Privacy Policy

1. Who we are (the controller)

Logistic Center Group SRL, VAT/registration number RO16833198, with its registered office at 285A Giurgiului Road, Jilava, Ilfov county, 077120, Romania (hereinafter “LCG”, “we”), is the controller of the personal data processing described below.

For any question about the processing of your data, write to team@lcg.ro or use the contact form on this website.

2. What data we collect

We only collect the data required for the purpose you contact us for, or for operating the platform:

• Identification and contact data: first and last name, email address, phone number.
• Company data (for dealer partners): company name, VAT/registration number, contact person, billing details.
• The content of messages sent through the contact form or through vehicle reservation requests.
• Portal account data: email address, encrypted password (we never see it in clear text), sign-in history.
• Minimal technical data: IP address, browser and device type, pages visited, for security and website operation.
• Contractual and tax data: offers, proforma and fiscal invoices, delivery and registration details.

3. Purposes and legal bases

• Answering contact form enquiries — basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
• Creating and managing dealer partner accounts — basis: performance of a contract / pre-contractual steps (Art. 6(1)(b) GDPR).
• Sending the newsletter about newly available stock — basis: your explicit consent, confirmed by double opt-in (Art. 6(1)(a) GDPR).
• Issuing tax documents and keeping accounting records — basis: legal obligation (Art. 6(1)(c) GDPR).
• Platform security, fraud and abuse prevention, internal audit logging — basis: legitimate interest (Art. 6(1)(f) GDPR).

4. How long we keep data

• Contact form messages: maximum 3 years from the last interaction.
• Newsletter subscriber data: until you unsubscribe, after which the address is removed from the active list.
• Dealer account data: for the duration of the commercial relationship and 3 years thereafter.
• Supporting accounting documents and ledgers (invoices, receipts, accounting notes): 5 years, under Art. 25 of Romanian Accounting Law no. 82/1991.
• Annual financial statements: 10 years, under Art. 25 of Romanian Accounting Law no. 82/1991.
• Payroll records and documents with a special regime: the specific statutory retention periods.
• Technical and security logs: maximum 12 months.

5. Who we share data with

We never sell or rent your data. We disclose it only to the following categories of recipients, strictly as needed:

• Cloud infrastructure and database hosting providers, with servers located in the European Union.
• The transactional email provider (confirmations, notifications, password resets).
• Invoicing and accounting service providers, for fiscal documents.
• Leasing or financing companies, only when you explicitly request financing.
• Public authorities, where we have a legal obligation to provide information.

6. Transfers outside the European Economic Area

We process data primarily on infrastructure located in the European Union. Where a provider processes data outside the EEA, the transfer relies on an adequacy decision of the European Commission or on the Standard Contractual Clauses approved by it.

7. Your rights

As a data subject you have the following rights:

• Right of access to the data we hold about you (Art. 15).
• Right to rectification of inaccurate or incomplete data (Art. 16).
• Right to erasure — the “right to be forgotten” (Art. 17), to the extent no legal retention duty applies.
• Right to restriction of processing (Art. 18).
• Right to data portability in a structured, machine-readable format (Art. 20).
• Right to object to processing based on legitimate interest (Art. 21).
• Right to withdraw consent at any time, without affecting the lawfulness of prior processing.
• Right not to be subject to automated decision-making with significant effects (Art. 22) — we use no purely automated decisions.

8. How to exercise your rights

Send a request to team@lcg.ro from the email address linked to your data. We reply within one month of receipt; for complex requests the deadline may be extended by two months, with prior notice to you.

If you are not satisfied with our answer, you may lodge a complaint with the Romanian Data Protection Authority (ANSPDCP), 28-30 G-ral. Gheorghe Magheru Blvd., Bucharest, anspdcp@dataprotection.ro.

9. Data security

We use encrypted connections (HTTPS), hashed password storage, time-limited sessions, granular access rights for the internal team, and audit logging of changes made in the system. Access to customer data is restricted to staff who need it for their duties.

10. Children's data

Our services are intended for adults only. We do not knowingly collect data from persons under 16. If you believe a minor has provided us with data, please contact us so we can delete it.

11. Changes to this policy

We may update this policy when our services or legal requirements change. The updated version is published on this page together with the revision date.