Privacy policy
Last updated: 13 October 2026
This policy explains what personal data we process when you use the online service ProCMR (online CMR documents), for what purposes, how long we keep it and what rights you have, in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Romanian law.
1. Data controller
MOUTARDI SRL, tax ID RO18215584, Trade Register no. J11/1087/2005, Str. Trandafirilor no. 11, Băile Herculane, Caraș-Severin County, Romania. Contact for any request concerning personal data: contact@moutardi.ro.
2. What data we process
| Category | Data |
|---|---|
| Account data | e-mail address, password (stored only in encrypted form, we cannot read it), country, chosen language, company name (optional), registration date and acceptance of the terms |
| Data entered in documents | company data (sender, consignee, carrier: name, address, tax code), driver data (name, ID/licence number, telephone), vehicles (registration numbers), description of the goods and the other fields of the CMR document, as well as the companies, drivers and vehicles you have saved for automatic completion |
| Payment and order data | the pack purchased, amount, currency, date, status and Stripe payment identifiers. We do not store the card number. |
| Technical data | IP address and browser information, used for security, limiting abusive attempts (for example at registration) and troubleshooting |
3. Purposes and legal bases of processing
- Providing the service (creating the account, saving and editing documents, printing, managing units) – performance of the contract (Art. 6(1)(b) GDPR).
- Payment processing and accounting/tax obligations – performance of the contract and legal obligations (Art. 6(1)(b) and (c)).
- Security of the service, prevention of fraud and abuse (including multiple accounts for free units) – our legitimate interest (Art. 6(1)(f)).
- Account-related communications (confirmations, password reset, notices of important changes) – performance of the contract / legitimate interest.
- Replying to your requests – legitimate interest and performance of the contract.
We do not use your data for advertising, we do not carry out profiling and we do not take automated decisions with legal effect on you. We do not sell personal data.
4. Third-party data you enter in documents
CMR documents naturally contain data of third parties (companies, drivers). For this data, you are the controller and you are responsible for the lawfulness of entering it into the Service, while MOUTARDI SRL acts as processor: we process it only to provide you with the service, according to your instructions, under a duty of confidentiality and with the security measures in section 8. We do not use it for our own purposes.
5. How long we keep data
- Account data and documents: as long as the account is active. On a request to delete the account, we delete them within a reasonable time (as a rule, at most 30 days), except for data that the law requires us to keep.
- Payment documents and orders: in accordance with Romanian accounting and tax legislation (generally 10 years).
- Technical data (IP, security logs): for short periods, as needed for security and troubleshooting.
6. Who we share data with
- Stripe Payments Europe, Ltd. (Ireland) – payment processor. Stripe processes card data on its own behalf, in accordance with its privacy policy (stripe.com/privacy).
- The hosting and technical services provider that provides our server, backups and e-mail delivery, as processor.
- Public authorities, if we are required by law.
- Advisers (accountant, legal), strictly as far as necessary and under a duty of confidentiality.
Data is mainly processed in the European Economic Area. If a provider (for example Stripe) transfers data outside the EEA, the transfer is made on the basis of the safeguards provided by the GDPR (adequacy decisions or standard contractual clauses).
7. Your rights
You have the right of access, rectification, erasure, restriction, portability and objection, as well as the right to withdraw your consent where processing is based on it. To exercise your rights, write to us at contact@moutardi.ro; we will reply within one month at most. You also have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP) – dataprotection.ro, B-dul G-ral Gheorghe Magheru 28-30, Sector 1, Bucharest.
8. Security
We apply appropriate technical and organisational measures: encrypted connection (HTTPS), encrypted password storage, restricted access to data, periodic backups and limiting of abusive login attempts. However, no method of transmission or storage is completely free of risk.
9. Minors
The Service is aimed at transport professionals and is not intended for persons under 16.
10. Cookies
We use only cookies strictly necessary for the operation of the account. Details in the Cookie Policy.
11. Changes
We may update this policy; the version in force is the one published here, with the date of the last update. For important changes we will inform you by e-mail or in the application.