Version: 2.0
Last updated: 20 August 2026
Effective date: date of publication on the website
Version history: v2.0
1. Who we areThe controller of personal data processed through the website unam.md is the Public Association „Uniunea Asigurătorilor din Republica Moldova”:
- IDNO: 1008600053030
- Registered office: 74 Vasile Alecsandri Street, office 6, Centru district, Chișinău, Republic of Moldova
- E-mail for any request concerning personal data: info@unam.md
- Telephone: +373 69 162 301
We have not appointed a data protection officer. Article 37(1) of Law No. 195/2024 requires such an appointment only for public authorities (letter a), for controllers whose core activity consists of regular and systematic monitoring of data subjects on a large scale (letter b), or of large-scale processing of special categories of data or data relating to criminal convictions (letter c). The Association is not a public authority, and its core activity is representing the collective interests of its members and informing the public, not monitoring individuals. All requests concerning personal data should be sent to
info@unam.md and are handled by the Association's staff.
We process data in accordance with Law No. 195/2024 on personal data protection, in force since 23 August 2026. Processing carried out before that date was governed by Law No. 133/2011, repealed on the same date.
This policy covers the processing of data through the unam.md website, through the form published on it and through the contact channels indicated on the site.
2. What data we process, for what purpose and on what legal basisWhat we do | Data processed | Legal basis |
Receive the question submitted through the „Ask your question” form and prepare the answer | name, telephone number, e-mail address, content of the question | Article 6(1)(f) — our legitimate interest in examining and answering a request addressed to us on your own initiative |
Keep a record of requests received and answers sent | the same data, together with the date and channel of the request | Article 6(1)(f) — our legitimate interest in ensuring traceability of correspondence and consistent replies to repeated requests |
Ensure the operation, availability and security of the website | IP address, device and browser type (user agent), pages accessed, date and time of access | Article 6(1)(f) — our legitimate interest in keeping the service operational and preventing abuse |
Measure website traffic and how the content is used | identifiers stored in cookies, browsing data, source of the visit | Article 6(1)(a) — consent, given through the cookie banner |
Assess the effectiveness of campaigns promoting the Association on social networks | advertising identifiers from cookies, page view events | Article 6(1)(a) — consent, given through the cookie banner |
Publish the contact details of the Association's management | name, position, work telephone number | Article 6(1)(f) — our legitimate interest in transparency and accessibility |
Manage the Association's social network pages | data made available by the platform: comments, messages, aggregated statistics | Article 6(1)(f) — our legitimate interest in communicating with the public |
Whether providing data is mandatory. Your name, telephone number and e-mail address are needed to register your question and send you an answer; without them the form cannot be submitted. The content of the question is up to you.
Form data is not transmitted to advertising platforms. Your name, telephone number, e-mail address and the text of your question stay within the channels described in clause 4 and are not sent to Meta, Google or any other advertising network, not even in hashed form.
We do not take automated decisions producing legal effects concerning you or similarly significantly affecting you within the meaning of Article 22 of Law No. 195/2024. Every answer is prepared by a person.
We do not build profiles of visitors and do not combine form data with browsing data.
3. Situations that require further explanationSpecial categories of data. We do not request and do not need data concerning health, biometric data, or data relating to criminal convictions or court proceedings. Please do not include such data in your question: it is not necessary for a general answer. If such data nevertheless reaches us, we use it solely to answer the request and delete it upon expiry of the period indicated in clause 6.
Other persons' data. If your question contains another person's data, the processing is based on our legitimate interest in answering your request. The person concerned may exercise the rights set out in clause 7 by writing to
info@unam.md, and we will act on the request on the same terms as for anyone else.
Minors. The website addresses the general public and is not directed at children. We do not request age data. The 14-year threshold in Article 8 of Law No. 195/2024 concerns information society services offered directly to a child on the basis of consent, which is not the case for our form, based on legitimate interest.
Right to object to legitimate interest. Where we process data under Article 6(1)(f), you have the right to object at any time on grounds relating to your particular situation (Article 21). In that case we cease processing unless we demonstrate compelling legitimate grounds which override your interests, or the need to establish, exercise or defend a legal claim.
4. Who we share data withWe do not sell your data and do not share it for purposes other than those described in this document. The recipients fall into the following categories:
- the provider of the website and form platform — the company hosting the website and processing form submissions, acting as a processor;
- the Association's e-mail service provider — messages generated by the form arrive in the institutional mailbox;
- providers of traffic analysis and online promotion tools — only on the basis of consent given through the cookie banner, and only in respect of browsing data, not form data;
- social network operators on which the Association maintains pages, as regards data you provide directly on those platforms;
- public authorities, upon their request, in the cases and within the limits provided by law;
- legal advisers, in the event of a dispute.
With processors we have contractual arrangements imposing confidentiality and security obligations, in accordance with Article 28 of Law No. 195/2024.
5. International transfersThe website runs on a platform administered from outside the Republic of Moldova, and the analysis and promotion tools are provided by foreign companies. Accordingly, the data described above may be processed on servers located outside the country, including in the United Arab Emirates (the company administering the website platform), in European Union member states (the servers storing the website and its backups), in the United States of America (the e-mail service and the analysis and promotion tools) and in the Republic of Kazakhstan (technical support for the platform).
Transfers are carried out in accordance with Articles 44–49 of Law No. 195/2024, on the basis of an adequacy decision or of the appropriate safeguards provided by law and included in the contracts concluded with those providers. Further details on the safeguards applied may be requested at
info@unam.md.
6. How long we keep the dataCategory | Retention period |
The question submitted through the form and related correspondence (mailbox and record of requests) | 12 months from the date the answer was sent or, where no answer was required, from receipt of the message |
Technical logs of the website platform | in accordance with the periods set by the platform provider |
Data collected through cookies | in accordance with the lifetime of each cookie, indicated in the settings panel — see the Cookie Policy |
Statistical data in the traffic analysis tool | event data — 2 months; user-level data — 14 months |
Evidence of requests to exercise rights and our replies | 3 years from resolution, in order to demonstrate compliance with our legal obligations (Article 5(2)) |
The 12-month period for requests is set by the Association by reasoned decision, as permitted by Article 10(3) of Law No. 284/2004: the legislation does not lay down a specific period for such messages, and one year covers both possible follow-up on the same question and quality review of the answers given. Upon expiry of these periods the data is deleted.
7. Your rightsUnder Articles 15–22 of Law No. 195/2024, you have the right of access to data concerning you, of rectification of inaccurate data, of erasure, of restriction of processing, of portability of data processed by automated means on the basis of consent, of objection to processing based on legitimate interest (Article 21), as well as the right to withdraw consent at any time, as easily as it was given, without affecting the lawfulness of processing carried out before withdrawal (Article 7(3)).
Consent to cookies is withdrawn through the banner settings panel, available on every page.
The right to erasure does not apply to data we need in order to establish, exercise or defend a legal claim, or which we are required by law to retain (Article 17(3)).
Requests should be sent to
info@unam.md and are handled within one month of receipt (Article 12(3)). This period may be extended by two months for complex requests, in which case we inform you within the first month.
If you consider that the processing infringes your rights, you may lodge a complaint with the National Centre for Personal Data Protection, MD-2004, Chișinău, 48 Serghei Lazo Street, datepersonale.md, or bring the matter before a court.
8. Data securityWe apply technical and organisational measures to protect data against unauthorised access, loss, alteration or disclosure: a secure HTTPS connection, restricted access to the mailbox and to the website administration panel, selection of providers offering appropriate security measures, and deletion of data upon expiry of the retention periods. A general obligation of confidentiality and security is also laid down in Article 10(1) of Law No. 284/2004.
In the event of a personal data breach we notify the National Centre for Personal Data Protection within 72 hours, in accordance with Article 33, and where the breach entails a high risk to your rights we also inform you, in accordance with Article 34.
9. CookiesThe rules on cookies, their categories, the legal basis and how to manage your preferences are described in the
Cookie Policy.
10. Changes to this policy
We update this policy whenever the way we process data or the tools used on the website change. The version in force and the date of the update are shown in the header.
11. ContactFor any question concerning the processing of personal data:
info@unam.md.
Related documents:
Terms of Use,
Cookie Policy.
The Romanian version is the reference version; in the event of any discrepancy, the Romanian text prevails.