Privacy policy
Last updated: 6 August 2026
1. Data controller
Registered office: Velei St. 9A, Pantelimon, Ilfov County, Romania
Unique Registration Code (CUI): 52911527, issued 13.11.2025
Trade Register number: J2025088001000
European Unique Identifier (EUID): ROONRC.J2025088001000
Trade Register attached to the Ilfov County Tribunal
Principal activity: NACE 4791 — retail sale via mail order houses or via the internet
Phone: +40 741 677 110 · Email: comenzi@smart-retrofit.ro
For any question about your personal data, write to comenzi@smart-retrofit.ro.
2. What data we collect and why
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Name, address, phone, email | Fulfilling your order and delivery | Performance of a contract, Art. 6(1)(b) | 10 years — accounting obligation |
| Vehicle model and year | Verifying product compatibility | Performance of a contract, Art. 6(1)(b) | Duration of the warranty |
| Email address | Replying to messages sent through the contact form | Consent, Art. 6(1)(a) | 3 years from last contact |
| Payment data | Processing card payments | Performance of a contract, Art. 6(1)(b) | Held by the payment processor, not by us |
| Technical data, IP address | Site security and functionality | Legitimate interest, Art. 6(1)(f) | 12 months |
We do not collect special categories of personal data and we do not carry out automated decision-making or profiling with legal effects.
3. Card data
We never receive, see or store card numbers, expiry dates or CVV codes. These are entered directly into the secure, PCI DSS certified page of the payment processor, NETOPIA Payments.
4. Who we share data with
Only with recipients strictly necessary to fulfil your order: the courier company, the payment processor NETOPIA Payments, our accounting service provider, and the hosting provider. Each acts as a processor under a contract that meets Article 28 GDPR.
We do not sell, rent or trade personal data. We do not transfer data outside the European Economic Area.
5. Your rights
- Access — obtain confirmation of whether we process your data and a copy of it;
- Rectification — correct inaccurate or incomplete data;
- Erasure — request deletion, where no legal obligation requires us to keep it;
- Restriction — limit processing in the circumstances set out in Article 18;
- Portability — receive your data in a structured, machine-readable format;
- Objection — object to processing based on legitimate interests;
- Withdraw consent — at any time, without affecting prior lawful processing.
Write to comenzi@smart-retrofit.ro. We reply within 30 days, extendable by a further two months for complex requests, in which case we will tell you.
6. Complaints
You may lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral Gheorghe Magheru 28-30, Sector 1, Bucharest, anspdcp@dataprotection.ro, or with the supervisory authority in your country of residence.
7. Security
We use HTTPS encryption across the whole site, restricted access to order data, and regular backups. No system is perfectly secure, but we take the technical and organisational measures appropriate to the risk.
8. Changes
We may update this policy. Substantial changes will be signalled on the site.