Security policy
Personal data controller
Website www.infobiz.md is the property of I.M."INCASO" SRL, the operator is registered under the number 0000005 in the Register of personal data operators (www.registru.datepersonale.md) and has been authorized by the National Center for Personal Data Protection to process the personal data of its customers. The authorisation by the authority responsible for the legal regime for the protection of personal data demonstrates that the controller by means of the organisational and technical measures adopted ensures an adequate level of protection of personal data.
Who can use the site
Access can be made by any natural person, in his own name and only if he has reached the age of 18.
The activities carried out by the operator are intended for residents and non-residents of the Republic of Moldova, or, as the case may be, other persons in connection with the provision of services.
All information accessible on the site that concerns text, image, structure, etc.content is exclusively intended for natural/legal persons for personal use and is protected in accordance with national copyright and related rights legislation. Any copying or use of this information for purposes other than that stated is prohibited and leads to liability in accordance with applicable law.
System authentication mode
Registration in the system is carried out by accessing the web page www.infobiz.md the following categories of data must be recorded:
Login personal account;
Password personal account;
Email;
Phone;
Registration will be successful only after completing all the required fields. The password is confidential and cannot be disclosed to other third parties.
Upon completion of filling in the specific headings, the personal data subject confirms that the personal data entered by him are truthful and belong to him.
By performing these steps, you will have your personal cabinet on the platform www.infobiz.md .
Categories of personal data processed
The controller will collect the following categories of personal data: Name, Surname, place of residence, preferred language of communication, telephone number, email address, bank data as well as other identifiers of the data subject if these data will be recorded at his request by: address, request, complaint or any other way in connection with the object of the provision of services.
Under this system of records it is forbidden to collect special category of personal data.
Purpose of personal data processing
Personal data are collected and processed within the records system for the purpose of:
keeping records of customers who have requested / benefited or who intend to request / benefit from the services provided by the operator;
providing support for services rendered;
fulfillment of other obligations resulting from legal relations established with clients.
The controller does not process personal data for purposes other than those indicated.
Notification of cross-border transfer
Personal data will be stored on servers in the Republic of Moldova, but under the monitoring and control of the operator.
Legal basis for the processing of personal data
A separate consent will not be concluded if the data is collected directly from the client (by interviewing/questioning face to face or by phone, or the data will be recorded in the system through the web interface directly by the user), in the case of:
a) actions necessary before the conclusion of the contract relating to the creation of the personal Cabinet on the website www.infobiz.md, making payments online or by means of an address to the company's telephone line, preparing and examining the consumer inquiry, taking over the order;
b) activities indispensable to the execution of the contract that relate to keeping records of debtors, providing support to the requested/rendered services, as well as other civil aspects resulting from the concluded legal relationships.
In all cases of processing personal data in the absence of a separate consent, the controller or the processors shall inform the data subjects at least about: the purpose for which the data are collected, the legal basis, the volume and categories of data, the term of storage, the mode of use, the processors and their rights.
The personal data controller informs that the personal data may also be used for other purposes expressly provided by law, such as: at the request of police or control bodies - activities that the data controller cannot preset but takes into account when collecting personal data. In the event of such situations, the data controller will verify the compliance of the request in terms of compliance with the principles of protection of personal data and will execute it only in the case of the existence of the purpose and legal basis.
Recipients of personal data
The controller may disclose personal data to:
Employees - within the limits of functional duties distributed by internal acts;
Contractual beneficiaries – the persons to whom you are a debtor;
Credit history bureaus;
Processors:
The companies responsible for ensuring the maintenance and servicing of the technical equipment – insofar as the concrete situation is necessary and authorized by the administration;
Responsible companies that provide software maintenance;
Companies responsible for providing external financial audit;
Companies responsible for receiving and delivering postal items;
Other personal data controllers:
Credit history bureaus;
Bailiffs;
National Center for Personal Data Protection;
State Tax Service;
The Council Consumer Protection Agency;
Law enforcement bodies ;
Natural or legal persons who have been mentioned by the customer as recipients of personal data.
To contractual partners or institutions in respect of which you have consented to the transmission of personal data.
Transmission to other third parties without the consent of the data subject is prohibited.
Processing of personal data in the context of using e-commerce services
In accordance with the provisions of regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (general Data Protection Regulation), and law no. According to law no.133/2011 on the protection of personal data of the Republic of Moldova, the company has the obligation to process safely and only for the purposes specified below, the personal data you provide us about yourself.
The recorded information is intended for use by the company, as a controller, registered in the Register of personal data processing, and is communicated only to the following recipients:
IT service provider that ensures the functionality of this site;
judicial authority, prosecution bodies and other institutions empowered by law to request information;
payment processor;
Your Personally Identifiable Information will not be sold, exchanged, transferred or given to any other company for any reason without your consent.this does not include trusted third parties, in this case the company's proxy, who assist us in ensuring the maintenance of the platform, as long as the parties maintain the confidentiality of this information.
By using e-commerce services, you accept the terms and conditions of personal data protection. Personal data may be processed only for the purposes set out above for as long as it is necessary according to the tax legislation in force. The company may reserve the right to process, on legitimate grounds, certain personal data longer than the tax legislation in force, exclusively if the competent national authorities can decide on certain investigations according to the deadlines stipulated in the Administrative Code, the criminal/contravention code or other specific laws. Other personal data processed by the company may only be used if you express explicit and granular consent on one of our sites/of our data processors.
Rights of subjects of personal data
The right to information - consists in the right to be informed before the personal data are collected and processed about the identity of the controller, the purpose for which the data is processed, the recipients or categories of data recipients, the existence of the rights provided by the law on personal data protection, as well as the conditions under which they can be exercised.
Right of access to data - consists of the right to obtain from the controller on the basis of a request, confirmation/refutation of whether or not the personal data concerning him or her have been processed, information on the purposes and categories of data processed, the recipients or categories of recipients to whom the data are disclosed, how the Automated Data Processing is carried out, the legal consequences generated by the data processing for the data subject and how to exercise the right of intervention on personal data.
Right of intervention - consists in obtaining on the basis of a request, rectification, updating, blocking, erasure or transformation into anonymous data of information whose processing does not comply with the requirements of the law on the protection of personal data, in particular incomplete or inaccurate data.
Right of opposition - consists of the right to object at any time, for legitimate and legitimate reasons related to his particular situation, that the data concerning him be the subject of processing, unless there are legal provisions that provide otherwise.
The right not to be subject to an individual decision - consists in the possibility to request and obtain the withdrawal, cancellation or reassessment of any decision that produces legal effects in respect of the data subject that was adopted solely on the basis of automated processing designed to assess some aspects of his personality, such as professional competence, credibility, behavior or other such aspects.
The right to justice - consists in the right to address the National Center for the protection of Personal data or the court of law, for the defense or reinstatement of the injured Rights. Therefore, you have the right to file a complaint with the National Center for Personal Data Protection if you are not satisfied with any aspect of our processing of personal data or believe that we are not fulfilling our responsibilities as a data controller. The contact details of the authority are: MD-2004, Republic Of Moldova, mun. Chisinau, str. Serghei Lazo, 48, tel: +373-22-820801, fax: +373-22-820807, e-mail: centru@datepersonale.md
In order to exercise these rights, you can apply with a written request sent by using postal services to the address: mun. Chisinau, str. Calea Iesilor, 10B, to the attention of the Personal Data Protection Officer or by using e-mail services office@gdpr.md at the address https://www.infobiz.md . We will respond to the request within a maximum of 15 days from the date of receipt.
You can also refuse to provide personal data to the company. Refusal to provide such data does not exclude the legal basis for processing established by art. 5 para. (5) of Law No. 133/2011 on the protection of personal data.
Cookies
The data controller processes two types of cookies: per session and fixed. The latter are temporary files that remain in the user's terminal until the end of the session or the closure of the application (web browser).
Cookies themselves do not request and are not joined to other additional information that could lead to the identification of unregistered visitors.
When the internet session ends, session cookies are automatically deleted.
Blocking access to the site
Access to the site may be blocked if:
You have violated the above rules and requirements;
The right of opposition was realized;
If you have created more than one authorized user profile on this site.