Last updated: 07/06/2026
1. Data controller
The data controller is AutoPro SRL, headquartered at Str. Victoriei 42, București, VAT ID RO12345678. Data protection contact: dpo@autopro.ro.
2. Data we collect
Identification data: first name, last name, email, phone. Vehicle data: make, model, year, VIN, plate number, mileage. Service history.
Sensitive fields (phone, VIN, plate number, email, billing address) are stored encrypted at the application level with AES-256-GCM.
3. Legal basis
Performance of the service contract (Art. 6(1)(b) GDPR).
Legal obligation: invoicing, 10-year fiscal archiving (Art. 6(1)(c) GDPR).
Consent for marketing and newsletter (Art. 6(1)(a) GDPR) — revocable at any time.
4. Your rights (Art. 15–22 GDPR)
You have the right to access, rectify, erase, restrict processing, object to processing, and to data portability.
To exercise your rights use the section in your account (/account/date-personale) or email dpo@autopro.ro.
You may lodge a complaint with the Romanian DPA, ANSPDCP (https://www.dataprotection.ro).
5. Retention
Contractual data: 10 years (fiscal requirement).
Marketing data: until consent is withdrawn.
Server logs: 90 days.
6. Transfers and processors
We use processors for email (Resend), payments (Stripe/Netopia), invoicing (SmartBill/Oblio) and form anti-spam protection (Google reCAPTCHA Enterprise).
Most processing stays within the European Economic Area. Exceptions: Google reCAPTCHA (form protection) and, if you consent to marketing, Meta Pixel and Tawk.to — these involve transfers to the US under the EU–US Data Privacy Framework and Standard Contractual Clauses respectively.