories of personal data:

4. How We Use Your Information (Purposes & Legal Basis)
We process your data based on the following legal grounds under the GDPR and other applicable laws:

A. To Process Your Order & Provide Service
Purpose: To facilitate your purchase, activate your vignette with the official system, and provide customer support.
Data Used: Identifiers (Name, Email, Phone) and Commercial Information (Vehicle Details).
Legal Basis: Performance of a Contract. Processing is necessary to fulfill the service you requested.

B. To Send Order Confirmations & Service Communications
Purpose: To send you essential notifications, order confirmations, and service updates.
Data Used: Identifiers (Primarily Email Address).
Legal Basis: Performance of a Contract. These communications are a necessary part of the service delivery.

C. To Comply with Legal & Financial Obligations
Purpose: To issue invoices and comply with applicable tax, accounting, and commercial laws.
Data Used: Identifiers and Commercial Information related to your transaction.
Legal Basis: Legal Obligation. We are required to retain and process this data by law.

D. For Website Security, Fraud Prevention & Analytics
Purpose: To protect our website, prevent fraudulent transactions, and analyze site performance for improvement.
Data Used: Technical Data (IP Address, Browser Info).
Legal Basis: Legitimate Interest. We have a justified interest in securing our platform and understanding how it is used.

E. For Marketing Communications
Purpose: To send you promotional offers or news (e.g., newsletters).
Data Used: Identifiers (Name, Email).
Legal Basis: Consent. This processing occurs only if you have explicitly opted-in to receive such communications.

5. Data Sharing & Third-Party Processors
We share your data only with trusted third-party service providers under strict contractual agreements:

We do not sell your personal data.

6. International Data Transfers
As a US-based company, your data is transferred to and processed in the United States. We ensure all transfers are protected by appropriate safeguards, including Standard Contractual Clauses and reliance on our processors' compliance certifications (e.g., Stripe's PCI-DSS, Google's data protection terms).

7. Data Retention
We retain your personal data only as long as necessary:

8. Your Rights (GDPR & CCPA)
Depending on your location, you may have the right to:

To exercise these rights, please contact us at info@vingtop.online. We will respond within 5-30 minutes.

9. Data Security
We implement industry-standard technical and organizational measures, including SSL/TLS encryption, access controls, and secure server infrastructure, to protect your data from unauthorized access, alteration, or disclosure.

10. Our Role Transparency
SIERMARU CORP is an independent private service provider and intermediary. We are not a government authority, road administration, or affiliated with official toll operators. Our service fee is separate from the official state toll fee.

11. Changes to This Policy
We may update this Policy. The "Effective Date" at the top will indicate the latest version. We encourage you to review this page periodically.

12. Contact Us
For any questions or requests regarding this Privacy Policy or your data, please contact:

SIERMARU CORP
Data Protection Inquiry
Email: info@vingtop.online

• Identifiers: Name, email address, telephone number, billing address.
• Commercial Information: Vehicle registration number, country of registration, vehicle type, selected vignette product and validity period.
• Technical Data: IP address (anonymized where possible), browser type, device information, pages visited, and timestamps when you browse our site.
• Financial Data: Payment information is processed directly by our certified payment processor (Stripe). We do not store your full credit card details on our servers.

• Payment Processing: Stripe, Inc. Your payment details are handled directly by Stripe in accordance with their privacy policy.
• Infrastructure & Analytics: Google LLC (Google Cloud, Google Analytics) and Cloudflare, Inc. for performance, security, and analytics.
• Vignette Registration: We share your vehicle data with our trusted partner networks and official vignette system APIs to fulfill your order. The specific partner may vary by country and order.

• Order Data: Retained for 7 years to comply with tax and commercial law obligations in the USA.
• Technical Logs: Retained for up to 12 months for security and analytical purposes.
• Marketing Data: Retained until you withdraw your consent.

• Access, correct, or delete your personal data.
• Restrict or object to our processing of your data.
• Data portability.
• Withdraw consent (for processing based on consent).
• Opt-out of the "sale" or "sharing" of personal information (we do not sell data).