How we handle the messages you send us

The data controller is AEROCAR ONE SRL, the company trading as AeroCar, registered in Romania with its office at E85 Calea Republicii 27, Sarata, 607361 Bacău, jud. Bacău, România, VAT number RO45323141 and company register number J2021002041040.

For anything concerning your data, write to office@aerocar.ro or call +40 775 271 612.

Centralizator is an internal tool the AeroCar team uses to answer customer messages. It brings conversations from three channels — WhatsApp, Instagram Direct and Facebook Messenger — into one place, so a message does not go unanswered just because it arrived on a different app.

It is not a public product. There is no sign-up, no customer account, and no way in except with an account the dealership creates for a named employee.

Only what we need in order to read your message and reply to it:

• The content of the messages you send us, and of the ones we send back.
• Attachments — photos, videos, voice notes, documents. We copy them to our own storage the moment they arrive, because the links Meta gives us expire within minutes and the message would be unreadable a day later.
• The display name and profile picture of the account you write from, as the platform provides them. On Instagram and Messenger this is the public account name, not an identity document.
• Your phone number — on WhatsApp only, where the number is the conversation identifier itself. On Instagram and Messenger we neither receive nor store phone numbers.
• The technical identifier the platform assigns to your conversation with our page. It is scoped to that customer–page relationship and cannot be used to identify you outside it.
• Message metadata — when it was sent, its delivery state (sent, delivered, read) and any delivery errors.
• Internal notes written by an employee alongside the conversation, where needed to see a request through.

We also keep the raw copy of the message as the platform delivered it, to diagnose delivery failures and to be able to reprocess a message that was lost in transit.

All of it is delivered to us by Meta, through the official WhatsApp Business, Instagram and Messenger APIs, at the moment you message the AeroCar page. We obtain data about you in no other way: we buy no lists, import no address books, do not read your profile, and have no access to your conversations with anyone else.

If you have never messaged us, we hold no record of you at all.

There is one purpose: answering your questions about vehicles, prices, availability, servicing and appointments, and keeping the thread so it still makes sense if you come back a week later.

• Art. 6(1)(b) GDPR — steps taken at your request prior to entering into a contract, and performance of that contract.
• Art. 6(1)(f) GDPR — our legitimate interest in keeping a coherent record of commercial correspondence and in preventing abuse of our messaging channels.

Only AeroCar employees who have been given a named account. Each has their own credentials, and an administrator can revoke access instantly — revocation invalidates every active session that person holds.

Attachments are not public: they have no direct internet link and are served only through the application, after the session is checked.

The application and its database run on Google Cloud Platform in the europe-west1 (Belgium) region. The data stays in the European Union.

The processors involved are:

• Google Cloud EMEA Limited — hosting, database and attachment storage.
• Meta Platforms Ireland Limited — the operator of the platforms you message us on. Your message passes through Meta regardless of whether we use Centralizator or their own app.
• Telegram — when you message us, the AeroCar sales team gets a Telegram notification with your name and a short preview of the message, so someone replies quickly. Telegram stores it in the Netherlands; its group companies in the United Arab Emirates and the British Virgin Islands may access it under the European Commission's standard contractual clauses.

We disclose the data to no one else. We do not sell it, rent it, or make it available to any commercial partner.

• Conversations and attachments — 24 months from the last message in that conversation. That span covers a typical warranty and servicing relationship, during which the history is useful to you as well.
• Raw technical copies of messages — 30 days, for as long as they are useful in diagnosing delivery failures.

Where a conversation forms part of a record we are legally required to archive — an invoice, a complaint, a dispute — we keep it for as long as the law requires, and for that purpose only.

You have the following rights over your data. Exercising them is free — write to office@aerocar.ro and we will reply within 30 days.

• Access — find out what we hold about you and receive a copy.
• Rectification — have anything inaccurate corrected.
• Erasure — have the conversation deleted, as described in section 10.
• Restriction — have processing paused while we review a challenge.
• Portability — receive your data in a machine-readable format.
• Objection — object to processing based on our legitimate interest.

If our answer does not satisfy you, you may complain to the Romanian supervisory authority, Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Bucharest — anspdcp.ro.

Write to office@aerocar.ro from the account you messaged us with, or simply send us a message on that same channel asking for the conversation to be deleted. We confirm your identity through that channel — we will not ask you for identity documents.

Within 30 days we permanently delete the messages, the attachments, the display name, the profile picture and any internal notes relating to you. Deletion is irreversible and we keep no archived copy, except for documents the law requires us to retain.

Deleting your data from Centralizator does not delete the conversation from the Meta app on your own phone — that copy belongs to you and you control it from that app.

Access is over HTTPS with per-user authentication. Messages delivered to us by Meta are cryptographically verified on arrival, so no one can inject fake conversations. Attachments are stored privately and served only to authenticated users.

• We do not use messages for advertising or retargeting.
• We do not build profiles and make no automated decisions about you.
• We do not sell or share the data with third parties.
• We do not send unsolicited commercial messages — we only reply within conversations you started.
• We do not process special categories of data. Please do not send us medical information, national identification numbers, or copies of identity documents over chat.

If anything material changes — a new purpose, a new recipient, a longer retention period — we update this page and change the date at the top. The version published here is always the one in force.