GDPR
Privacy policy
We collect only the details required to answer enquiries and manage confirmed stock alerts.
Who is responsible for your data
TONAJ is a brand operated by SYNC IT WORLDWIDE SRL, VAT number RO35772534, registered office at Drumul Valea Călmățuiului 7–21, Sector 6, 065997 București, România. SYNC IT WORLDWIDE SRL is the data controller for all personal data processed through this website.
For any privacy request, write to info@tonaj.ro. We answer within 30 days at the latest.
What we collect
Contact and offer forms: name, email address, phone number and your message. Seller enquiries: the vehicle details and photographs you choose to send. Newsletter: your email address, with double opt-in confirmation. The site stores a functional cookie for your language choice and, for administrators, a login session. If advertising measurement is configured, Meta and Google tags load only after you accept the separate advertising choice and may then use advertising cookies.
Why we process it and on what legal basis
We use your data to answer enquiries, prepare offers and complete vehicle transactions (steps prior to entering a contract, and our legitimate interest in responding to you). Stock alerts are sent only with your consent, which you can withdraw at any time through the unsubscribe link in every email.
Where your data is stored
Data is processed by carefully selected providers acting as processors: Vercel (hosting and cookie-free statistics), Neon (database), Vercel Blob (photographs), Resend (transactional email), Upstash (anti-spam protection) and Plausible (cookie-free statistics). We use European data-center regions where the provider offers them, and GDPR-compliant data-processing agreements in all cases.
How long we keep it
Enquiries and offer requests are kept while we handle them and for up to 3 years for business follow-up, unless you ask us to delete them earlier. Newsletter data is kept until you unsubscribe. Administrative and accounting records are kept as required by Romanian law.
Your rights
You can request access, rectification, erasure, restriction, portability, or object to processing, and you can withdraw consent at any time by writing to info@tonaj.ro. You also have the right to lodge a complaint with the Romanian supervisory authority, ANSPDCP (www.dataprotection.ro).
Analytics
Plausible and Vercel Web Analytics measure public-page traffic without cookies. We remove query parameters and URL fragments from page addresses sent to Vercel. If advertising measurement through Meta, Google or OpenAI is enabled, you can accept or decline it separately and change your choice at any time through Ad settings. Page visits, completed enquiries and contact clicks may be measured. When OpenAI measurement is enabled, it loads only after a renewed advertising choice. OpenAI uses first-party identifiers to connect enquiries to ads and may detect contact details in forms, hash them in the browser and send the resulting identifiers for matching. Its __oppref cookie lasts up to 30 days and __obref up to 365 days; withdrawing consent removes them. Our event calls do not include names, email addresses, phone numbers or messages.
Last updated: 2026-10-08