Data protection

Privacy policy

Last updated: 22 September 2026

Introduction

Asko Group respects your right to the privacy of your personal data and, whatever capacity you contact us in (customer, prospective customer, business partner, etc.), you have the right to the protection of your personal data. This data relates to your name, phone number, email address, but also to other data, such as the model and trim you are interested in or the details of the car you want to trade in.

In this policy we describe how we collect your personal data, why we collect it, what we do with it, who we share it with, how we protect it, and the choices you can make about it. The policy applies to the processing of your personal data on the oferte.asko.ro site, through the offer and appraisal forms, and through the communications and marketing activities we run or that are run on our behalf.

If you accept the provisions of this policy, you agree to us processing your personal data as described below. At the end of the policy you will find definitions of the key terms used here (for example, Personal data, Processing, Data controller).

Who is responsible for processing your personal data

The entity responsible for processing your personal data is ASKO INTERNATIONAL S.R.L., an authorised dealer for Mazda, Honda and Honda Motorcycles, referred to below as “Asko Group”, with its registered office in Bucharest, Sector 6, Calea Giulești no. 121D, registered with the Trade Register under no. J2002011094407, tax identification number RO14988790.

The data protection contact point

There is a data protection contact point, through which you can send and from which you will receive answers to your questions or requests about this policy or about the processing of your personal data. You can reach us at vanzari@asko.ro or on 0755 856 856, and for requests specifically about data protection, at office@asko.ro.

Key principles

We respect the fact that you have entrusted us with your personal data, and we commit to processing it fairly, transparently and securely. The principles we apply are the following:

  • Lawfulness of processing — we collect your personal data fairly, in accordance with the legal provisions and transparently.
  • Minimisation of data collection — we limit the collection of your personal data to what is relevant and necessary for the purposes it was collected for.
  • Purpose limitation — we collect your personal data only for explicitly specified and legitimate purposes, and we do not process it in a way that is incompatible with those purposes.
  • Accuracy of data — we keep your personal data correct and up to date.
  • Security and protection of data — we implement technical and organisational measures to ensure an adequate level of security, preventing unauthorised disclosure or access, accidental or unlawful destruction, or loss or alteration of the data.
  • Access and rectification — we process personal data in accordance with your legal rights.
  • Time limitation on keeping data — we keep your personal data in a way that is compatible with the applicable data protection laws, and no longer than necessary for the purposes it was collected for.
  • Protection of international transfers — we make sure that any of your personal data transferred outside the European Economic Area is adequately protected.
  • Safeguards in relation to third parties — we make sure that third-party access to your personal data, and transfers to them, take place in accordance with the applicable legislation and with adequate contractual safeguards.
  • Lawfulness of direct marketing and cookies — when we send you promotional material or place cookies on your device, we make sure we do so in accordance with the legislation in force.

What personal data we collect and the legal basis

Whenever we ask for your personal data, we tell you clearly what data we are collecting. Through the forms on this site we collect strictly the data needed to send you the offer you asked for:

  • first name and surname;
  • email address and phone number;
  • the model you are interested in and your purchase timeframe;
  • whether you would like a test drive;
  • the details of the car you want to trade in, if you request an appraisal: make, model, year, engine, mileage and declared condition;
  • your IP address and the time of submission, to prevent abuse;
  • the page you sent the enquiry from and the campaign you arrived through, so we know which advert was useful to you.

Separately, we measure how the site is used — pages visited, time spent, the path to the form. That data is statistical, stays with us and does not identify you. The details, together with the lifetime of each technology, are in the cookie policy.

Under the applicable data protection legislation, your personal data may be processed if you have given us your consent for that purpose (in which case you always have the right to withdraw it), if it is necessary for taking pre-contractual steps or for performing a contract to which you are party, if we pursue a legitimate interest that is not outweighed by your privacy rights, or if the law requires it. In practice, for this site, each purpose has its own basis, and the consents are not bundled together:

  • Sending the offer you requested — pre-contractual steps taken at your request (art. 6(1)(b) of Regulation (EU) 2016/679), together with the consent ticked in the form (art. 6(1)(a)).
  • Appraising the car you are trading in — likewise pre-contractual steps at your request, with the consent ticked in the appraisal form (art. 6(1)(a) and (b)).
  • Subsequent commercial communications — solely on the basis of the separate, optional consent in the second checkbox of the form (art. 6(1)(a)). If you do not tick it, you receive the offer you asked for and nothing else.
  • Our own audience statistics — our legitimate interest in understanding how the site is used (art. 6(1)(f)), with the data kept strictly on our side and an objection available in one click.
  • Google Analytics, Google Ads and Meta — only on the basis of the consent given in the privacy banner (art. 6(1)(a)).
  • Preventing abuse of the forms — the legitimate interest in protecting the service (art. 6(1)(f)).

What purposes we process your data for

We process your personal data only for specified, explicit and legitimate purposes, and we do not process it in a way that is incompatible with those purposes: to contact you with the offer you requested, to check stock availability, to appraise the car you want to trade in and, on request, to book you a test drive. We do not use it for automated profiling and we take no automated decisions that affect you.

Keeping your data accurate and up to date

It matters to us that your personal data is correct and up to date. Please let us know about any changes or errors relating to your personal data as soon as possible, by contacting us at the data protection contact point. We will take reasonable steps to make sure that any inaccurate or outdated personal data is erased or corrected.

How we protect your data

We hold a set of technical and organisational security measures, chosen with regard to our IT infrastructure, the potential impact on the confidentiality of your data, and the costs involved, to protect you against unlawful or unauthorised access or use, and against accidental loss or damage to the integrity of the data. Maintaining data security means protecting its confidentiality, integrity and availability:

  • Confidentiality — we protect the data against unauthorised disclosure to third parties.
  • Integrity — we protect it against modification by unauthorised parties.
  • Availability — we make sure only authorised people can access it, when needed.

Our data-security procedures include: access security, backup systems, monitoring, review and maintenance, and security-incident management. Any supplier that processes data on our behalf is contractually bound to the same measures.

How long we keep your data

We keep your personal data in a way that is compatible with the applicable data protection legislation, and only for as long as necessary for the purposes we process it for:

  • Contact details from the form: a maximum of 24 months from the last interaction, except where tax or contract law requires longer.
  • Audience statistics: at most 25 months, after which they are deleted automatically.
  • Proof of the consent given in the banner: 36 months — we keep it so that we can demonstrate what you chose, as art. 7(1) of the Regulation requires.

Use of cookies or similar devices

We use cookies and similar technologies on this site. These help us give you a better experience while browsing and also let us improve the site. For more information about how they are used and how to control them, see the cookie policy.

Disclosure of personal data

Depending on the purposes for which we collect your personal data, we may disclose it to the following categories of recipients, who will process it only within those purposes:

a) Within Asko Group

  • authorised staff members, who need the data to respond to you;
  • our affiliates and subsidiaries.

b) Third-party business partners

  • Asko Group service providers — the companies that provide our technical infrastructure (hosting, CRM system, email services), for the purpose of providing those services;
  • advertising, marketing and promotion agencies — Google Ireland Ltd. and Meta Platforms Ireland Ltd., who help us deliver and analyse the effectiveness of our campaigns, only if you have given your consent to marketing. We send them only the fact that an enquiry was submitted, together with the make and model of interest; the email address and phone number leave only in irreversibly transformed form (SHA-256), so that the platforms can recognise the conversion without receiving the data in the clear.

c) Other third parties

  • where required by law or necessary to protect Asko Group's interests: to comply with the law, following requests from the authorities or court orders, to verify compliance with this policy, or to protect the rights, property or safety of Asko Group and/or its customers;
  • in connection with corporate transactions: in the context of a possible merger, acquisition, reorganisation or winding-up of Asko Group's business.

Without your marketing consent, no data leaves for Google or Meta.

Transfers of data outside the EEA

Your personal data could be transferred to recipients located outside the European Economic Area — this is the case with Google and Meta, who may also process it in the United States. In connection with any transfer to countries outside the EEA that do not generally offer the same level of data protection, we implement specific measures to ensure an adequate level of protection: the transfer takes place on the basis of the EU–US Data Privacy Framework (the European Commission adequacy decision of 10 July 2023, issued under art. 45 of Regulation (EU) 2016/679), to which both companies are certified, supplemented by the standard contractual clauses approved by the European Commission (art. 46 of the same Regulation). These transfers happen only if you have consented to analytics or marketing.

Your choices and rights

We want to be as transparent as possible with you, so that you can make informed choices about how we use your personal data.

  • The channels you want to be contacted on — you can choose the communication channel you want to be contacted on (email, phone), for what purposes and how often, by following the unsubscribe instructions included in the communication you received, or by writing to us directly.
  • Your personal data — you can contact us at the data protection contact point at any time, to find out what personal data we hold about you and where it came from. Under certain conditions, you have the right to receive the data you provided us with, in a commonly used, structured format, and to transmit it to any third party of your choice.
  • Your corrections — if you find an error in your personal data, or if it is incomplete or incorrect, you can ask us to correct or complete it.
  • Restrictions you impose — you have the right to ask us to restrict the processing of your personal data, for example while its accuracy is being checked.
  • Your objections — you can object at any time to the use of your personal data for direct marketing purposes, or withdraw the consent given for further processing, by contacting us at the data protection contact point.

You also have the right of access, rectification, erasure and objection, without affecting the lawfulness of processing before that. You can ask us to erase any data relating to you, except where the law requires us to keep it. Finally, you have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul General Gheorghe Magheru no. 28-30, sector 1, Bucharest, postal code 010336, tel. 0318 059 211.

Automated decisions

We take no decisions based solely on automated processing that produce legal effects concerning you. Enquiries and appraisal requests are read and handled by consultants, not by an algorithm.

Legal information

The requirements of this policy complement, and do not replace, any other requirements under the applicable data protection legislation. In the event of a conflict between what is written here and the requirements of the applicable legislation, the law prevails.

We may amend this policy at any time, for example when we change how we use data or when the legislation changes. If the changes are significant, we will let you know through a visible notice on the site or, if we hold your contact details, directly.

Definitions

In this policy, the following terms have the following meanings:

  • Data controller — the organisation that determines the purposes and the way your personal data is processed. Unless we tell you otherwise, the data controller is ASKO INTERNATIONAL S.R.L..
  • Processor — the person or organisation that processes your personal data on behalf of the data controller, following its instructions and security measures.
  • Data protection contact point — the contact point through which you can address the data controller with questions or requests about this policy and/or the processing of personal data.
  • EEA — the European Economic Area, meaning the member states of the European Union, plus Iceland, Norway and Liechtenstein.
  • Personal data — any data that relates directly to you or that allows you to be identified, such as your name, phone number, email address or geographic location.
  • Processing of data — the collection, accessing and all forms of use of your personal data.