Privacy Policy

1. Data we collect

Account: name, email, password (stored only as a strong one-way hash), roles, language, display currency, and optionally company name, phone, country and city.

Vehicles: make, model, year, colour, description, photos (location data in photos is removed automatically), prices and the usual parking location and driving area. The registration number is stored encrypted and is never shown to other users. Other users only see an approximate area, never the exact parking spot.

Bookings and campaigns: requests, offers, messages, designs, installation and campaign photos, reviews, disputes and reports. If you choose to share your location with a campaign photo, we keep only whether it was inside your usual area.

Payments: amounts, status and invoices. Card details and identity checks for payouts are handled by Stripe, not by us.

Security: sign-in sessions, two-step verification settings (encrypted) and a log of security-relevant actions with the IP address.

2. Why we use it and on which legal basis

To provide the marketplace, bookings, payments and support (performance of the contract, Art. 6(1)(b) GDPR).

To issue and keep invoices and meet tax and accounting duties (legal obligation, Art. 6(1)(c)).

To keep the platform secure, prevent fraud and handle disputes (legitimate interest, Art. 6(1)(f)).

We do not sell personal data and do not use it for advertising profiles.

3. Cookies

We only use cookies that are strictly necessary to keep you signed in and secure (session, refresh and sign-in step cookies). We use no analytics or advertising cookies, so no consent banner is needed.

We count visits of public pages anonymously: only the page and the day are stored, without cookies, IP addresses or any information about you. Browsers that send “Do Not Track” or Global Privacy Control are not counted.

4. Who receives data

The other party of a booking sees what is needed for the campaign (first name, company name, booking details and messages). Service providers acting on our behalf: hosting, email delivery and Stripe (payments and payouts). Maps are loaded from OpenFreeMap, which receives your IP address when map tiles are shown. Authorities only where the law requires it.

Some providers may process data outside the European Economic Area; in that case we rely on the safeguards provided by the GDPR, such as the EU Standard Contractual Clauses.

5. How long we keep it

Account data: while the account exists. When you delete your account, your personal data is erased or anonymised; bookings, payments and invoices are kept in anonymised form for as long as tax law requires (in Romania, generally 10 years). Security logs: up to 12 months.

6. Your rights

You can access and download your data (Settings → Your data), correct it, delete your account, object to processing based on legitimate interest, ask for processing to be restricted and receive your data in a portable format. Write to legal@adonwheels.com for anything you cannot do in the app.

You can also complain to a data protection authority; in Romania this is ANSPDCP (www.dataprotection.ro).

7. Security

Connections are encrypted (HTTPS). Passwords are hashed, sensitive fields are encrypted, private files are never public, administrators must use two-step verification, and access is logged.

8. Contact

Questions about privacy: legal@adonwheels.com. We may update this policy and will announce important changes.