Who we are
The data controller is Beaverr Territory SRL, CUI 41616858, Trade Reg. J2023001140120, registered office Str. Pavel Roșca 4, ap. 28, 400118 Cluj-Napoca, jud. Cluj. Write to us at alex.alecu@carbit.ro with any question about your data.
What data we process
- Repair shop owners and their teams: your phone number (for your account and the codes we text you), your name and the shop details you give us for the site.
- The shops' customers: the bookings, messages and estimates the shop enters. For this data the shop is the controller, and CarBit processes it only on the shop's behalf (as its processor).
- Requests from the Google check page: the phone number or email you leave, your shop's name and its town.
- Visitors to carbit.ro: we use no advertising or tracking cookies. We keep technical data (IP address, time of the request) for a short time, for security and to limit abuse.
Documents and signing records can include customer and vehicle details, uploaded files, a signature image, the document version, time, phone number, IP address and browser details. We keep a record of verification, not the SMS code in plain text.
Why, and on what legal basis
- To provide the service you asked for: your account, site, bookings and estimates (performance of a contract).
- To send you the link you asked for on the Google check page (steps taken at your request before a contract).
- To keep the platform secure and stop abuse (legitimate interest).
- To issue invoices and meet our legal obligations (legal obligation).
How long we keep data
- Trial sites made without an account: 30 days online, then 30 days archived, then deleted for good.
- Your account and your shop's data: while the account is active. For an export or account closure, contact alex.alecu@carbit.ro. After closure, we retain only data needed for legal obligations or legal claims.
- Google check requests: 90 days at most.
- Accounting records: for as long as the law requires.
Who we share data with
We use Cloudflare for hosting and security, SMSLink.ro for text messages, and Anthropic for site changes and document imports that you request. A Google business search sends the business name and location to Google Maps, subject to its privacy policy. Providers receive the data needed for their task. Transfers outside the European Economic Area use applicable adequacy decisions or standard contractual clauses; contact alex.alecu@carbit.ro for information about the safeguards. The AI assistant you choose also processes your conversation under its own terms and privacy policy.
Your rights
You have the right to access, correct and erase your data, to restrict its processing, to take it elsewhere and to object. Write to us at alex.alecu@carbit.ro and we'll answer within a month. You can also complain to Romania's data protection authority, ANSPDCP (dataprotection.ro).