Bucaru Privacy Policy

At Bucaru, we respect and protect the privacy of individuals who interact with our digital services and technological solutions related to vehicle monitoring and preventive maintenance. This policy explains clearly how we collect, use and protect your personal data in accordance with applicable data protection law in the European Union, including the GDPR.

1. Data controller

The data controller responsible for processing your personal data is Bucaru (“Bucaru”, “we” or “us”).
You can contact us for any privacy-related question at: contact@bucaru.ai.

If required by Dutch or EU law, we will appoint a Data Protection Officer (DPO) and publish their contact details on our website.

2. Personal data we may collect

Depending on how you interact with Bucaru, we may process the following categories of personal data:

  • Identification data: first name, last name, country of residence, preferred language.

  • Contact details: email address, phone number, company and job title (where applicable).

  • Platform usage data: information about how you use our applications or services, access logs and technical activity necessary to ensure security and proper functioning of the service.

  • Vehicle-related data: technical information about the vehicle and its mechanical health, insofar as this is necessary to provide monitoring and preventive maintenance services.

We do not intentionally collect sensitive data (such as health, political opinions, religious beliefs, etc.).

3. Purposes of processing

We use your personal data only for specific and legitimate purposes, including:

  • Providing and maintaining Bucaru’s services, including vehicle monitoring features and generation of preventive alerts.

  • Managing our commercial and support relationship with you or your organisation (responding to enquiries, coordinating pilots or tests, sending necessary technical communications).

  • Improving our products and services through aggregated and statistical analysis, using pseudonymised or anonymised data whenever possible.

  • Complying with legal obligations that apply to us, such as accounting or security requirements.

We will not use your personal data for purposes that are incompatible with the ones described above unless there is a valid legal basis and we inform you transparently.

We process your personal data on the following legal bases:

  • Performance of a contract or pre-contractual measures: when your data are necessary to provide our services to you or to negotiate their provision.

  • Legitimate interests of Bucaru: for example, to improve service quality, ensure platform security or maintain business continuity, always balancing our interests with your rights and freedoms.

  • Compliance with legal obligations: when Dutch or EU law requires us to retain or disclose certain data.

  • Consent: for specific communications or activities that require your explicit permission, which you may withdraw at any time.

5. Data retention

We will retain your personal data only for as long as necessary to fulfil the purposes for which they were collected and for as long as legal obligations or potential liabilities may arise from those processing activities.
Once these periods have expired, data will be securely deleted or anonymised.

6. Recipients and international transfers

We may share personal data with carefully selected service providers (for example, hosting, support or analytics providers) who act as processors on our behalf under contracts that ensure confidentiality and compliance with data protection law.

If we transfer personal data outside the European Economic Area, we will only do so where appropriate safeguards are in place (such as Standard Contractual Clauses or other mechanisms recognised by the European Commission).

7. Data security

Bucaru applies appropriate technical and organisational measures to protect your data against unauthorised access, alteration, loss or destruction.
These measures include access controls, encryption in transit where appropriate, and good practices for managing our technical infrastructure.

8. Your data protection rights

Under the GDPR and applicable Dutch law, you have the following rights regarding your personal data:

  • Right of access: to obtain confirmation as to whether we process your data and to access such data.

  • Right to rectification: to have inaccurate or incomplete data corrected.

  • Right to erasure: to request deletion of your data in certain circumstances, for example when they are no longer necessary for the purposes for which they were collected.

  • Right to object: to object to processing based on our legitimate interests, on grounds relating to your particular situation.

  • Right to restriction of processing: to request that the use of your data is temporarily limited in specific cases.

  • Right to data portability: to receive your data in a structured, commonly used and machine-readable format and to transmit those data to another controller, when technically feasible and when the processing is based on consent or a contract.

To exercise any of these rights, or to ask any question about how we process your data, you can contact us at contact@bucaru.ai clearly indicating your request and providing the information necessary for us to verify your identity.

You also have the right to lodge a complaint with a supervisory authority. In the Netherlands, this is the Autoriteit Persoonsgegevens (Dutch Data Protection Authority).

9. Marketing communications

You will only receive marketing or promotional communications from Bucaru where there is a valid legal basis for doing so, typically your consent or a pre-existing customer relationship that allows such communications under applicable law.
You can unsubscribe from these communications at any time by following the link in the message or by contacting us at contact@bucaru.ai.

10. Changes to this policy

We may update this privacy policy to reflect changes in Bucaru’s services, in applicable laws or in our internal data processing practices.
We will publish the updated version on our website and indicate the date of the last revision.