Privacy policy
This policy explains what personal data Vatra Town Hall processes through this website, for what purpose, on what legal basis, how long it is kept and what rights you have.
1. Data controller
The controller is Vatra Town Hall, 5 Ștefan Vodă St., MD-2055, Vatra, Chișinău municipality, Republic of Moldova.
- E-mail: primaria.vatra@gmail.com
- Telephone: 022-61-59-51
- Opening hours: Monday–Friday, 08:00–17:00 (break 12:00–13:00)
The person responsible for personal data protection is appointed by order of the mayor. Their contact details are published in the “Town hall staff” section and updated whenever the appointment changes.
2. What data we collect and why
The website can be used without providing personal data. Data is collected only when you fill in a form or write to us.
| Situation | Data collected | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Reporting a problem in town | name, e-mail, phone (optional), the report itself | examining and resolving the report | art. 6(1)(e) GDPR — exercise of official authority; Administrative Code no. 116/2018 | 3 years after the case is closed |
| Petition | surname, first name, postal address, e-mail, phone, the petition text | registration and examination within statutory deadlines | Administrative Code no. 116/2018, art. 9 and 74 | per the records schedule, at least 5 years |
| Request for public information | name, preferred means of reply, contact details | providing the requested information | Law no. 148/2023 on access to information of public interest | 3 years |
| Booking an audience | name, phone, e-mail, reason for the request | organising the audience | art. 6(1)(e) GDPR | 1 year |
| Newsletter subscription | e-mail address, selected topics | sending the notifications you asked for | art. 6(1)(a) GDPR — consent | until you unsubscribe |
| Visiting the website | IP address, browser type, pages visited (in server logs) | security and availability of the service | art. 6(1)(f) GDPR — legitimate interest | 30 days |
We do not ask for and do not wish to receive sensitive data through the forms: health, political or religious beliefs, trade union membership, sexual life, criminal record. Please do not include such details in your messages.
3. Who has access to the data
Access is limited to town hall staff who need it to handle your request. Data may be disclosed to:
- public authorities, where the law so requires;
- the hosting provider acting as a processor, under a contract containing confidentiality clauses;
- Cloudflare, Inc. (USA), the content delivery and attack (DDoS) protection provider acting as a processor: all requests to the website, including your IP address and data submitted through forms, pass through its infrastructure, under the Cloudflare Data Processing Addendum;
- courts and criminal investigation bodies, upon a lawful request.
Data is never sold, shared for commercial purposes or used for advertising.
4. Transfers outside the Republic of Moldova
The website’s server is located in the Republic of Moldova. To protect against cyber attacks and deliver pages quickly, requests to the website pass through the global network of Cloudflare, Inc., which may involve transferring your IP address and request data outside the Republic of Moldova, including to the USA. Such transfers rely on the standard contractual clauses included in the Cloudflare Data Processing Addendum, and the connection is encrypted end to end.
If an external service (map, embedded video) involves a transfer, it is triggered only after your explicit consent — see the cookie policy.
5. Your rights
Under Law no. 133/2011, Law no. 195/2024 and Regulation (EU) 2016/679 you have the right:
- of access — to learn whether we process your data and to receive a copy;
- to rectification of inaccurate data;
- to erasure, in the cases provided by law;
- to restriction of processing;
- to data portability, for data provided on the basis of consent;
- to object to processing based on legitimate interest;
- to withdraw consent at any time, without affecting the lawfulness of prior processing;
- not to be subject to automated decision-making — we apply neither such decisions nor profiling.
6. How to exercise your rights
Send a request to primaria.vatra@gmail.com or to 5 Ștefan Vodă St., MD-2055, Vatra, Chișinău municipality, Republic of Moldova. We reply within 30 calendar days; for complex requests the deadline may be extended by 15 days, and you will be informed.
If you believe your rights have been infringed, you may lodge a complaint with the National Centre for Personal Data Protection (48 Serghei Lazo St., MD-2004, Chișinău, centru@datepersonale.md, +373 22 820 801) or bring the matter before a court.
7. Data security
We apply technical and organisational measures: HTTPS transport, role-based access, access logging, backups, and protection of forms against automated submissions. Security incidents posing a risk to individuals’ rights are notified to the supervisory authority within 72 hours.
8. Changes
This policy may be updated. The current version is always published on this page together with the date of the last change.