Last updated: 2026-05-13
TRIO SERVICES COMPACT SRL ("Mango Parking") processes your personal data in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Romanian law.
Depending on how you use the service we collect: (a) Account data — email, password (stored hashed by Firebase Authentication), display name, preferred language; (b) Billing data for individuals (PF) — ID document type (CNP, CI series or passport) and number, first name, last name, home address (required to issue fiscal invoices under Romanian tax law); (c) Billing data for companies (PJ) — company name, fiscal code (CUI), trade-register number (optional), registered address; (d) Contact data — email, phone; (e) Vehicle data — license plate, booking and credit-usage history; (f) Payment data — handled exclusively by Netopia Payments (we do not store card numbers); for pay-on-arrival orders we only record the payment status (paid, unpaid, who confirmed it); (g) Technical data — IP, browser/device type, access logs, essential cookies.
We use the data to: (a) perform the parking contract and operate your account; (b) issue fiscal invoices and maintain accounting records under Romanian law — CNP / CI series / passport numbers are collected strictly for this purpose; (c) communicate about your order (confirmations, reminders, support); (d) meet legal obligations (tax, consumer protection); (e) with your consent, send marketing communications.
Data may be shared with: Netopia Payments (online payment processing), Sendinblue SAS / Brevo (transactional email delivery — France, EU), Google Cloud / Firebase (cloud infrastructure, authentication — Google Ireland, EU), ANAF (CUI lookup to auto-fill PJ invoices), public authorities when the law requires it. We do not sell data to third parties.
Contract and fiscal documents (including invoices that contain ID data — CNP, CI series, etc.) are retained for 10 years under Romanian tax law. Account data is kept until you request its deletion — either from your account panel or by email to gdpr@mangoparking.ro. Once an account is deleted, identifying data remains in archived invoices only for the mandatory fiscal period. Technical access logs are kept for at most 12 months.
You have the right of access, rectification, erasure, restriction, portability, objection, and to lodge a complaint with the Romanian DPA (ANSPDCP). To exercise these rights write to gdpr@mangoparking.ro. Note that data we are required to retain for tax purposes (invoices) cannot be deleted before the legal 10-year retention period expires.