How S.C. ‘BIO-MARKET’ S.R.L. processes the data of people who use the website and submit enquiries.

Controller
S.C. ‘BIO-MARKET’ S.R.L., IDNO 1005600004260
Updated
23 August 2026
Version
2026-08-23-v1

Scope and legal framework

This policy describes the processing observed on bio-market.md. Republic of Moldova Law No. 195/2024 on personal data protection applies from 23 August 2026. The website also applies GDPR-level safeguards as a voluntary technical standard. Direct application of the GDPR under Article 3 is not asserted: establishment in the EU, intentional offering of goods or services to people in the EU/EEA, and monitoring of their behaviour have not been confirmed by the controller.

Accessing the website from the EU alone does not establish the territorial application of the GDPR. The controller must confirm the countries targeted, delivery, advertising and any monitoring.

Controller and contact details

S.C. ‘BIO-MARKET’ S.R.L., IDNO 1005600004260. Public telephone: +373 (79) 43-37-52. Public email and privacy enquiries: info@bio-market.md.

Published contact address: 10 Academiei Street, office 44, Chișinău, MD-2028, Moldova. This address has not been confirmed as the legal/registered office. The legal address and appointment of a data protection officer (DPO) are awaiting confirmation; the email above is not presented as a DPO address.

Data, sources, purposes and legal bases

OperationDataPurpose and natureLegal basis awaiting validation
Online enquiryName, email, budget, timeframe, message/project and technical submission metadataResponding to a voluntarily submitted enquiry; marked fields are required for a responseSteps requested by the individual before entering into a contract, or legitimate interests, depending on the enquiry; the final mapping requires approval
Telephone consultationName, telephone, preferred date and time, technical metadataArranging the requested callPre-contractual steps requested by the individual; internal confirmation required
Security and operationIP address, date/time, URL, user agent, response status and technical logsSecurity, diagnostics, abuse prevention and page deliveryLegitimate interests; the balancing assessment reference has not been provided
Accounts/commerceAccount or order data only if these functions are enabled and usedThe website is technically in catalogue mode; adding to the cart and checkout are disabledActive order processing is not asserted without evidence

Data comes directly from the individual and their device through HTTP requests. Purchased data sources, enrichment, sale, profiling or uploads to advertising platforms have not been confirmed.

Recipients, providers and transfers

The website and database are hosted on DigitalOcean infrastructure in the fra1 region (Frankfurt, Germany). Form emails are delivered to a local mailbox, info@bio-market.md. Additional forwarding to a Gmail account is configured, but at the time of the last update it was not working because outbound SMTP connections on port 25 timed out; we do not assert that Gmail receives enquiries.

Processing agreements, exact roles, access locations, contractual clauses and safeguards for possible transfers have not been provided for verification. These matters require the controller’s approval before further statements are made.

Retention, deletion and backups

Nginx logs are rotated daily, with 14 compressed rotations observed. WooCommerce retains local logs in its uploads directory. An approved retention schedule for emails, forms, the database and backups has not been confirmed; therefore, no invented retention periods are published. The controller must adopt retention periods and deletion mechanisms, including for backups and legal holds.

Security

HTTPS, blocked web access to sensitive files and technical reports, public caching without an anonymous session created for consent, and storage of the preference in the browser have been verified. No technical measure can eliminate risk completely. Internal access, incident and continuity processes require organisational confirmation.

Your rights

You may request information, access, rectification, erasure, restriction, portability, objection and withdrawal of consent, subject to the conditions and limits of the law. Send your request to info@bio-market.md. To protect the data, we may request proportionate information to verify your identity.

You may lodge a complaint with the National Centre for Personal Data Protection: 48 Serghei Lazo Street, Chișinău, MD-2004, telephone (022) 820 801, centru@datepersonale.md, official complaints guidance.

At the time of the inventory, no optional analytics, marketing, chat or external-content technologies were active. The preference is stored locally in the browser and can be changed at any time.

Open the cookie policy and settings

Automated decisions, children and external platforms

No automated decision-making or profiling with legal effects was identified. A minor audience and processing of children’s data have not been confirmed as purposes of the website. Social network links open separate websites; those platforms’ operators apply their own policies after you choose to visit them.

Incidents and changes

The controller must maintain procedures to assess and notify incidents to the CNPDCP and, where required by law, to affected individuals. Material changes to purposes, providers or categories will lead to an updated version and a request for a new choice.

Official sources