This is an English translation provided for convenience. In the event of any discrepancy, the Romanian version available at www.routena.com/politica-confidentialitate shall prevail.
The privacy policy is made available to data subjects to explain how Routena processes personal data as an independent controller. It does not constitute general consent and does not replace the legal bases provided by the GDPR.
1. The controller
This policy describes the processing for which SPECTRALAB SOLUTIONS S.R.L. (“Routena”) acts as an independent controller, in connection with the www.routena.com website and the administration of its own activity. For the operational data that the Client enters into the platform, Routena acts as a processor — see GDPR and DPA.
Contact details: [email protected]. For data-protection matters, you can contact us at [email protected].
2. Who this applies to
This policy concerns, among others: website visitors, commercial contacts (leads), representatives and contacts of Clients, billing contacts, account administrators, support contacts and recipients of marketing communications.
3. Categories of data
- identification and contact data (name, e-mail, telephone, position);
- account and authentication data;
- billing and fiscal data of the Client (legal entity);
- technical usage data (IP addresses, browser type, access logs);
- the content of support communications;
- marketing preferences, where applicable.
The operational data entered by the Client into the platform (employees, drivers, GPS, orders, etc.) is described in GDPR and DPA, where the Client is the Controller.
4. Purposes and legal bases
We process data on the basis of one or more of the grounds provided by the GDPR, depending on the purpose:
- performance of the contract — provision of the services, account administration, billing;
- legal obligation — tax and accounting obligations (including transmission of e-Factura to ANAF);
- legitimate interest — platform security, fraud prevention, service improvement, administrative communications;
- consent — only where necessary (for example marketing communications or non-essential cookies), withdrawable at any time.
Continued use of the platform does not in itself constitute consent to future changes; the legal basis remains the one provided by the GDPR for each purpose.
5. Recipients
We do not sell personal data. We may disclose it: (i) to providers and processors that provide us with infrastructure, authentication, payments, e-mail, analytics and security services, contractually bound to protect the data; (ii) when the Client initiates a transmission that Routena performs as a processor, governed by the DPA (for example the transmission of e-Factura to ANAF); (iii) when we are legally required to do so or receive a reasoned request from an authority.
Certain categories of data (for example authentication data, security logs and support communications) may be processed by Routena either as a controller (for platform security, abuse prevention, relationship administration and its own support) or as a processor (when processed on behalf of the Client), depending on the specific purpose.
6. International transfers
Where data is transferred outside the EU/EEA, we ensure that appropriate safeguards exist (an adequacy decision or the standard contractual clauses approved by the European Commission).
7. Retention period
For the data of its own that Routena processes as a controller (for example account data, billing data for its own services, commercial contact data), we keep it for as long as necessary for the described purposes or in accordance with our own legal obligations (for example tax and accounting terms).
For the operational data entered by the Client into the platform, Routena acts as a processor; the retention, return and deletion rules for this data are set out in the DPA and the Data Portability Annex. The Client is responsible for retaining its own accounting and fiscal data for the periods required by law.
GPS location history is kept for 7 days; this retention concerns data processed by Routena on behalf of the Client, as processor, and is governed by the DPA and the Data Portability Annex.
8. Your rights
You have the right of access, rectification, erasure, restriction, objection and portability, as well as the right to withdraw your consent where processing is based on consent. You have the right to object at any time, on grounds relating to your particular situation, to processing based on legitimate interest, as well as to processing for direct-marketing purposes. To exercise these rights, you can contact us at [email protected]; as a rule, we respond within one month of receiving the request, a term that may be extended by two months for complex or numerous requests, with notice to you. You have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP).
9. Mandatory and optional information
Certain data is necessary for the conclusion and performance of the contract (for example identification and billing data); without it, the services cannot be provided. Other information is optional (for example marketing preferences).
10. Automated decisions and marketing
We do not make decisions based solely on automated processing that produce significant legal effects on data subjects. Electronic commercial communications are sent based on prior consent or under the legal exception applicable to existing customers for similar products or services, with the possibility to unsubscribe.
11. Cookies
The website uses cookies; non-essential ones are set only with your consent. Details in the Cookie Policy.
12. Changes
We may update this policy. The current version and the effective date are displayed in the document header. Important changes are communicated where appropriate, but the legal basis of the processing remains the one provided by the GDPR, not acceptance of the information notice.
13. Routena Mobile App – Drivers
Accounts in the mobile application for drivers are not created by the drivers but are generated by the Routena Client (transport, freight-forwarding or logistics operator) through the main application. In relation to this data, the Client is the Controller and Routena is the Processor. The processing of location data is carried out under the conditions established by the Client and with the drivers being informed by the Client.
14. Contact
For any question about this policy, you can contact us at [email protected].