Privacy policy
This is a translation. If it differs from the Romanian version, the Romanian version applies.
This policy explains what personal data we process through the pitstopauto.ro website, why, for how long and what your rights are, under Regulation (EU) 2016/679 (GDPR) and Romanian Law no. 190/2018.
It covers the website. Data that a workshop enters into the PitStop Auto application (clients, cars, orders) is processed separately, under the contract and the data processing agreement signed with each workshop.
1. Who is responsible for the data
The data controller is:
- Company
- SOLID FLOW SRL
- Tax ID (CUI)
- 54404245
- Trade register no.
- J2026021845004
- Registered office
- ---
- [[email protected]]
- Phone
- +40751 263 603
For any question about your data, write to us at [[email protected]].
2. What data we process
- The sign-up form (pilot or launch news): your name, the workshop's name, phone number or email address, number of bays, the option you chose, the page language and the time you ticked the consent box.
- Server logs: IP address, date and time, the page requested and the browser type, kept by the hosting provider to run and secure the site.
- Abuse protection: the IP address of whoever sends the form is kept for at most one hour, to limit the number of submissions.
We do not ask for and do not want sensitive data. We do not use the data for automated decisions or profiling.
3. Why, and on what legal basis
- To answer your sign-up and contact you about the pilot programme or the launch: based on your consent (Art. 6(1)(a) GDPR) and, for pilot workshops, steps taken before entering into a contract (Art. 6(1)(b)).
- To keep the site running securely and free from abuse: based on our legitimate interest (Art. 6(1)(f) GDPR).
4. How long we keep the data
- Form data: at most 12 months after the application launches, or until you withdraw your consent if that comes first. If you become a customer, the data then falls under your contract with us.
- Server logs: at most 30 days.
- The IP address used to limit submissions: at most one hour.
5. Who else receives the data
We do not sell or rent the data. Only the providers who help us run the site receive it, as processors under contract:
- website hosting: Romania;
- sending and receiving email: Romania.
The data is processed in the European Union. If a provider were to transfer data outside the European Economic Area, it would do so only with the safeguards GDPR requires (for example standard contractual clauses).
6. Cookies and outside services
The site uses no analytics or marketing cookies and loads no scripts, fonts or images from third parties. A normal page visit sets no cookies at all.
7. Your rights
You have the right to access your data, to have it corrected or erased, to restrict its processing, to data portability and to object. You can withdraw your consent at any time; this does not affect processing done before. Write to us at [[email protected]]; we answer within one month.
If you believe we are infringing your rights, you can complain to the Romanian data protection authority, ANSPDCP, B-dul G-ral Gheorghe Magheru nr. 28-30, sector 1, Bucharest, www.dataprotection.ro, or to the authority in your own EU country.
8. Changes
We may update this policy, for example when the application launches. The date of the last update is shown at the top.