This policy explains how COMROX FS SRL ("we", "COMROX FS") collects, uses and protects your personal data through the AIROX Virtual Hub website and the associated dedicated express transport services. The policy complies with Regulation (EU) 2016/679 (GDPR).
1. Data controller
COMROX FS SRL
CUI: 45239866 · Trade Reg. No.: J24/1968/2021
Registered office: Str. Alexandru Ioan Cuza nr. 31, Vișeu de Sus, jud. Maramureș, Romania.
For any request regarding your personal data, you can contact us at colaboraricomroxfs@hotmail.com or by phone at +40 753 697 341.
2. What data we collect
- Contact data: name, phone, email, company (where applicable), entered in the quote request form.
- Trip data: pickup and delivery addresses, cargo details, time windows, special requirements (ADR, customs, recurrence).
- Technical data: IP address, browser type, operating system, access times — collected via standard server logs.
- Cookies: see the Cookie policy (/cookie-policy).
3. How we use the data
- To reply to your request with availability, cost and the steps required for the trip.
- To actually organise the transport — pickup, route, customs documentation, ADR, delivery.
- For invoicing, accounting records and legal tax obligations.
- To improve the service — anonymous analysis of site traffic.
4. Legal basis for processing
We process your data on the basis of:
- Performance of the transport contract (art. 6(1)(b) GDPR).
- Legal obligations for invoicing, ADR, customs (art. 6(1)(c) GDPR).
- The legitimate interest of operating the site and improving the service (art. 6(1)(f) GDPR).
- Your consent for non-essential cookies (art. 6(1)(a) GDPR).
5. Who we share the data with
- COMROX FS drivers and operations teams, only the information needed to carry out the trip.
- Customs authorities, in the case of an international trip.
- Hosting providers (Vercel) and communication platforms (WhatsApp Business).
- Public authorities, only upon formal legal request.
We do not sell or rent your personal data to any third party.
6. How long we keep the data
- Trip data: 10 years (tax and accounting obligation).
- Contact data for quotes: 24 months from the last contact.
- Technical logs: 12 months at most.
7. Your rights
Under GDPR, you have the right:
- To access your data;
- To request the rectification of incorrect data;
- To request the erasure of data (the "right to be forgotten");
- To restrict or object to the processing;
- To receive the data in a portable format;
- To withdraw consent at any time;
- To lodge a complaint with the Romanian Data Protection Authority (ANSPDCP) (https://www.dataprotection.ro).
For any request, write to us at colaboraricomroxfs@hotmail.com. We reply within 30 days at most.
8. Security
We use reasonable technical and organisational measures to protect the data — HTTPS connection, restricted access to the database, GDPR training for the team.
9. Changes
This policy may be updated from time to time. The current version displays the date of the last update at the top.