Contact

LEPAS Pitești Privacy Policy

I. General information

The data controller is PANEURO PIESE ȘI ACCESORII AUTO SRL (referred to below as LEPAS PITEȘTI), with its registered office in Pitești, Str. Frații Golești nr. 95, Argeș county, registered with the Trade Register under no. J2004001409037, tax identification number 16686330. LEPAS PITEȘTI respects individuals' right to the confidentiality of their personal data and is responsible, as data controller, for processing your personal data.

This policy describes how we collect, use, protect and share personal data, as well as the choices and rights you have under the legislation in force.

The policy applies to the processing of personal data in the course of activities carried out through applications, websites (including lepaspitesti.ro), portals, online sales, marketing campaigns, sponsored social media platforms and other services offered or operated by us or by third parties on our behalf.

This policy contains general rules and may be supplemented by specific privacy notices, depending on the services or activities in which personal data is involved. Additional notices will be communicated whenever necessary, through lepaspitesti.ro, direct communications, surveys, offers or events.

II. Definitions

  • Data controller – the entity that determines the purposes and means of processing personal data.
  • Data processor – the person or organisation that processes personal data on behalf of the controller.
  • Personal data – any information relating to an identified or identifiable natural person (e.g. name, phone, e-mail, VIN etc.).
  • Data protection contact point – the channel through which you can send questions or requests about this policy and the processing of data.
  • Data processing – any operation performed on personal data (collection, storage, use, access etc.).

III. Processing principles

LEPAS PITEȘTI undertakes to comply with the GDPR and with national data protection legislation, applying the following principles:

  • Lawfulness, fairness and transparency – data is collected lawfully and transparently.
  • Data minimisation – we collect only the data needed for the stated purposes.
  • Purpose limitation – we process data only for legitimate and clearly defined purposes.
  • Accuracy – we keep data correct and up to date.
  • Security – we apply technical and organisational measures to protect data against unauthorised access, loss or destruction.
  • Safeguards regarding third parties – third parties access data in accordance with the law and under contractual safeguards.
  • Storage limitation – we keep data only for as long as needed for the purposes of the processing.

IV. Categories of data subjects

The processing concerns:

  • Customers, natural or legal persons, who purchase LEPAS PITEȘTI products/services;
  • Authorised sole traders, owners of individual enterprises, independent professionals;
  • Legal representatives, partners, shareholders, employees or contact persons designated by customers;
  • Prospective customers in the context of offers;
  • Persons whose data is provided by customers (e.g. employees, collaborators, representatives).

In some cases, LEPAS PITEȘTI may process the data of data subjects without being able to inform them directly (e.g. data sent by a customer about employees or collaborators). In these situations, the customer is responsible for informing them and obtaining their consent, as required by law.

V. What data we collect and from which sources

LEPAS PITEȘTI collects:

  • Data provided directly by you in your interactions with us;

Data obtained from external sources, such as:

  • Authorised LEPAS PITEȘTI dealers and repairers (as controllers or processors);
  • Customers who provide data about representatives, employees, collaborators;
  • Authorities, public institutions, courts.

The data collected may include: name, phone, personal identification number (CNP), e-mail, address, signature, VIN, engine number, registration number, make, model, type, date of manufacture and of delivery.

Refusing to provide certain personal data may prevent the delivery of products/services or the communication of offers. For example, without your consent to marketing communications, we will not be able to send you the latest offers.

VI. Purposes for which we collect and process personal data, and the applicable legal bases

Your personal data is collected and processed exclusively for specific, explicit and legitimate purposes, and is not later used in a way incompatible with those purposes.

LEPAS PITEȘTI therefore processes your personal data for the following purposes, on the following legal bases:

  • To meet applicable legal obligations, such as: issuing invoices, managing payments, sending legal notices, preparing financial reports, handling inspections by authorities, defending or exercising rights before the courts, resolving complaints and reports, archiving.
  • To conclude and perform the contract to which you are a party: managing the contractual relationship, providing the products or services requested, sending contractual notices, as agreed between you and LEPAS PITEȘTI.
  • To pursue the legitimate interests of LEPAS PITEȘTI, in the course of its business: processing data as a legal representative, partner, employee or contact person designated by the customer, running satisfaction surveys on the products and services offered through the authorised dealers and repairers in the LEPAS PITEȘTI network, improving the customer experience, defending rights in court, managing the commercial relationship with the manufacturer, auditing contractual obligations, sending data to partners involved in processing activities, including simple marketing.
  • On the basis of your consent: sending commercial and promotional information, marketing communications about LEPAS PITEȘTI products and services, carrying out market research, sharing data with affiliated or partner companies in the automotive, financial, insurance and telecommunications sectors, for the purpose of sending offers and commercial information ("Third-party marketing").

Consent may be withdrawn at any time, without affecting the lawfulness of processing carried out before the withdrawal.

Data may be processed by printed, automated or electronic means, including by post, e-mail, phone (call, SMS, MMS), fax or other electronic channels (e.g. website, mobile application).

VII. Protection of personal data

LEPAS PITEȘTI implements appropriate technical and organisational measures to protect personal data against unauthorised access, unlawful use, accidental loss or damage to its integrity. These measures are adapted to the IT infrastructure, the potential risks, the costs involved and current industry standards.

Data will be processed by processors only if they comply with the required security measures.

Data security means:

  • Confidentiality – preventing unauthorised disclosure to third parties;
  • Integrity – protection against unauthorised changes;
  • Availability – controlled access for authorised persons, only when necessary.

The measures include: access control, backup systems, monitoring, maintenance, security incident management and business continuity.

VIII. How long personal data is kept

Personal data will be kept in accordance with applicable legislation, for as long as needed for the purposes of the processing or to comply with legal obligations.

Examples:

  • Requests for an offer, test drive etc.: kept for 3 years;
  • Purchases of products/services: kept for 6 years;
  • Satisfaction surveys: kept for at most 6 years.

After these periods expire, LEPAS PITEȘTI may keep the data for a further period if there is a legitimate interest (e.g. defending rights in court, in accordance with legal requirements).

For details on how long certain personal data is stored, you can contact us at the data protection contact point: office@adpaneuro.ro

IX. Disclosure of personal data

Depending on the purposes for which we collect the data, we may disclose it to the following categories of recipients:

a) Within the LEPAS PITEȘTI organisation and the entities that promote our products and services:

  • Authorised members of staff;
  • Affiliates and subsidiaries of LEPAS PITEȘTI;
  • Members of the network of authorised dealers and authorised repairers.

b) Third-party business partners:

  • Advertising, marketing and promotion agencies that help deliver our campaigns and analyse their effectiveness;
  • Service providers acting on behalf of LEPAS PITEȘTI, such as call centre agencies, customer satisfaction survey firms, lawyers, consultants, translators etc.;
  • Trusted business partners, such as insurance companies, brokers, leasing or audit firms, which may use personal data to provide you with the products or services requested. We ask these partners to comply with applicable legislation and to protect the confidentiality of your data;
  • Chery Automobile Co Ltd., the manufacturer, for managing the commercial relationship with LEPAS PITEȘTI, including for auditing and fulfilling contractual obligations.

c) Other third parties – if required by law or necessary to protect the interests of LEPAS PITEȘTI:

  • Authorities, public institutions, courts, bailiffs, on the basis of legal obligations, court decisions or official requests.

X. Transfer of personal data outside the country

In the course of contractual relationships, LEPAS PITEȘTI may transfer personal data to countries in the European Economic Area (EEA), such as Italy, France and the Netherlands, including to databases managed by entities acting on behalf of the company. These transfers are carried out in accordance with data protection legislation and strictly for the purposes for which the data was collected.

For transfers outside the EEA, LEPAS PITEȘTI will use standard contractual clauses adopted by the European Commission, together with additional protective measures where necessary, or other legal safeguards (e.g. adequacy decisions). You will be informed accordingly in such situations.

The list of countries to which data is transferred may be updated as the processing activities evolve.

XI. Your relationship with authorised LEPAS PITEȘTI dealers and repairers

If you purchase a vehicle, product or service from an authorised LEPAS PITEȘTI dealer or repairer, or if you provide them with personal data, you will have a separate relationship with them. In that case, they may become a controller of your personal data, alone or jointly with LEPAS PITEȘTI.

For questions about how authorised dealers or repairers collect and use data, please contact them directly. In some cases, they may also act as processors on behalf of LEPAS PITEȘTI.

XII. Your rights regarding personal data

Under applicable legislation, you have the following rights:

  • Information – about the processing activities carried out by LEPAS PITEȘTI;
  • Access – the right to obtain confirmation of the processing and access to the personal data;
  • Rectification – correcting inaccurate data and completing incomplete data;
  • Erasure ("the right to be forgotten") – removal of the data, under the conditions set by law;
  • Restriction – limiting the processing, as provided by law;
  • Objection – the right to object to processing, in particular for direct marketing purposes;
  • Portability – receiving the data in a structured format and transferring it to another controller;
  • Withdrawal of consent – at any time, without affecting the lawfulness of earlier processing;
  • Automated decisions – the right to request a review of decisions based solely on automated processing;
  • Complaint – lodging a complaint with the Romanian National Supervisory Authority for Personal Data Processing (www.dataprotection.ro) or with the competent courts.

To exercise these rights or for further information, you can contact us at: office@adpaneuro.ro

XIII. Data protection contact point

For any questions or requests about this policy and/or the processing of personal data, please contact:

PANEURO PIESE ȘI ACCESORII AUTO SRL Registered office: Pitești, Str. Frații Golești nr. 95, Argeș county, registered with the Trade Register under no. J2004001409037, tax identification number 16686330, e-mail: office@adpaneuro.ro

Last updated: 8 October 2026