LUSMAR Automotive Romania
RO EN
B2B Login

Privacy Policy – LUSMAR.COM (B2B)

This Policy describes how LUSMAR SRL collects, uses, and protects the personal data of representatives, employees, and contact persons of commercial partners (Professional Clients) who use the B2B platform www.lusmar.com.

LUSMAR SRL, acting as a data controller, fully complies with the provisions of Regulation (EU) 2016/679 (GDPR) and applicable Romanian legislation on the protection of personal data.

1. Data Collected

Within the specific framework of B2B trade activities, we collect and process the following categories of data:

    • Data provided directly: First name, last name, professional email address, telephone number, job title/position held within the organization, identification data of the represented company (name, Unique Registration Code - CUI, registered office address), delivery addresses, billing addresses, and full order history.
    • Data collected automatically: IP address, browser type used, device specifications, website activity data (pages visited, duration), and data collected through cookie files.
    • Data from public sources: Information extracted from public registers, official databases, and other similar official sources, used exclusively to validate the user's professional status and the commercial relationship.

2. Purposes and Legal Bases for Processing

Data processing is carried out lawfully, based on the following purposes and legal bases:

    • Management of the B2B account: Performed on the basis of contract performance (acceptance of the platform's terms and conditions).
    • Validation of the commercial partner: Processing based on the legitimate interest of LUSMAR SRL to ensure that it transacts exclusively with active legal entities.
    • Order processing, invoicing, and delivery of goods: Performed on the basis of the performance of the commercial contract.
    • Warranty management and provision of technical support: Processing necessary for contract performance.
    • Fulfillment of fiscal and accounting obligations: Processing based on a legal obligation of the controller (archiving and financial reporting).
    • Platform security and fraud prevention: Based on the legitimate interest to protect the IT infrastructure and partner data.
    • Traffic analysis and platform optimization: Carried out based on legitimate interest and/or consent granted for performance cookies.
    • B2B newsletters and commercial communications: Processing based on consent, where applicable law requires it, or on legitimate interest within existing commercial relationships.

3. Data Recipients

For the proper execution of commercial and logistical processes, data may be communicated in a controlled manner to the following recipients or processors:

    • Courier and freight transport companies;
    • The payment processor EuPlătesc (for secure online transactions);
    • Cloud and productivity service providers (Microsoft);
    • Web analytics tool providers (Google Analytics, Google LLC);
    • Advertising and social network service providers (Meta Platforms);
    • Hosting, cloud infrastructure, and IT support service providers;
    • External consultants (accountants, financial auditors, and lawyers);
    • Public authorities or supervisory institutions, to the extent that the law imposes such an obligation.

4. International Data Transfers

To the extent that some of our providers (such as Microsoft, Google, or Meta) involve the transfer of data to servers located outside the European Economic Area (EEA), we ensure that these transfers are carried out exclusively in strict accordance with GDPR provisions. Protection is guaranteed through the use of Standard Contractual Clauses (SCCs) adopted by the European Commission or through other applicable legal mechanisms and supplementary technical measures.

5. Data Retention Period

We retain personal data only for the period necessary to fulfill the intended purposes:

    • Active B2B accounts: For the entire duration of the commercial relationship and subsequently for a period necessary to defend the legal rights and legitimate interests of LUSMAR SRL.
    • Financial-accounting documents (invoices): For a period of 10 years, in accordance with the obligations provided by Romanian fiscal legislation.
    • Commercial correspondence (emails, requests): For the duration required for resolution and within the limits of the legal statute of limitations for legal actions (generally 3 years).
    • Cookies: In accordance with the specific lifespans detailed in the Cookie Policy.

6. Marketing and Commercial Communications

Commercial communications dedicated to business partners are sent in full compliance with e-commerce legislation. In cases where processing is based on consent, this may be withdrawn at any time (by clicking the unsubscribe link or via a direct request), without affecting the lawfulness of the processing carried out prior to withdrawal.

7. Rights of Data Subjects

In accordance with the GDPR Regulation, individuals whose data we process benefit from the following rights: the right of access, the right to rectification, the right to data erasure ("the right to be forgotten"), the right to restriction of processing, the right to data portability, the right to object, the right not to be subject to an automated individual decision, the right to withdraw consent, and the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP).

8. Data Security

LUSMAR SRL implements appropriate technical and organizational measures to ensure a level of security corresponding to the risks involved. These measures include strict control of data access, encryption of electronic communications, regular backups, and constant monitoring of the entire IT infrastructure.

9. Automated Decisions and Profiling

LUSMAR SRL does not use decision-making processes based exclusively on automated data processing and does not engage in profiling activities that produce legal effects or significantly affect data subjects.

10. Cookies

The www.lusmar.com platform uses cookies and similar technologies to function properly and to analyze traffic. Full details regarding the types of cookies placed, their purpose, and how to disable them are available on the dedicated page: Cookie Policy.

11. Data Protection Officer (DPO)

Given the nature and volume of the processing carried out, in accordance with Art. 37 of Regulation (EU) 2016/679, LUSMAR SRL is not under an obligation to designate a Data Protection Officer (DPO). However, to ensure compliance with your rights, all GDPR-related requests can be sent directly to our dedicated point of contact at the email address: gdpr@lusmar.com.

12. Contact Details

For any questions, clarifications, or to exercise your rights under this Policy, you may contact us through the following means:

    • Dedicated GDPR Email: gdpr@lusmar.com
    • Commercial Email: contact@lusmar.com
    • Registered Office Address: LUSMAR SRL, Craiova, Dolj, 20A Ana Ipătescu Street

This Privacy Policy is updated periodically. Any changes will be published on this page and will take effect from the moment of publication.