Advanced Search

Shopping Cart

Categories

All Categories
Payment options EN

Privacy Policy

Privacy Policy regarding the processing of personal data

Last updated: 18 September 2026

PRO TECH SHOP SRL considers the protection of personal data a fundamental commitment. We process personal data in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation or GDPR) and other applicable Romanian and European legislation.

This Privacy Policy explains how we collect, use, disclose, store and protect personal data when you interact with TirShop, including through our website, customer accounts, telephone, email, WhatsApp, the WhatsApp Business Platform and the Didi automated customer-support assistant.

We may update this Privacy Policy when our services, processing activities or legal obligations change. The current version will always be published on our website, together with the date of the latest update.

1. Who we are and how you can contact us

TirShop is the commercial name of PRO TECH SHOP SRL, a Romanian legal entity with its registered office at Bdul Iuliu Maniu No. 447-451, Sector 6, Bucharest, Romania, registered with the Trade Register under number J2014007797405, EUID ROONRC.J2014007797405, unique tax registration code RO33333664 (referred to in this policy as TirShop, we, us or our).

For the purposes of data-protection legislation, PRO TECH SHOP SRL is the data controller for the personal data described in this policy.

For questions or requests concerning personal data, including access, correction or deletion requests, you may contact us:

  • by email: comenzi@tirshop.ro;
  • by post or courier: PRO TECH SHOP SRL, Bdul Iuliu Maniu No. 447-451, Sector 6, Bucharest, Romania, marked for the attention of the person responsible for data protection.

2. Personal data we collect

We normally collect personal data directly from you when you use our website, create an account, place an order or contact us.

Depending on how you interact with TirShop, we may process the following categories of data:

  • identification and contact information, such as your name, email address, telephone number and postal address;
  • account information, such as your login details, preferences and account history;
  • order and transaction information, such as ordered products, delivery and billing details, payment method, invoices, returns and warranty information;
  • vehicle and product-identification information that you voluntarily provide, such as a vehicle identification number (VIN), registration details, product codes, photographs or technical information;
  • customer-support information, such as questions, complaints, requests and our replies;
  • communication information, such as emails, SMS messages, telephone-call information, WhatsApp messages and attachments;
  • technical and usage information, such as IP address, device and browser information, cookies and information about how you use our website;
  • marketing preferences and information about your response to our communications;
  • information required to prevent fraud, protect our services and comply with legal obligations.

Please do not send special-category personal data, passwords, complete payment-card details or other information that is not necessary for your request.

We do not intentionally collect personal data from children under 16 years of age.

3. Facebook and Google login

Where available, you may have the option to access TirShop services using a Facebook or Google account. If you choose this option, Facebook or Google will inform you about the information shared with TirShop before the transfer takes place. Their processing is governed by their own privacy policies:

We process only the information necessary to create or manage your TirShop account and provide the requested service.

4. WhatsApp Business Platform and Didi assistant

TirShop uses WhatsApp and the WhatsApp Business Platform to communicate with customers and provide support. Our WhatsApp customer-support service may include Didi, an automated assistant that helps us answer common questions and manage customer requests.

4.1 Data received through WhatsApp

When you contact TirShop through WhatsApp, we may receive and process:

  • your telephone number;
  • your WhatsApp profile name and other profile information made available through WhatsApp;
  • the content, date and time of messages exchanged with us;
  • photographs, videos, audio messages, documents and other attachments you voluntarily send;
  • vehicle information, VINs, product codes, order numbers and delivery details included in your message;
  • technical identifiers and message-status information supplied through the WhatsApp Business Platform;
  • information about whether a message was sent, delivered, read or failed.

We receive this information through services provided by Meta/WhatsApp. Meta and WhatsApp may process certain information as independent controllers under their own terms and privacy policies.

4.2 How we use WhatsApp information

We use WhatsApp information to:

  • respond to product, compatibility, availability and price enquiries;
  • identify spare parts and products, including by using product codes, photographs or VIN information supplied by the customer;
  • provide information about orders, payments, deliveries, returns and warranties;
  • create, update and manage customer-support cases;
  • maintain the continuity and quality of customer conversations;
  • prevent abuse, fraud and security incidents;
  • comply with legal obligations and defend our legitimate interests;
  • improve our customer-support procedures and the performance of the Didi assistant.

Information received through WhatsApp is not sold. We do not use private WhatsApp message content for unrelated third-party advertising.

4.3 Automated assistance and human involvement

Didi may automatically analyse the text and files that you send in order to understand your request and prepare or send an appropriate response. Automated assistance may be used for routine customer-service activities, including product enquiries, order-related questions and collection of information needed to identify a product.

Where necessary, a TirShop employee may review the conversation, correct or approve a response, request additional information, or take over the conversation. You may ask to communicate with a person at any time.

Didi is not intended to make decisions that produce legal effects or similarly significant effects concerning you. Important decisions relating to contracts, complaints, refunds, eligibility or disputes are reviewed by authorised TirShop personnel where appropriate.

4.4 Legal basis for WhatsApp processing

Depending on the context, we process WhatsApp information because:

  • it is necessary to take steps at your request before entering into a contract or to perform a contract with you;
  • it is necessary for compliance with legal obligations;
  • it is in our legitimate interests to provide efficient customer support, maintain secure services and improve our operations;
  • you have provided consent, where consent is required, including for certain marketing communications.

You may stop communicating with us through WhatsApp at any time and use another available contact method.

5. Purposes and legal bases of processing

We process personal data for the following purposes.

5.1 Providing TirShop services

This includes:

  • creating and managing customer accounts;
  • responding to enquiries and providing customer support;
  • identifying suitable products and checking compatibility;
  • processing, confirming, delivering and invoicing orders;
  • managing payments, cancellations, returns, refunds, warranties and complaints;
  • communicating information necessary to perform a contract.

The legal basis is normally taking steps at your request, performing a contract, complying with legal obligations and, where applicable, our legitimate interests.

5.2 Improving and securing our services

We may use information about customer interactions and website usage to improve our website, catalogue, support processes and automated tools. We may also use information to detect errors, prevent fraud, protect our systems and maintain service quality.

Where possible, data used for statistical or improvement purposes is aggregated or anonymised. The legal basis is our legitimate interest in developing and securing our business without overriding your rights and freedoms.

5.3 Marketing

Where permitted by law, we may send information about TirShop products, services, offers or promotions by email, SMS, telephone, WhatsApp, mobile notification or similar channels.

Where consent is required, we send marketing communications only after obtaining consent. You may withdraw your consent or object to direct marketing at any time by:

  • using the unsubscribe option included in the communication;
  • changing the relevant settings in your TirShop account, where available;
  • replying with an opt-out request, such as STOP, where that option is provided;
  • contacting us at comenzi@tirshop.ro.

Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

5.4 Legal obligations and legitimate interests

We may process personal data to comply with accounting, tax, consumer-protection and other legal obligations. We may also process or disclose information when necessary to prevent and investigate fraud or cyberattacks, protect our rights and property, resolve disputes and establish, exercise or defend legal claims.

6. Who may receive personal data

Where necessary and subject to appropriate safeguards, we may provide access to personal data to the following categories of recipients:

  • companies within the same group as TirShop;
  • courier and logistics service providers;
  • payment and banking service providers;
  • accounting, legal, audit and insurance service providers;
  • website, hosting, cloud, security, CRM and other IT service providers;
  • Meta/WhatsApp and providers supporting the WhatsApp Business Platform;
  • providers of artificial-intelligence and automated customer-support technology used to operate Didi;
  • marketing and communications service providers, where legally permitted;
  • public authorities, courts or law-enforcement bodies where disclosure is legally required;
  • other parties where necessary for a transaction, reorganisation or protection of our legal rights.

Service providers acting on our instructions may process personal data only for the agreed purposes and are required to protect its confidentiality and security.

7. International data transfers

Some service providers, including technology, cloud, Meta/WhatsApp or automated-processing providers, may process data in the European Economic Area or in other countries.

Where personal data is transferred outside the European Economic Area, we use safeguards required by applicable law, such as:

  • an adequacy decision adopted by the European Commission;
  • standard contractual clauses approved by the European Commission;
  • supplementary technical and organisational measures where appropriate;
  • another legally recognised transfer mechanism.

You may contact us for additional information about the safeguards applicable to a particular transfer.

8. How long we retain personal data

We retain personal data only for as long as necessary for the purpose for which it was collected and to meet legal, contractual, accounting, security and dispute-resolution requirements.

Retention periods may vary depending on the category of information:

  • customer-account information is generally retained while the account remains active and for a reasonable period afterwards;
  • order, invoice, payment and accounting information is retained for the period required by Romanian tax and accounting legislation;
  • customer-service and WhatsApp conversations are retained for as long as reasonably necessary to answer the request, maintain service continuity, manage complaints, prevent fraud and defend legal claims;
  • marketing data is retained until consent is withdrawn, an objection is made or the data is no longer required for the relevant marketing purpose;
  • security logs are retained for a limited period appropriate to the security purpose.

When the applicable retention period expires, the information is deleted, anonymised or securely archived where continued retention is required by law.

9. Data deletion and closing a TirShop account

You may request deletion of personal data associated with your TirShop account, website activity or WhatsApp interactions by emailing comenzi@tirshop.ro with the subject Personal Data Deletion Request.

Please provide enough information for us to identify the relevant account or conversation, such as the email address or telephone number used to contact TirShop. We may request additional information when reasonably necessary to verify your identity and protect personal data from unauthorised deletion.

After verifying the request, we will delete or anonymise personal data unless retention is necessary to:

  • comply with a legal obligation;
  • complete an active order, return, warranty or complaint;
  • establish, exercise or defend a legal claim;
  • prevent fraud or protect the rights of TirShop or another person.

Where deletion cannot be completed, we will explain the applicable reason. Valid requests are normally answered within one month, subject to the extensions permitted by the GDPR.

Before requesting closure of your TirShop account, please download and save any invoices, warranty certificates or other documents that you may need. Closing the account may permanently remove your access to these documents even where TirShop must retain copies to comply with legal obligations.

10. Security of personal data

We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures may include access controls, authentication, encryption, backups, monitoring and confidentiality obligations.

No internet transmission or information system can be guaranteed to be completely secure. You should not send passwords, complete payment-card information or unnecessary sensitive information through email or WhatsApp.

11. Your rights

Subject to the conditions and exceptions established by the GDPR, you may have the following rights:

  • Access: to obtain confirmation of whether we process your personal data and receive a copy of it;
  • Correction: to ask us to correct inaccurate information or complete incomplete information;
  • Deletion: to ask us to delete personal data when the legal requirements are met;
  • Restriction: to ask us to limit processing in certain circumstances;
  • Data portability: to receive certain data in a structured, commonly used and machine-readable format, or request its transfer to another controller where technically feasible;
  • Objection: to object to processing based on legitimate interests and to object at any time to direct marketing;
  • Withdrawal of consent: to withdraw consent at any time where processing is based on consent;
  • Automated decisions: to request appropriate safeguards and human intervention where a decision based solely on automated processing produces legal or similarly significant effects;
  • Complaint: to lodge a complaint with the competent supervisory authority.

Exercising a right is generally free of charge. Where a request is manifestly unfounded or excessive, particularly because of its repetitive nature, we may charge a reasonable fee or refuse to act, as permitted by law.

To exercise your rights, contact comenzi@tirshop.ro. We may ask for information necessary to verify your identity. We normally respond within one month, although this period may be extended by up to two additional months for complex or multiple requests. If an extension is necessary, we will inform you.

12. Complaints

You may lodge a complaint with the Romanian data-protection supervisory authority:

Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
Bdul G-ral Gheorghe Magheru No. 28-30, Sector 1, 010336 Bucharest, Romania
Telephone: +40 318 059 211 or +40 318 059 212
Email: anspdcp@dataprotection.ro
Website: https://www.dataprotection.ro/

You may contact the authority at any time. However, we would appreciate the opportunity to address your concern first. You may contact us at comenzi@tirshop.ro.

13. Additional information about Meta and WhatsApp

Your use of WhatsApp is also subject to the applicable WhatsApp and Meta terms and privacy information. Further information is available at:

This TirShop Privacy Policy applies to personal data processed by PRO TECH SHOP SRL through its TirShop services, including information received through the WhatsApp Business Platform.

Garanția legală
Scroll To Top