Version in force from 7 October 2026.
The data controller is ATTO REGAL S.R.L. (CUI RO11228633, Str. Alexandru Ioan Cuza nr. 1, Corp C2, Tunari, Ilfov). What data we process, why, for how long and to whom we disclose it is set out in the Privacy Policy, and information about cookies is in the Cookie Policy. On this page we explain what rights you have under Regulation (EU) 2016/679 (GDPR) and how to exercise them.
Your rights
| Access (Art. 15) | To find out whether we process data about you and to receive a copy of it, together with the purposes, the recipients and the retention period. |
|---|---|
| Rectification (Art. 16) | To have us correct inaccurate data or complete incomplete data. You can also change the data in your customer account yourself. |
| Erasure (Art. 17) | To have us delete data that is no longer necessary, that we process on the basis of consent you have withdrawn, or to whose processing you have objected. We cannot delete data that the law requires us to keep (for example invoices). |
| Restriction (Art. 18) | To have us keep the data without using it any further while we verify its accuracy or an objection you have made. |
| Portability (Art. 20) | To receive the data you have provided (for example your orders) in a structured, machine-readable format, or to have us transmit it to another controller, where technically feasible. |
| Objection (Art. 21) | To object to processing based on our legitimate interest, for example establishing the source of an order. We will stop, unless we have compelling legitimate grounds or the processing is necessary to defend a right in court. |
| Withdrawal of consent (Art. 7) | For statistics and marketing cookies, at any time, using the round cookie settings button in the bottom left-hand corner of the page. Withdrawal does not affect processing carried out before it. |
| Complaint (Art. 77) | To the National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral. Gheorghe Magheru nr. 28-30, sector 1, postcode 010336, Bucharest, anspdcp@dataprotection.ro, www.dataprotection.ro. |
We do not take decisions based solely on automated processing which produce legal effects concerning you.
How to send us a request
- By e-mail to office@attotrafic.ro, with the subject “Date personale” (Personal data), or by post to the registered office address above.
- Tell us which right you wish to exercise and the details by which we can identify you: the name, e-mail address or phone number used for orders and, where applicable, an order number.
- If we have reasonable doubts about your identity, we may ask you for additional information, only to the extent necessary to ensure that the data does not reach anyone else.
Deadlines and costs
We reply without undue delay and within one month at most of receiving the request. For complex or numerous requests, this period may be extended by two months at most, in which case we will inform you within the first month and explain the reason.
The reply is free of charge. For requests that are manifestly unfounded or excessive, in particular because of their repetitive character, we may charge a reasonable fee or refuse the request, explaining the reason.
