Privacy Policy

The controller of personal data processed through the MHL Trucks & Trailers platform is MHL TEST S.R.L., tax ID (CUI) 99999999, registered office at [Adresa sediului social — de completat], București, România. For any data protection matter contact us at alex@mhlsq.ro. We process data in accordance with Regulation (EU) 2016/679 (GDPR) and Romanian Law no. 190/2018.

• Dealer account: company name, e-mail, phone, tax ID, Trade Register no., address (city, county), password (stored encrypted by the authentication provider), logo, description, website;
• Contact form: name, e-mail, phone (optional), the message, the listing and dealer concerned;
• Listing reports: reporter's e-mail, reason and details of the report;
• Technical data: IP address, browser type and server logs generated by our hosting providers, plus anonymous traffic statistics (only with consent — see the Cookie Policy).

• Providing the service (account management, publishing listings, forwarding contact requests to dealers) — performance of a contract (Art. 6(1)(b) GDPR);
• Dealer verification and approval — legitimate interest in a safe marketplace and legal obligations regarding trader identification (Art. 6(1)(c) and (f));
• Security, fraud prevention, content moderation — legitimate interest (Art. 6(1)(f));
• Traffic statistics — consent (Art. 6(1)(a)), withdrawable at any time from the cookie settings;
• Legal claims and compliance — legal obligation / legitimate interest.

We do not sell personal data. We use processors acting on our behalf:

• Google Ireland Ltd. / Google LLC (Firebase) — authentication, database and image storage;
• Vercel Inc. — website hosting and, with consent, aggregated traffic statistics;
• Resend (Plus Five Five, Inc.) — sending e-mails generated by the contact form.

These providers may process data outside the European Economic Area (notably in the US); transfers rely on appropriate safeguards: the EU–U.S. Data Privacy Framework and/or Standard Contractual Clauses approved by the European Commission.

Dealers' business contact details (company name, phone, e-mail, city) are displayed publicly within listings — that is the purpose of the platform.

• dealer account data — for the lifetime of the account and up to 3 years after closure (general limitation period);
• contact form messages and reports — up to 3 years;
• technical logs — for short periods, per our hosting providers' policies;
• data required by tax/accounting law — for the applicable statutory periods.

Under the GDPR you have the right to:

• access your data and obtain a copy;
• rectify inaccurate data;
• erasure ("right to be forgotten");
• restriction of processing;
• data portability;
• object to processing based on legitimate interest;
• withdraw consent at any time, without affecting prior lawful processing;
• not be subject to solely automated decisions with legal effects (we use none).

To exercise your rights, write to alex@mhlsq.ro. We reply within one month.

If you believe the processing of your data infringes the law, you may lodge a complaint with the Romanian supervisory authority (ANSPDCP): B-dul G-ral. Gheorghe Magheru 28-30, district 1, Bucharest; dataprotection.ro; e-mail: anspdcp@dataprotection.ro.

We apply appropriate technical and organisational measures: encrypted connections (HTTPS), secure authentication, strict database and storage access rules, role-based admin access. No method of transmission over the internet is, however, 100% secure.

The Platform is not addressed to persons under 18 and we do not knowingly collect data about minors.

We may update this policy from time to time; the current version and its date are published on this page.