Privacy Policy
Last updated: 2026-05-07
In accordance with Regulation (EU) 2016/679 (GDPR) on the protection of natural persons with regard to the processing of personal data, Royal Rent — Business Man RXR S.R.L., with registered office at Strada Sânzienei, 507075 Ghimbav — manages the data you provide securely and only for the purposes specified below.
Collection of personal data
We collect personal data only when you voluntarily provide it, and only for the purposes specified below. The information we collect may include, but is not limited to:
- Your first and last name
- Email address
- Phone number
- Billing information (for order processing, where applicable)
- Other information you actively provide, for example via our contact form.
Purposes of personal data collection
We collect your personal data only for specified and legitimate purposes, including:
- To contact you regarding your inquiries or questions.
- To process your orders if you have made a purchase or contracted our services.
- To provide information or updates about our products or services (only if you have requested this).
The processing of personal data is necessary for the performance of a contract (car rental) or to take steps at your request prior to entering into a contract.
Data recipients
For the optimal functioning of the service, data may be shared with:
- IT service and hosting providers.
- Public authorities.
- Accounting services.
- Our consultants and other collaborators.
Limited liability
We undertake to use your personal data only for the purposes mentioned above and not to disclose or sell it to third parties without your explicit consent. We also ensure that we take appropriate technical and organisational measures to protect your data against unauthorised access, loss, or destruction.
Storage of personal data
We store your personal data only for the period strictly necessary to fulfil the purposes mentioned above. Your data may be deleted or anonymised after the storage period expires, unless there are legal requirements to the contrary.
Document copies are retained only for the contract duration and for the legal limitation period needed to protect the controller's rights (typically 5 years from the end of the contract), after which they are securely destroyed or deleted.
We undertake not to use these copies for other purposes (marketing, transfer to unauthorised third parties) and to store them in databases with restricted access.
Your rights under the GDPR
As a data subject, you benefit from a set of specific rights that you can exercise at any time:
- Right of access: you have the right to obtain confirmation from us as to whether or not personal data concerning you is being processed and, if so, access to that data and information about how it is used.
- Right to rectification: you have the right to obtain, without undue delay, the correction of inaccurate personal data or the completion of incomplete data.
- Right to erasure (“Right to be forgotten”): you may request the deletion of personal data when it is no longer needed for the purposes it was collected, if you withdraw consent, or if processing was unlawful. Note: we cannot delete data needed to fulfil legal obligations (e.g. invoicing).
- Right to restriction of processing: you may request that stored personal data be marked to limit its future processing under certain legally defined conditions.
- Right to data portability: you have the right to receive personal data in a structured, commonly used, machine-readable format, or to request its direct transfer to another controller.
- Right to object: you may object at any time to processing of your data for reasons related to your particular situation, including profiling.
- Right not to be subject to automated decisions: you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you.
- Right to lodge a complaint: if you believe your rights have been violated, you have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP) at: B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, Bucharest, or by email at anspdcp@dataprotection.ro.
Contact
If you have questions, concerns, or complaints about this Privacy Policy or how we process your personal data, please contact us at the following email address:
Thank you for your trust. We are committed to protecting and respecting your rights regarding personal data at all times.