Data Controller

The data controller responsible for your personal data is ASAP Reverse Logistics SRL, a company registered in Romania, operating the ARLL marketplace platform.

• Company: ASAP Reverse Logistics SRL
• Registered office: Romania
• Contact: office@arll.co.uk

Data We Collect

We collect and process the following categories of personal data:

• Account data: name, email address, company name, VAT number
• Transaction data: orders, invoices, payment information
• Technical data: IP address, browser type, device information, cookies
• Communication data: messages, support requests, newsletter subscriptions
• Usage data: pages visited, features used, search queries

Legal Basis for Processing

We process your personal data based on the following legal grounds under Article 6 of the GDPR:

• Performance of a contract — to provide our marketplace services and fulfill orders
• Consent — for marketing communications and analytics cookies
• Legitimate interests — for fraud prevention, platform security, and service improvement
• Legal obligation — for tax, accounting, and regulatory compliance

Third-Party Data Sharing

We may share your data with the following categories of recipients:

• Google Analytics — for website usage analysis (with your consent)
• Payment processors — to process transactions securely
• Cloud hosting providers — for data storage and platform operation
• Legal authorities — when required by law or court order

We do not sell your personal data to third parties.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Account data — for the duration of your account plus 30 days after deletion
• Transaction data — 10 years (Romanian fiscal requirements)
• Technical logs — 12 months
• Marketing consent records — until consent is withdrawn

Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access — request a copy of your personal data
• Right to rectification — correct inaccurate or incomplete data
• Right to erasure — request deletion of your data ("right to be forgotten")
• Right to restriction — limit how we process your data
• Right to data portability — receive your data in a structured format
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — withdraw consent at any time without affecting prior processing

To exercise any of these rights, contact us at legal@arll.eu. We will respond within 30 days. You also have the right to lodge a complaint with ANSPDCP (the Romanian Data Protection Authority).

Cookies

Our website uses cookies and similar technologies. We categorize cookies as follows:

• Essential cookies — required for the website to function (no consent needed)
• Analytics cookies — help us understand how visitors use the site (require consent)

You can manage your cookie preferences at any time using the "Manage Cookies" link in the website footer. Analytics cookies are blocked by default until you provide consent.

International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). When this occurs, we ensure appropriate safeguards are in place, including:

• EU adequacy decisions for the recipient country
• Standard Contractual Clauses (SCCs) approved by the European Commission
• Certification frameworks recognized by the EU

Contact Us

For any questions about this Privacy Policy or your personal data, please contact:

ASAP Reverse Logistics SRL

Email: office@arll.co.uk

Website: www.arll.eu