Privacy Notice
How DAAD handles personal data for customers, dealer personnel and administrators.
1. Controller and contact
The data controller is Danube Automotive Assembly Development SRLS, registered office Località Prato Amato 1, 00010 Montelibretti (RM), Italy, Codice Fiscale and Partita IVA 18487191001, Registro delle Imprese di Roma, REA RM-1787748. Share capital: €500.00, fully paid. Privacy contact: galati.auto.assembly@gmail.com. Certified email (PEC): danubesrls@pec.it. If appointment of a Data Protection Officer becomes applicable, the relevant contact details will be published here.
2. Data, purpose and legal basis
| Marketplace and account | Account identity, session, security and preferences to provide access, perform requested services and protect the platform. |
|---|---|
| Dealer contact requests | Name, email, phone, message, vehicle and dealer reference to take pre-contract steps requested by the user and route the enquiry. |
| Reservation requests | Buyer, vehicle, delivery and payment preference to register and route a non-binding request before a possible contract. |
| Financing requests | Applicant and estimate information to record a requested assessment. DAAD makes no automated credit decision. Transmission to an identified financing partner requires the applicable disclosures and confirmation. |
| Dealer verification | Company, representative, contact and verification-document data for contract administration, marketplace trust, fraud prevention and applicable legal duties. |
| Vehicle dossier and publication control | VIN, ownership/right-to-sell and registration evidence, inspection, service, homologation, damage and warranty documents, photographs, dealer declarations, review checks, decision notes and timestamps to verify a listing before publication, protect buyers, prevent fraud and preserve an accountable audit record. |
| Support and audit | Requests, decisions, status history, security and administrative events to provide support, demonstrate actions and defend legal claims. |
| Illegal-content and vehicle-safety reports | Reporter contact details, exact listing or dealer reference, legal or safety explanation, evidence, decisions, appeals and recall events to assess notices, protect users, comply with applicable legal obligations and establish or defend legal claims. |
Where consent is specifically used, it may be withdrawn for the future without affecting prior lawful processing. DAAD does not make service access conditional on consent that is unnecessary for the requested service.
3. Who receives data
Data is limited by role. A selected verified dealer receives the information needed to handle that user's request. Direct customer details are not publicly displayed. A professional dealer's legal and trading names, commercial register and number, VAT number where supplied, business address, public business contacts, website, verification status and compliance self-certification may be displayed for marketplace traceability. The dealer's separate DAAD contact, identity documents, verification evidence and payment-account information remain restricted to authorised reviewers. The marketplace records only the payment-account review result in the dealer-control screen, not the account number itself. Technology hosting, storage, security and support providers may process data under contract. Authorities receive data only when legally required. Financing data is not sent to a financing partner until that partner and its notice are identified.
4. Retention
The final schedule will be validated against Italian legal, accounting and limitation periods. The working operational targets are: enquiries and support records for up to 24 months after last activity; unsuccessful financing enquiries for up to 12 months; vehicle dossiers, publication decisions, compliance, safety, appeal and related evidence records for the period required by applicable law and any relevant transaction, claim or recall; security and audit events for up to 24 months; dealer records for the relationship and any legally required post-relationship period. Contract, tax, fraud or legal-claim records may be retained longer where required. Data is deleted or anonymised when no longer needed.
5. International transfers and security
DAAD will document hosting locations and processors before launch. Transfers outside the EEA will use an applicable adequacy decision or safeguards such as standard contractual clauses. Access controls, role separation, audit records, encrypted transport, backups and incident procedures are applied in proportion to risk; no online system can promise absolute security.
6. Your rights
Depending on the circumstances, individuals may request access, correction, deletion, restriction, portability and objection, and may withdraw consent. Requests can be made through Support or the privacy contact above. Identity may be verified before disclosure. You may complain to the Italian Data Protection Authority (Garante) or another competent supervisory authority.