Privacy policy

1. Data controller

The controller is GEORGEX MOTORS S.R.L., VAT ID 52869392, registered office at Str. Iancu Jianu nr. 6, Târgoviște, Dâmbovița, România. For any question about your data, or to exercise your rights, write to contact@gexon.ro.

2. What data we process

• the email address OR phone number you give us, depending on the channel you choose;
• the chosen channel (email or text message) and the language of the page you signed up from;
• the date and time of sign-up and the version of the consent text you ticked, as proof of consent;
• technical data strictly needed for security (such as IP address and browser type), used only to block abuse and kept for short periods.

We do not ask for your name, address or any other data. This page uses no analytics tools, advertising pixels or marketing cookies.

3. Purposes and legal bases

• Sending the launch notice you asked for, once, by the channel you chose: your consent (GDPR art. 6(1)(a) and art. 12 of Law 506/2004).
• Proving consent: the obligation to be able to demonstrate it (GDPR art. 6(1)(c) and art. 7(1)).
• Keeping the form secure and preventing spam and abuse: our legitimate interest in a safe service (GDPR art. 6(1)(f)).

We do not use the data for news, offers, campaigns, profiling or automated decisions, and we never sell it. Commercial messages will only be offered in the full store, after launch, based on a separate consent that is unticked by default.

4. Contact channel

You choose email or phone. We only use the contact details for the channel you chose: consent for email is not consent for text messages, and vice versa. The launch message includes a simple, free way to unsubscribe.

5. Providers and recipients

Only authorised members of our team and the providers we contract for hosting, storage, security and sending the launch message (email or text) have access, as far as needed and as processors (GDPR art. 28). We will send you the list of actual providers on request. We do not disclose the data to other third parties unless the law requires it.

6. Transfers outside the EEA

We aim to store the data in the European Union. If a provider processes data outside the European Economic Area (for example Cloudflare, Inc., USA, for site protection), the transfer only happens under a European Commission adequacy decision, such as the EU-US Data Privacy Framework, or the standard contractual clauses approved by the Commission.

7. How long we keep the data

We keep your email or phone number until the launch message is sent and at most 30 days after that, to handle any requests, then delete it. Proof of consent and a minimal unsubscribe record are kept only as long as needed to show we complied with the law. If the launch has not happened within 12 months of your sign-up, we delete your data at that point. We never keep data indefinitely.

8. Your rights

• the right to be informed and to access your data;
• the right to rectification;
• the right to erasure ("right to be forgotten");
• the right to restrict processing;
• the right to data portability;
• the right to object to processing based on legitimate interest;
• the right to withdraw consent at any time, as easily as you gave it; withdrawal does not affect processing carried out before.

To exercise your rights, write to contact@gexon.ro. We reply free of charge, as a rule within one month, with the extensions GDPR allows.

9. Complaints

You have the right to lodge a complaint with the Romanian data protection authority (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, Bucharest, www.dataprotection.ro.

10. Security

The page uses an encrypted connection (HTTPS), access to the list is restricted to authorised people and permissions are limited to what is needed. We have a procedure for handling security incidents.

11. Do you have to give us your data?

No. Signing up is voluntary. Without an email address or phone number we cannot notify you at launch, but there are no other consequences for you. The list is for people aged 16 or over; if we learn we have received the data of someone younger, we delete it.

12. Updates

We update this policy when the actual processing changes. The version and date are shown on this page. If the changes affect the purpose you consented to, we will ask for new consent.