Privacy Policy
1. Data controller
The data controller is LK LUXURY CARS S.R.L., trading as KRO Auto. Privacy requests can be sent to info@kroauto.ro.
2. Data we may process
- Identity and contact data such as name, telephone, email and address.
- Account and authentication data.
- Vehicle, enquiry, reservation, offer, Pre-Bid and transaction information.
- Billing and payment-related information and transaction references.
- Identification/compliance information where required by law or fraud/AML procedures.
- Customer-support and correspondence records.
- Technical information such as IP address, browser/device data, security logs and cookies.
3. Purposes
We process personal data to respond to enquiries, administer accounts, prepare and perform contracts, process reservations and transactions, operate auction/Pre-Bid functionality, provide customer support, prevent fraud, protect systems, comply with tax/accounting/legal obligations and improve services.
4. Legal bases
Depending on the activity, processing may rely on performance of a contract or pre-contractual steps, compliance with legal obligations, legitimate interests in operating and protecting the business and preventing fraud, or consent where required, for example for certain optional cookies or marketing.
5. Payments and Crypto.com Pay
Where you choose Crypto.com Pay or another third-party payment method, the payment provider may independently collect and process payment, transaction, wallet, device, compliance or identification information needed to process and secure the payment, under its own privacy notice and legal obligations.
KRO Auto may receive transaction status, payment reference, amount, settlement information and other data reasonably necessary to reconcile the transaction, provide the vehicle/service, handle support or refunds and meet legal obligations.
6. Recipients
Personal data may be shared where necessary with hosting/IT providers, CRM and communications providers, payment processors, professional advisers, accountants, insurers, transport/registration partners, anti-fraud/compliance providers and public authorities where required by law.
7. International transfers
Some providers may process data outside Romania or the European Economic Area. Where required, appropriate transfer mechanisms and safeguards are used under applicable data-protection law.
8. Retention
We retain personal data only as long as necessary for the purpose for which it was collected, to manage transactions and customer relationships, establish or defend legal claims and comply with tax, accounting, AML and other applicable retention requirements.
9. Cookies and technical data
The website may use essential cookies for authentication, security, language preferences and core functionality. Optional analytics or marketing technologies, where used, are subject to applicable consent requirements.
10. Security
We use reasonable technical and organisational measures designed to protect personal data against unauthorized access, loss, misuse, alteration or disclosure. No internet-based system can be guaranteed completely secure.
11. Your GDPR rights
Subject to applicable law, you may have rights of access, correction, deletion, restriction, portability, objection to certain processing and withdrawal of consent where consent is the legal basis. You may also lodge a complaint with the competent supervisory authority, including Romania's ANSPDCP.
12. Exercising your rights
Send requests to info@kroauto.ro. We may need to verify identity before acting on a request.
13. Updates
We may update this Privacy Policy as services, legal requirements or processing activities change. The current version is published here with its last-updated date.
14. Contact
LK LUXURY CARS S.R.L. · KRO Auto
Bulevardul Pipera 2A, Voluntari 077191, Romania
info@kroauto.ro · +40 748 088 883