Privacy Policy
on the processing of personal data through the website
BPM TRADE SRL
1. General provisions
BPM TRADE SRL, hereinafter referred to as “BPM TRADE”, the “Company” or the “Controller”, respects every person’s right to privacy and personal data protection and undertakes to ensure that personal data is processed lawfully, fairly, transparently and securely.
This Privacy Policy sets out how BPM TRADE SRL collects, uses, stores, discloses and protects personal data processed through the Company’s website when online orders are placed and fulfilled, commercial offers are requested, communications are conducted with clients and partners, applications and messages are submitted through the forms available on the website, and recruitment activities are carried out.
This Policy applies to all persons who visit the website, use the services provided through it or submit personal data to the Company through any communication method available on the website.
Personal data is processed in accordance with the applicable personal data protection legislation and other regulations in force in the Republic of Moldova.
Accessing and using the website implies that the user has familiarised themselves with the provisions of this Privacy Policy.
2. Personal data controller
The personal data controller is:
BPM TRADE SRL
Registered address: 78 Uzinelor Street, Chișinău Municipality, Republic of Moldova
Email: info@bpm.md
Telephone: +373 22 480 480
For any questions concerning the processing of personal data or the exercise of rights provided for by applicable legislation, data subjects may contact the Company using the contact details specified in this Policy.
3. Categories of personal data processed
Depending on the services used and the nature of the relationship with the Company, BPM TRADE SRL may process the following categories of personal data:
first name and surname;
email address;
telephone number;
information concerning orders placed, products ordered, order history and related communications;
data contained in requests for commercial offers, messages and correspondence submitted through the website;
information contained in CVs, cover letters, diplomas, certificates and other documents submitted during the recruitment process;
IP address, online identifiers, browser type, operating system, information about the device used and other technical data generated while using the website;
any other information voluntarily provided by the data subject.
The Company processes only the data necessary to achieve the purposes for which it was collected and does not intentionally request special categories of personal data, except where expressly required by law or where such data is provided voluntarily and is necessary for the relevant legal relationship.
4. Purposes and legal grounds for processing
Personal data is processed for the following purposes:
administering and ensuring the operation of the website;
receiving and confirming online pre-orders;
communicating with clients;
reviewing applications and enquiries submitted through the website;
preventing fraud and ensuring the security of information systems;
improving the website’s functionality and analysing how it is used;
conducting recruitment and personnel selection processes.
Personal data is processed only to the extent necessary to fulfil online pre-orders, administer and secure the website, and protect the Company’s rights and legitimate interests.
The data subject’s consent is requested only where applicable legislation expressly requires it.
5. Processing of data during recruitment
Where a person applies for a vacant position through the website or submits a CV to the Company, BPM TRADE SRL processes such data solely for the purpose of organising and conducting the recruitment and selection process.
During this process, the Company may process the candidate’s identification and contact details, education, qualifications, professional experience and skills, as well as any other information contained in the documents submitted.
The data is used to assess the application, organise interviews, communicate with candidates and make decisions regarding the filling of vacant positions.
If the candidate is not selected, the data is retained only for the period required to complete the recruitment process or, with the candidate’s explicit consent, for the purpose of identifying future professional opportunities.
6. Disclosure of personal data
BPM TRADE SRL ensures the confidentiality of all personal data and does not sell, make available for use or disclose such data to third parties for commercial purposes.
To the extent necessary for conducting its business, the Company may disclose personal data to:
providers of IT and technical maintenance services;
website hosting and administration service providers;
public authorities and competent institutions, where required by law;
other authorised processors acting on behalf of BPM TRADE SRL under contractual confidentiality and security obligations.
Data is disclosed only to the extent necessary to achieve the lawful purposes of processing or to comply with the Company’s legal obligations.
7. Transfer of personal data
As a general rule, personal data is processed and stored within the territory of the Republic of Moldova.
Where the provision of certain services requires data to be transferred to providers or partners located outside the Republic of Moldova, such transfer is carried out only under the conditions established by applicable legislation and subject to appropriate safeguards protecting the rights and freedoms of data subjects.
BPM TRADE SRL takes all reasonable measures to ensure that any international transfer of data complies with the applicable confidentiality, security and personal data protection requirements.
8. Retention periods for personal data
BPM TRADE SRL retains personal data only for the period necessary to achieve the purposes for which it was collected or for the period required by applicable legislation.
The retention period is determined according to the nature of the data and the applicable legal obligations, as follows:
data submitted through contact forms is retained for the period necessary to review the enquiry and, where necessary, to protect the Company’s rights and legitimate interests;
data used for recruitment purposes is retained for the duration of the selection process and, with the candidate’s explicit consent, may be retained for up to 12 months to contact the candidate regarding other professional opportunities;
technical data and information generated while using the website is retained for the periods specified in the Cookie Policy, taking into account technical requirements and security needs.
Once the applicable retention periods expire, personal data is deleted, anonymised or destroyed in accordance with security requirements, unless its continued retention is required by law.
9. Rights of data subjects
Subject to the conditions established by personal data protection legislation, every data subject has the following rights:
the right to be informed about the processing of their personal data;
the right to access the data being processed;
the right to request the correction of inaccurate data or completion of incomplete data;
the right to request the deletion of data in the cases provided for by law;
the right to request restriction of processing;
the right to object to processing under the conditions established by law;
the right to data portability, where applicable;
the right to withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal;
the right not to be subject to a decision based solely on automated processing, in the cases provided for by law;
the right to lodge a complaint with the competent personal data protection authority;
the right to apply to the competent courts to protect their rights.
The exercise of these rights is free of charge, except in the cases provided for by applicable legislation.
10. Procedure for exercising rights
Data subjects may exercise their rights by submitting a written request to the email address specified in this Policy or by filing an application at the registered office of BPM TRADE SRL.
The Company promptly reviews each request and provides a response within the period established by applicable legislation.
Where there are reasonable doubts concerning the identity of the applicant, BPM TRADE SRL may request additional information necessary to verify their identity, solely for the purpose of protecting personal data against unauthorised disclosure.
11. Personal data security
BPM TRADE SRL applies appropriate technical and organisational measures to ensure the confidentiality, integrity and availability of personal data and to prevent unauthorised access, alteration, disclosure, destruction or accidental or unlawful loss.
Depending on the nature of the activities performed, these measures may include:
controlling access to information systems and databases;
using secure connections and encryption technologies;
performing backups and implementing data recovery mechanisms;
protecting information infrastructure against cyber threats;
monitoring and auditing access to information;
periodically training personnel on personal data protection and confidentiality obligations.
Although BPM TRADE SRL makes all reasonable efforts to protect personal data, no information system or method of transmitting information over the internet can guarantee absolute security.
12. Cookies and similar technologies
The BPM TRADE SRL website uses cookies and similar technologies to ensure the proper operation of the platform, improve the user experience, analyse traffic and optimise the services provided.
Depending on the preferences expressed by the user, the website may use cookies strictly necessary for the platform’s operation, analytical and performance cookies, and other categories of cookies that require the user’s consent under applicable law.
Detailed information about the use and management of cookies is provided in the Cookie Policy published on the website.
13. Protection of minors’ data
The BPM TRADE SRL website and the services provided through it are not intended for minors, and the Company does not knowingly collect their personal data.
If the Company determines that a minor’s personal data has been collected unintentionally and in breach of legal requirements, such data will be deleted without undue delay.
14. Amendments to the Privacy Policy
BPM TRADE SRL reserves the right to amend or update this Privacy Policy whenever necessary to reflect legislative, organisational, technical or operational changes.
The updated version will be published on the website, and the date of the latest update will be indicated at the end of the document. Continued use of the website after changes have been published constitutes confirmation that the user has familiarised themselves with the updated version of the Policy.
15. Contact details
For any questions concerning the processing of personal data or the exercise of rights provided for by applicable legislation, data subjects may contact BPM TRADE SRL using the following details:
BPM TRADE SRL
Address: 78 Uzinelor Street, Chișinău Municipality, Republic of Moldova
Email: info@bpm.md
Telephone: +373 22 480 480
If a person believes that their personal data protection rights have been violated, they are entitled to contact the competent personal data protection authority or the competent courts under the conditions established by law.
Date of last update: 10 July 2026
