Drum National R5 km7 45 mun.Chisinau

Privacy and Personal Data Protection Policy

Last updated: August 21, 2026

This Privacy and Personal Data Protection Policy (hereinafter referred to as the “Policy”) sets out the procedures for the collection, use, storage, and protection of the personal data of users of the autofest.md website (hereinafter referred to as the “Website”).

AutoFest respects users’ right to privacy and processes personal data in accordance with the legislation of the Republic of Moldova, including Law No. 195/2024 on Personal Data Protection.

1. Personal Data Controller

The controller of personal data processed through the Website is:

AutoFest
Address: Drum National R5 km7 45, mun. Chișinău, Republic of Moldova
Phone: +373 79 701 819
E-mail: info@autofest.md
Website: autofest.md

For any questions regarding the processing and protection of personal data, users may contact us at the e-mail address indicated above.

2. Personal Data We Collect

Depending on how users interact with the Website, AutoFest may process the following categories of personal data:

  • name;
  • phone number;
  • e-mail address;
  • make and/or model of the vehicle;
  • information provided by the user when booking diagnostics, repairs, or maintenance services;
  • information contained in users’ messages and requests;
  • information provided when applying for a job vacancy;
  • technical information automatically transmitted when visiting the Website, including IP address, device type, browser, operating system, date and time of the visit, pages visited, and other technical data;
  • data obtained through cookies and similar technologies, if such technologies are used on the Website.

We ask users not to provide information through the Website forms that is not necessary for processing the relevant request.

3. Purposes of Personal Data Processing

Personal data may be processed by AutoFest for the following purposes:

  • processing requests for vehicle diagnostics, repairs, and maintenance;
  • contacting users regarding submitted requests;
  • arranging the date and time of a visit to the auto service center;
  • providing information about AutoFest services;
  • preparing and performing contractual relationships with customers;
  • responding to messages and requests;
  • processing applications for job vacancies;
  • ensuring the proper and secure operation of the Website;
  • preventing abuse, fraud, and unauthorized access;
  • analyzing the operation of the Website and improving the quality of the services provided;
  • complying with obligations imposed by the legislation of the Republic of Moldova.

Personal data will not be used for purposes incompatible with those for which it was originally collected, unless otherwise provided by law or the user has provided the appropriate consent.

4. Legal Bases for Processing

Depending on the specific circumstances, personal data may be processed on the basis of:

  • the consent of the data subject;
  • the necessity to take steps at the user’s request prior to entering into a contract;
  • the necessity to perform a contract to which the user is a party;
  • compliance with AutoFest’s legal obligations;
  • AutoFest’s legitimate interests, provided that the rights and freedoms of the data subject are respected;
  • other legal grounds provided for by the legislation of the Republic of Moldova.

Where processing is based on consent, the user has the right to withdraw their consent at any time.

The withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

5. Contact Forms and Service Appointments

When completing a form on the Website, the user voluntarily provides the requested personal data.

The data is used to process the request and subsequently contact the user.

The user is responsible for the accuracy of the information provided and should provide only their own personal data or data that they are legally entitled to provide.

6. Job Applications

When applying for employment, AutoFest may process the applicant’s name, contact details, desired position, message content, CV, and other information voluntarily provided by the applicant.

Such data is used exclusively for reviewing the application, contacting the applicant, and carrying out the recruitment process.

If the applicant is not employed, their data will be retained only for the period necessary to complete the recruitment process, unless longer retention is based on the applicant’s consent or another lawful basis.

7. Cookies

The Website may use cookies and similar technologies necessary for its operation, security, storage of user preferences, traffic analysis, and improvement of the Website.

Some cookies are strictly necessary for the operation of the Website.

Cookies that are not strictly necessary are used, where applicable, only on an appropriate legal basis, including the user’s consent where such consent is required by law.

Users may change cookie settings in their browser and, where an appropriate mechanism is available on the Website, through the cookie settings provided on the Website.

More detailed information about the cookies used may be provided in a separate Cookie Policy.

8. Disclosure of Personal Data to Third Parties

AutoFest does not sell users’ personal data.

Personal data may be disclosed to third parties only to the extent necessary to achieve the purposes of processing, including:

  • web hosting and technical support providers;
  • IT service providers;
  • e-mail and communication service providers;
  • analytics providers and other online service providers, if such services are used on the Website;
  • public authorities and other authorized persons where required by law.

When engaging service providers, AutoFest takes reasonable measures to ensure an appropriate level of protection for personal data.

9. Transfer of Data Outside the Republic of Moldova

When certain technical, cloud-based, analytical, or other services are used, personal data may be processed or stored outside the Republic of Moldova.

Where such a transfer takes place, AutoFest takes the necessary measures to ensure that the transfer is lawful and that an appropriate level of personal data protection is provided in accordance with applicable legislation.

10. Personal Data Retention Period

Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected.

The retention period is determined taking into account:

  • the purpose of processing;
  • the duration of the relationship with the customer;
  • the need to fulfill contractual obligations;
  • accounting, tax, and other legal requirements;
  • the need to protect AutoFest’s legitimate interests;
  • applicable limitation periods;
  • the user’s consent, where processing is based on consent.

Once the purposes of processing have been fulfilled and there is no lawful basis for further retention, personal data will be deleted, anonymized, or destroyed.

11. Personal Data Security

AutoFest implements appropriate technical and organizational measures to protect personal data against:

  • unauthorized access;
  • unlawful use;
  • accidental loss;
  • destruction;
  • alteration;
  • disclosure;
  • copying and other unauthorized actions.

Access to personal data is granted only to persons who require such access in order to perform their relevant duties.

12. User Rights

In the cases and within the limits provided by the legislation of the Republic of Moldova, the data subject has the right to:

  • obtain information about the processing of their personal data;
  • obtain access to their personal data;
  • request the rectification of inaccurate or incomplete data;
  • request the deletion of personal data;
  • request restriction of processing;
  • object to the processing of personal data;
  • withdraw previously given consent;
  • exercise the right to data portability in cases provided for by law;
  • not be subject to a decision based solely on automated processing where such a decision produces legal effects or other significant effects provided for by law;
  • lodge a complaint with the competent personal data protection authority.

The exercise of certain rights may be restricted in cases expressly provided for by law.

13. How to Exercise Your Rights

To exercise rights relating to personal data, users may submit a request to:

E-mail: info@autofest.md

We recommend that the request include the user’s name, contact details, the nature of the request, and information allowing us to identify the personal data to which the request relates.

To prevent unauthorized access, alteration, or deletion of data, AutoFest may request additional information necessary to verify the identity of the person making the request.

Requests will be processed in accordance with the procedures and within the time limits established by the legislation of the Republic of Moldova.

14. Right to Lodge a Complaint

If a user believes that their personal data is being processed in violation of applicable legislation, they have the right to lodge a complaint with the National Center for Personal Data Protection of the Republic of Moldova (CNPDCP) or to use other legal remedies available to protect their rights.

15. Links to Third-Party Websites and Services

The Website may contain links to third-party websites, maps, social platforms, and other external resources.

AutoFest does not control how such third-party resources process personal data.

Before providing personal data to a third-party service, users are advised to review the privacy policy of the relevant service.

16. Minors’ Data

The Website and AutoFest services are not specifically intended to collect personal data from minors.

If AutoFest becomes aware that a minor’s personal data has been obtained without the necessary legal basis or without the consent of a legal representative where such consent is required, the relevant data may be deleted.

17. Changes to this Policy

AutoFest reserves the right to periodically amend this Policy due to changes in legislation, Website functionality, services used, or personal data processing practices.

The current version of the Policy will be published on the Website.

The date of the latest update is indicated at the beginning of this document.

18. Contact Information

For any questions regarding this Policy or the processing of personal data, please contact us at:

AutoFest
Drum National R5 km7 45, mun. Chișinău, Republic of Moldova
Phone: +373 79 701 819
E-mail: info@autofest.md