Security policy

Personal Data Operator

The website www.infobiz.md is operated by Î.M. “INCASO” SRL and BIC INFODEBIT CREDIT REPORT SRL. The operator is registered in the Register of Personal Data Operators under number 0000005 / PERSONAL DATA OPERATOR 0001302 (www.registru.datepersonale.md) and is authorized by the National Center for Personal Data Protection to process the personal data of its clients. Authorization granted by the authority responsible for the legal regime of personal data protection demonstrates that the operator, through the organizational and technical measures adopted, ensures an adequate level of personal data protection.

Who Can Use the Website

Access may be granted to any individual acting on their own behalf and only if they have reached the age of 18.

The activities carried out by the operator are intended for residents and non-residents of the Republic of Moldova or, where applicable, for other persons in connection with the provision of services.

All information accessible on the website regarding text content, images, structure, etc. is intended exclusively for personal use by individuals/legal entities and is protected in accordance with national legislation regarding copyright and related rights. Any copying or use of this information for purposes other than those stated herein is prohibited and entails liability in accordance with applicable legislation.

Authentication Procedure

Registration in the system is carried out by accessing the webpage www.infobiz.md, where the following categories of data are required:

  • Personal account login;
  • Personal account password;
  • E-mail address;
  • Telephone number.

Registration can only be completed successfully after all mandatory fields have been filled in. The password is confidential and may not be disclosed to third parties.

Upon completion of the required fields, the personal data subject confirms that the personal data entered is accurate and belongs to them.

After completing these steps, you will have access to your personal account on the www.infobiz.md platform.

Categories of Personal Data Processed

The operator will collect the following categories of personal data: first name, last name, place of residence, preferred communication language, telephone number, email address, banking details, as well as other identifiers of the data subject if such data is provided at their request through inquiries, requests, complaints, or any other means related to the provision of services.

The collection of special categories of personal data is prohibited within this record-keeping system.

Purpose of Personal Data Processing

Personal data is collected and processed within the record-keeping system for the following purposes:

  • maintaining records of clients who have requested/benefited from or intend to request/benefit from the services provided by the operator;
  • providing support regarding the services rendered;
  • fulfilling other obligations arising from legal relationships established with clients.

The operator does not process personal data for purposes other than those indicated above.

Notice Regarding Cross-Border Transfer

Personal data will be stored on servers located in the Republic of Moldova under the monitoring and control of the operator.

Legal Basis for Personal Data Processing

Separate consent will not be required if the data is collected directly from the client (through face-to-face or telephone interviews/questionnaires, or if the data is entered into the system directly by the user through the web interface), in the following cases:

a) actions necessary prior to concluding a contract, relating to the creation of a personal account on the website www.infobiz.md, making online payments or requests through the company’s telephone line, processing and reviewing consumer applications, and order processing;

b) activities necessary for the execution of the contract relating to maintaining debtor records, providing support for requested/provided services, as well as other civil matters arising from established legal relationships.

In all cases of personal data processing without separate consent, the operator or persons authorized by the operator shall inform the data subjects at least about: the purpose for which the data is collected, the legal basis, the scope and categories of data, the storage period, the method of use, the persons authorized by the operator, as well as their rights.

The personal data operator informs that personal data may also be used for other purposes expressly provided by law, such as requests from police authorities or supervisory authorities — activities which the operator cannot predetermine but takes into account when collecting personal data. In such situations, the operator shall verify that the request complies with personal data protection principles and shall execute it only where there is a legitimate purpose and legal basis.

Recipients of Personal Data

The operator may disclose personal data to:

  • Employees — within the limits of functional duties established by internal regulations;
  • Contractual beneficiaries — persons to whom you are indebted;
  • Credit bureaus;

Persons authorized by the operator:

  • Companies responsible for technical maintenance and servicing of equipment — to the extent necessary and authorized by the administration;
  • Companies responsible for software maintenance and administration;
  • Companies responsible for external financial audit services;
  • Companies responsible for receiving and delivering postal correspondence;

Other personal data operators:

  • Credit bureaus;
  • Bailiffs;
  • National Center for Personal Data Protection;
  • State Tax Service;
  • Consumer Protection Agency;
  • Law enforcement authorities;
  • Individuals or legal entities indicated by the client as recipients of personal data.

Contractual partners or institutions to whom you have consented to transfer your personal data.

Transfer of personal data to other third parties without the consent of the data subject is prohibited.

Processing of Personal Data in the Context of Electronic Commerce Services

In accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons regarding the processing of personal data and on the free movement of such data (General Data Protection Regulation), as well as Law No. 133/2011 on Personal Data Protection of the Republic of Moldova, the Company is obliged to process personal data securely and only for the purposes specified below.

The recorded information is intended for use by the Company, as a registered personal data operator, and is disclosed only to the following recipients:

  • the IT service provider ensuring the functionality of this website;
  • judicial authorities, criminal investigation bodies, and other institutions authorized by law to request information;
  • the payment processor.

Your personal identification information will not be sold, exchanged, transferred, or provided to any other company for any reason without your consent. This does not include trusted third parties, namely persons authorized by the Company who assist in maintaining the platform, provided that such parties maintain the confidentiality of this information.

By using electronic commerce services, you accept the terms and conditions regarding personal data protection. Personal data may only be processed for the purposes mentioned above for as long as required under applicable tax legislation. The Company may reserve the right to process certain personal data beyond the period provided by tax legislation, exclusively where competent national authorities may initiate investigations within the periods established by the Administrative Code, Criminal/Contravention Code, or other specific laws. Other personal data processed by the Company may only be used where you provide explicit and granular consent on one of our websites or those of our authorized partners.

Rights of Personal Data Subjects

Right to Information — the right to be informed before personal data is collected and processed regarding the identity of the operator, the purpose of processing, recipients or categories of recipients of the data, the existence of rights provided by personal data protection legislation, and the conditions under which such rights may be exercised.

Right of Access — the right to obtain confirmation from the operator, upon request, as to whether personal data concerning the individual is being processed, as well as information regarding the purposes and categories of processed data, recipients or categories of recipients to whom the data is disclosed, the manner in which automated processing is carried out, the legal consequences of processing for the data subject, and the means of exercising intervention rights.

Right to Intervention — the right to obtain, upon request, rectification, updating, blocking, deletion, or anonymization of data whose processing does not comply with personal data protection legislation, especially incomplete or inaccurate data.

Right to Object — the right to object at any time, for legitimate reasons related to the individual’s particular situation, to the processing of personal data concerning them, except where otherwise provided by law.

Right Not to Be Subject to an Individual Decision — the right to request and obtain withdrawal, cancellation, or reconsideration of any decision producing legal effects concerning the data subject where such decision was based exclusively on automated processing intended to evaluate aspects such as professional competence, credibility, behavior, or similar characteristics.

Right to Justice — the right to apply to the National Center for Personal Data Protection or to a court of law in order to defend or restore violated rights. Therefore, you have the right to lodge a complaint with the National Center for Personal Data Protection if you are dissatisfied with any aspect of our processing of personal data or believe that we are failing to fulfill our obligations as a data operator.

Authority contact details:
MD-2004, Republic of Moldova, Chișinău municipality, 48 Serghei Lazo Street
Tel: +373-22-820801
Fax: +373-22-820807
E-mail: [email protected]

To exercise these rights, you may submit a written request by postal services to: mun. Chișinău, 10B Calea Ieșilor Street, addressed to the Personal Data Protection Officer, or by e-mail at [email protected] through https://www.infobiz.md. We will respond within a maximum of 15 days from receipt of the request.

You may also refuse to provide personal data to the Company. Refusal to provide such data does not exclude the legal basis for processing established under Art. 5 para. (5) of Law No. 133/2011 on Personal Data Protection.

Cookies

The operator processes two types of cookies: session cookies and persistent cookies. The latter are temporary files that remain on the user’s device until the session ends or the browser application is closed.

Cookies themselves do not request and are not linked to additional information that could identify unregistered visitors.

At the end of the internet session, session cookies are automatically deleted.

Blocking Access to the Website

Access to the website may be blocked if:

  • you have violated the rules and requirements set out above;
  • the right to object has been exercised;
  • you have created more than one authorized user profile on this website.