Menu

HomePricingForm guideLogin

Privacy Policy

Introduction

This Privacy Policy explains how AutoConsiglieri, operated by ENCORE LABS SRL, collects, uses, stores, and protects your personal information. Please read this document carefully to understand our practices regarding your personal data.

Who We Are

AutoConsiglieri is an online automotive recommendation service operated by ENCORE LABS SRL, a company registered in Romania. You can contact us at: [email protected].

Data We Collect

Account Data

  • Name
  • Email address
  • Password (stored in encrypted form)
  • Or, in case of Google authentication, profile information provided by Google

Form Data

  • Responses to questions about your automotive preferences
  • Selected priorities for automobile characteristics
  • Country where you wish to purchase a vehicle

Transaction Data

  • Information necessary for payment processing
  • Billing address
  • Details about purchased packages and credits

Technical Data

  • IP address
  • Device and browser information
  • Access logs
  • Other standard usage data

How We Use Your Data

We use your data to:

  • Create and manage your account
  • Generate personalized car recommendations based on your responses
  • Provide chat service and virtual assistance
  • Process payments and manage credits
  • Send transactional communications (confirmations, password resets, legal updates)
  • Improve and ensure the security of our service
  • Comply with our legal obligations

Automated Decision-Making Processes

AutoConsiglieri uses algorithms to process your responses and generate personalized car recommendations. This process includes:

  1. Using a comparison algorithm that measures compatibility between your preferences and the characteristics of cars in our database
  2. Reordering results using AI technology to refine recommendations
  3. For processing and reordering recommendations, as well as for the chat service, we use Gemini AI technology developed by Google. In this process, we transmit to Google only your form responses, selected priorities, and information about your chosen country, without including direct identification data such as your name or email address

This automated processing is necessary to provide you with the personalized service you request when completing the form.

Legal Bases for Data Processing

We process your data based on the following legal grounds:

  • Performance of a contract when you use our services
  • Our legitimate interests to ensure optimal functioning and security of the platform
  • Your consent for certain specific processing
  • Compliance with legal obligations applicable to us

Data Retention Period

We retain your personal data for as long as you maintain an active account on our platform. After you delete your account, we will remove your personal data within a maximum of 14 days.

Sharing Data with Third Parties

Your data may be shared with:

  • Stripe: For payment processing. Stripe acts as a Data Processor, processing payment information on our behalf.
  • Hetzner: Our infrastructure provider, where all our services and databases are hosted within the EU, with data management and security controlled entirely by our team. Hetzner acts as a Data Processor.
  • Amazon SES: For sending transactional emails (confirmations, notifications, password resets). Amazon SES acts as a Data Processor for email delivery.
  • Google (Gemini AI): For processing form responses and providing recommendation and chat services. Google acts as a Data Processor when handling your responses to questions, selected priorities, and chosen country, without direct identification data.

We do not sell or rent your personal data to other third parties.

Cookies and Similar Technologies

We use a limited number of essential cookies for the operation of the site:

  • Authentication cookies (access_token and refresh_token) to keep your session active
  • Language preference cookie (preferredLanguage)

Security Measures

To protect your data, we implement the following measures:

  • HTTPS encryption for all data transmitted between your device and our servers
  • Storage of passwords in encrypted form
  • Secure authentication systems
  • Restricted access to personal data only for authorized personnel
  • Regular backup procedures
  • Monitoring for potential security vulnerabilities

Security Breaches

In the event of a security breach that could affect your personal data:

  • We will promptly assess the impact and associated risks
  • We will notify affected users via email in a timely manner
  • We will take necessary measures to address the issue and prevent similar incidents
  • We will notify competent authorities, as required by law

Minors

AutoConsiglieri services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors. If you are a parent or guardian and believe that a minor in your care has provided us with personal data, please contact us to take necessary measures.

Your Rights

In accordance with data protection legislation, you have the following rights:

  • Right of access: You can request a copy of your data by sending an email to [email protected].
  • Right to rectification: You can update most of your information from your account settings.
  • Right to erasure: You can delete your account from the account settings section.
  • Right to restriction of processing: You can request the limitation of processing of your data.
  • Right to data portability: You can request the transfer of your data to another controller.
  • Right to object: You can object to certain types of processing of your data.
  • Right not to be subject to a decision based solely on automated processing: Although we use automated processes to generate recommendations, these are explicitly requested by you as part of the service.

To exercise any of these rights, except those that can be managed directly from your account, please contact us at: [email protected].

International Data Transfers

Our services are provided from Romania and data is stored within the European Union. We currently do not conduct systematic data transfers outside the EU. Should this become necessary in the future, we will ensure that such transfers comply with applicable data protection legislation.

Changes to the Privacy Policy

We reserve the right to update this policy to reflect changes in our practices or for operational, legal, or regulatory reasons. We will notify you of any significant changes via email.

Contact

For any questions regarding this Privacy Policy or our data practices, please contact us at:

Email: [email protected]

Address: Bucureşti Sectorul 5, Şoseaua Sălaj, Nr. 133A, CAMERA 1, Etaj 1, Ap. 5

Last updated: May 11, 2025