Privacy Policy

AutoKub respects your personal data privacy. This policy explains what data we collect, how we use it, and what your rights are.

Last updated: January 4, 2026

Data Controller

AutoKub is the data controller for the personal information we collect.

Contact: contact@autokub.ro

Address: Drumul Gării nr.5D, Chiajna, Ilfov County, Romania

What Data We Collect

When you create an account and authenticate, we collect:

  • Email address - used for authentication and communication
  • Your name - for personalizing the experience
  • Authentication data - for securing your account

Legal Basis

We process your personal data based on:

  • Your consent - when you create an account and authenticate
  • Contract performance - to provide our services
  • Legitimate interests - for security and service improvement

How We Use Data

We use your personal data for:

  • Authentication and session management
  • Providing auto services
  • Communication related to our services
  • Security and fraud prevention
  • Improving our services

Data Storage

Your data is stored securely:

  • Encrypted in transit and at rest
  • Stored in encrypted JWT tokens
  • On secure servers in the European Union

Third-Party Services

We use the following third-party services for authentication:

Ory Kratos and Hydra - Identity management and OAuth2/OIDC authentication

These services are GDPR compliant and process data in accordance with EU data protection standards.

Retention Period

We retain your personal data:

  • As long as your account is active
  • Sessions expire after 30 days of inactivity
  • After account deletion, data is permanently removed within 30 days

Your GDPR Rights

Under GDPR, you have the following rights:

✓ Right of access - request a copy of your personal data

✓ Right to rectification - correct inaccurate or incomplete data

✓ Right to erasure - delete your data ("right to be forgotten")

✓ Right to restriction - limit processing of your data

✓ Right to data portability - receive your data in a structured format

✓ Right to object - object to processing of your data

✓ Withdraw consent - revoke consent at any time

Exercising Your Rights

To exercise your rights, contact us at contact@autokub.ro. We will respond to your request within 30 days.

Right to Lodge a Complaint

If you believe that the processing of your personal data violates GDPR, you have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP).

Policy Changes

We reserve the right to update this privacy policy. We will notify you of significant changes via email or by posting a notice on our website.

Questions? Contact us at contact@autokub.ro