Privacy policy
This is a courtesy translation. In case of any discrepancy, the Romanian version of this document prevails. See the Romanian version
Last updated: 1 October 2026
Who processes the data
The website auto.velsigur.ro is operated by VELSIGUR SRL, with its registered office in Municipiul Piatra-Neamț, Str. Decebal, Nr. 35, Jud. Neamț, registered with the Trade Register under no. J2012000593275, unique registration code (CUI) 30609391.
VELSIGUR SRL is the controller of the personal data you provide through this website, within the meaning of Regulation (EU) 2016/679 (GDPR). For any question about your data, write to us at office@velsigur.ro.
What data we receive
The website does not require an account and does not use traffic analytics or advertising tools. Personal data reaches us only if you send one of the two forms on the website.
The appointment form (Contact page)
- your name (required);
- your e-mail address (required);
- your telephone number (optional);
- your message, for example the car you are interested in (optional).
The “Import from Japan” form
- your first and last name (required);
- your telephone number (required);
- your e-mail address (required);
- the desired make and model (required);
- your estimated maximum budget (required);
- your message or special specifications (optional);
- the consent checkbox, together with the time you sent the request.
For both forms, the following are also saved automatically: the date and time of sending, the language in which you used the website, the address of the page from which you sent the form and a fingerprint of your IP address. The fingerprint is a code calculated from the IP address and a secret key (SHA-256); the IP address cannot be reconstructed from it. We use it only to block repeated automated submissions (at most 3 requests per 15 minutes).
If you write to us on WhatsApp or by e-mail, or call us, we receive the data you give us in that conversation.
Why we use it and on what legal basis
| Purpose | Data | Legal basis |
|---|---|---|
| To contact you to arrange a viewing or about your question | the data from the appointment form | Art. 6(1)(b) GDPR: steps taken at your request before a possible contract |
| To assess the import request and contact you with a proposal | the data from the import form | Art. 6(1)(b) GDPR: steps taken at your request; Art. 6(1)(a) GDPR: consent given through the consent checkbox |
| To protect the forms against automated submissions | the IP address fingerprint, date and time | Art. 6(1)(f) GDPR: our legitimate interest in keeping the website functional and secure |
You can withdraw your consent at any time by sending a message to office@velsigur.ro. Withdrawal does not affect anything done lawfully before it.
We do not use the data for advertising or profiling, we do not make automated decisions based on it and we do not sell it to anyone.
How long we keep it
- Requests that do not lead to a contract: at most 2 years from our last contact with you, after which we delete them.
- Requests that lead to a contract: as long as needed to perform the contract and as long as the law requires (for example, accounting documents are kept for 10 years under Accounting Law no. 82/1991).
- The IP address fingerprint is kept together with the request it belongs to.
Who else has access to the data
Only we see your data, in the website's administration panel. We do not send automated e-mails and we do not give the data to other companies for their own purposes.
To make the website work, we use a few technical providers, who process data only on our behalf and according to our instructions:
- Supabase (Supabase Inc.): the database in which form requests are saved and the photo storage. The data is hosted in the European Union (Frankfurt, Germany). Gallery photos are loaded directly from Supabase, so your IP address reaches them, as with any image loaded from another server.
- Vercel (Vercel Inc.): website hosting. Every visit to the website passes through Vercel's servers, which see the IP address and the browser's technical data.
- OpenStreetMap (OpenStreetMap Foundation, United Kingdom): the map on the Contact page. When the map loads, your browser requests the images directly from OpenStreetMap, which sees your IP address.
Some of these providers are based outside the European Union (United States, United Kingdom). Transfers are made on the basis of the safeguards provided for by the GDPR: adequacy decisions of the European Commission or standard contractual clauses.
We also use an automatic translation service (Google Gemini) for the website's texts, but it receives only texts written by us (car descriptions, pages). Form data does not reach it.
The links to Facebook, Instagram, TikTok, YouTube, WhatsApp, Google Maps or Waze take you to their websites, where their own privacy rules apply. No buttons or plugins from these networks are loaded on our website.
Your rights
Under the GDPR, you have the right:
- to find out what data we hold about you and to receive a copy (right of access);
- to request the correction of inaccurate data (right to rectification);
- to request the deletion of data (right to erasure);
- to request restriction of processing;
- to receive the data in a structured format so you can pass it to someone else (right to data portability);
- to object to processing based on our legitimate interest;
- to withdraw your consent at any time.
Write to us at office@velsigur.ro and we will reply within one month at most.
If you believe we are processing your data in breach of the law, you may lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP), www.dataprotection.ro.
Security
Access to form requests is restricted by the database itself: they are not publicly visible, and only the administrator account is allowed to read them. The connection to the website is encrypted (HTTPS).
Changes
We may update this policy. The version in force is the one published on this page, with the date of the last update shown above.