Privacy Policy

Last updated: 18 September 2026

This policy explains what personal data we process when you use the moldasig.md website, why we process it, who we pass it to, how long we keep it and what rights you have. It is written under Law of the Republic of Moldova no. 195/2024 on personal data protection, in force from 23 August 2026, which replaces Law of the Republic of Moldova no. 133/2011.

moldasig.md is the official website of an insurer in the Republic of Moldova. To calculate a premium and issue a policy we need data that identifies you directly, including your state identification number (IDNP), and some of it is verified and registered in state information systems. When you file a claim we may also process data concerning your health. This policy describes every such operation explicitly.

Who the operator is

MOLDASIG VIENNA INSURANCE GROUP S.A. (hereinafter the Company or the Operator), fiscal code 1002600053315, licence seria CNPF nr. 000883, with its registered office at Chișinău, str. Albișoara 42, MD-2005, Republic of Moldova, is the personal data operator for this website, for the policies bought through it and for the claim files opened in connection with them.

MOLDASIG VIENNA INSURANCE GROUP S.A., as operator, determines the purposes and the means of processing personal data in the course of its activities.

Where certain operations are carried out on the Company's behalf by service providers, those providers may act as persons empowered by the Operator and will process the data only within the limits set by contract, by the Company's documented instructions and by applicable law.

The data protection officer

For questions about this Policy, about how MOLDASIG VIENNA INSURANCE GROUP S.A. processes personal data, or to exercise the rights provided by law, you may contact the Data Protection Officer (DPO) designated by the Company.

Requests can be sent by e-mail to info@moldasig.md, marked "For the attention of the DPO", or by telephone on 022 889 832.

To exercise your rights or to obtain information about the processing of personal data, you may also contact the Operator through the contact channels on the official website, including the petition form the Operator makes available.

What data we process, for what purpose and on what basis

MOLDASIG VIENNA INSURANCE GROUP S.A. processes personal data in accordance with the principles of lawfulness, fairness and transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality, and with the principle of operator accountability.

Personal data is processed in accordance with applicable law of the Republic of Moldova, including Law no. 195/2024 on personal data protection, Law no. 92/2022 on insurance and reinsurance activity, and other normative acts applicable to the Company's activity.

Calculating the premium and issuing the policy. Depending on the product you choose, we process:

  • identification data, for every product: your name and surname, state identification number (IDNP), date of birth, address, telephone number and e-mail address;
  • for legal entities: the name, fiscal code (IDNO) and registered office, together with the details of the person entering into the contract;
  • for motor insurance: the vehicle registration number, the registration certificate number, the make, model, year of manufacture, category, vehicle identification number and the bonus-malus coefficient resulting from your claims history;
  • for travel health insurance: for each insured person, the name, date of birth, IDNP and passport number, together with the period of travel, the country and territory of destination, the purpose of the trip (tourism, business travel, skiing, manual work or sport) and, where the purpose is sport, the discipline practised;
  • for property insurance: the address and the characteristics of the insured property;
  • contract data: the type of policy, the insurance period, the sum insured, the currency and the calculated premium.

Basis: performance of the insurance contract to which you are a party and, for compulsory motor third party liability insurance and for the Green Card, compliance with a legal obligation we have as a licensed insurer (art. 6 para. (1) letters b) and c) of Law no. 195/2024).

Providing this data is mandatory. It is a contractual requirement and, for compulsory insurance, a legal one. Without it the policy cannot be calculated and cannot be issued.

We say this explicitly because it is a common misunderstanding: the purpose of the trip and the sporting discipline are not data concerning your health. They are risk factors that determine the tariff, in the same way as the age of a vehicle. We do not ask you medical questions and we do not require a health questionnaire in order to issue a policy through this website.

Verification and registration in state information systems. In order to calculate the premium correctly, to verify the data you give us and to register the issued policy, we query and send data to:

  • the information system of the National Bank of Moldova for compulsory motor third party liability insurance. We send it the insured person's data, including the IDNP, and the vehicle data, and receive in return the calculated premium and the claims history that determines the bonus-malus coefficient; after payment we register the issued policy and receive its document;
  • the government interoperability platform MConnect, administered by the E-Governance Agency, through which we verify in the state registers the identity data of the individual, the data of the legal entity and the vehicle registration data, so that we do not ask you for documents the state already holds and so that the policy is issued on correct data.

Basis: compliance with a legal obligation and performance of the contract (art. 6 para. (1) letters b) and c)). These queries do not depend on your consent and cannot be refused, because without them the policy cannot lawfully be issued.

Claims and claim files. When you notify us of an event through the claims form on the website, we process your name, e-mail address, telephone number, the type of insurance, the policy number, the date of the event and the description of the event as you declare it. Later, while the file is being handled, we may receive and process the documents needed to establish and assess the loss.

Please note. The secure channels for sending us your personal data are the form available on the website and the Company's official e-mail address: info@moldasig.md. Sending personal data, including copies of documents containing such data, through other means of communication (for example Viber, WhatsApp and similar) may present risks to the security and confidentiality of personal data, over which the Operator cannot exercise full control.

You can describe the event in free text. If your statements contain information about your state of health, and the documents in the file include medical reports, diagnoses and invoices for medical services, we treat that information as described in the following section.

Basis: performance of the insurance contract (art. 6 para. (1) letter b)).

Payment. The amount, the currency, the payment method, the moment and the result of the transaction. Card payment takes place on the bank's secure pages; we never see and never store your card number, its expiry date or the CVV/CVC code. Basis: performance of the contract and legal accounting and tax obligations (art. 6 para. (1) letters b) and c)).

Unfinished quote requests. If you start a request and do not finish or do not pay for it, we keep the data you entered so that the conversation can be resumed and, if you left a telephone number, an operator may contact you to help you complete it. Basis: our legitimate interest in recovering an interrupted request, and pre-contractual steps taken at your request (art. 6 para. (1) letters b) and f)). You may object at any time by writing to info@moldasig.md.

The user account and personal cabinet, if you choose to create one. Your e-mail address, name, telephone number and policy history, so that you can find, download and renew them. Basis: performance of the contract. Retention: until you ask for the account to be deleted, except for data we are required to keep for policies already issued.

Policy notifications. The order confirmation, the policy in PDF format, payment notifications and, before expiry, a reminder that your policy is about to expire. Basis: performance of the contract. You can turn notifications off for each policy in your personal cabinet or by writing to info@moldasig.md.

Support, contact and complaints. The content of the messages you send us through the forms on the website, by e-mail or by telephone, together with the contact details needed to reply to you. Basis: performance of the contract, and our legitimate interest in answering requests.

Job applications. The data in the CV and in the message you send us through the careers form. Basis: steps taken at your request before entering into an employment contract. Retention: until the recruitment process ends, or longer if you agree to us keeping your application for future positions.

Newsletter subscription, if you have subscribed. Your e-mail address. Basis: your consent. You can unsubscribe at any time. Retention: until you unsubscribe.

Website security and fraud prevention. The IP address, the browser type, the time of access, technical events in the server logs and the result of the anti-robot check shown on forms. Basis: our legitimate interest in keeping the service available and preventing abuse (art. 6 para. (1) letter f)).

Website usage statistics. Pages visited, the source of the visit, the device type, the point at which a calculator is abandoned, and identifiers from cookies. Basis: your consent (art. 6 para. (1) letter a)). Retention: according to the lifetime of each cookie, as set out in the Cookie Policy.

Advertising and campaign measurement. The advertising click identifier, identifiers from cookies and the order value, sent to advertising platforms in order to measure which campaign led to a sale. Basis: your consent. If you refuse the Marketing category these transfers do not take place, neither during the visit nor afterwards. Retention: according to each platform's own policy.

Data concerning your health

Health data is a special category of data within the meaning of art. 9 of Law no. 195/2024. We do not ask you for health data in order to issue a policy through this website. It may become necessary when you claim under a contract. You then give it to us yourself, in the description of the event, and it appears in the documents we receive in order to handle the file, including medical reports, diagnoses and invoices for the services you received.

Basis. For the information you send us through the claims form on the website, the basis is your explicit consent (art. 9 para. (2) letter a)). The form asks for that consent separately, and it can be withdrawn at any time, with effect for the future.

If you refuse. You have the right not to send us health data. However, without the information describing the medical event and without the documents evidencing it, the claim cannot be handled, because we cannot establish whether the event is covered by the policy. You can also send this information through a channel other than the form on the website, if you prefer.

How we treat it. Access to files containing health data is limited to the people handling the file. This data is not used for marketing, is never passed to advertising or analytics platforms in any situation, and is not used to take automated decisions about you.

Other people's data. If you take out a policy for someone else, for example for a family member, you are sending us that person's data. You are obliged to inform them about this policy.

Children

Taking out a policy through this website requires full legal capacity. If the insured person is a minor, the data is provided by a parent or legal representative, who is responsible for its accuracy. We do not knowingly collect children's data for our own purposes. A minor's data may appear as that of an insured person, for example in a travel health policy, in which case it is provided by a parent or legal representative, who is responsible for its accuracy. In the case of legal incapacity or limited legal capacity, consent is given by the legal representative.

Automated decisions

The insurance premium is calculated according to rules and tariffs set by law, by the acts of the supervisory authority and by the insurance conditions, on the basis of the data you provide and, for motor third party liability, the claims history from the National Bank of Moldova's system. The calculation is automatic but applies a predetermined tariff; it does not build a profile of you and does not take solely automated decisions producing legal effects for you within the meaning of art. 22. The issuing of a policy may be refused by the state information system, in which case, once the reason has been communicated, you can ask for a check by an operator.

Who we pass the data to

We pass data on only where it is necessary for the purposes above, to:

  • the National Bank of Moldova, which administers the information system for compulsory motor third party liability insurance, for calculating the premium, checking the claims history and registering the issued policy;
  • the E-Governance Agency, which administers the MConnect interoperability platform, through which the checks in the state identity and vehicle registers are carried out;
  • commercial banks, as card payment processor;
  • the providers who process data on our behalf: website hosting, the traffic delivery and security network, the transactional e-mail delivery service;
  • medical providers and assistance companies abroad, in the case of a claim under a medical policy, strictly to the extent needed to verify cover and pay for the services you received;
  • reinsurers, where the risk is ceded in reinsurance, to the extent needed for assessment and settlement;
  • analytics and advertising platforms, only within the limits of your consent and only for the categories you have accepted. We never pass health data to them;
  • public authorities, where the law requires it, including the financial market supervisory authority and the tax control bodies.

The providers who process data on our behalf do so under a contract imposing confidentiality and security obligations on them, in accordance with art. 28 of Law no. 195/2024. The National Bank of Moldova and the E-Governance Agency process the data in their own right, under their legal powers, not on our behalf. The complete and up to date list of providers can be given to you on request, by writing to info@moldasig.md.

We do not sell your data and we do not make it available to third parties for their own marketing purposes.

Transfers outside the Republic of Moldova

The data needed to issue the policy and to carry out the checks in the state registers is processed in the Republic of Moldova.

In certain situations, personal data may be transferred to or accessed from outside the Republic of Moldova, including in the context of relations with reinsurers, service providers or entities within the Vienna Insurance Group.

Any international transfer of personal data takes place only under the conditions provided by applicable law and with the safeguards needed to protect the rights and freedoms of data subjects.

For the Green Card, the data of the issued policy becomes accessible to the national bureaux of insurers and to insurers in the member states of the Green Card system, to the extent needed to verify that the policy is valid and to settle any claim arising abroad. That is precisely the purpose for which you take out the policy.

For travel health insurance, in the case of an event abroad, the necessary data may be passed to the assistance company and to the medical provider in that country, so that the services can be given to you and paid for. The transfer takes place under art. 9 para. (2) letter f) and is strictly limited to what is necessary for that case.

How long we keep the data

MOLDASIG VIENNA INSURANCE GROUP S.A. keeps personal data for as long as is necessary to achieve the purposes for which it was collected and to comply with legal obligations.

The specific retention period may vary depending on:

  • the category of data;
  • the type of contract or insurance product;
  • the duration of the contractual relationship;
  • the existence and duration of a claim file;
  • the legal archiving and record keeping periods;
  • the limitation periods;
  • the need to prevent fraud;
  • the existence of litigation, investigations or inspections;
  • the need to exercise or defend the Company's rights.

Once the applicable period expires, the data will be deleted, destroyed or anonymised in accordance with internal procedures and legal requirements.

Cookies

The website uses strictly necessary cookies without asking for your consent, and statistics and marketing cookies only with your consent, given through the banner shown on your first visit. The complete list, the purposes and the lifetimes are in the Cookie Policy. Your choice can be changed at any time from the Cookie settings link in the page footer.

Simply continuing to browse does not constitute consent. Consent is given by an unambiguous action, through the buttons in the banner.

Your rights

In relation to your data you have the following rights:

  • the right of access: to find out whether we process data about you and to receive a copy of it;
  • the right to rectification: to correct inaccurate or incomplete data;
  • the right to erasure: to ask for data to be deleted where there is no longer a basis for keeping it;
  • the right to restriction of processing in the situations provided by law;
  • the right to object to processing based on our legitimate interest, and, at any time and unconditionally, to processing for direct marketing;
  • the right to portability: to receive the data you provided in a structured, commonly used and machine readable format;
  • the right to withdraw your consent at any time, as easily as you gave it, including the explicit consent for health data, without affecting the lawfulness of processing carried out before the withdrawal.

These rights have one limit we prefer to state plainly: the data of a policy already issued and of a claim file already handled cannot be deleted on simple request, because keeping it is required of us by law and is necessary for establishing, exercising or defending a right in court, including yours. Deleting your user account does not delete the policies issued.

To exercise any of these rights, write to us at info@moldasig.md. We reply within one month of receiving the request at the latest. If the request is complex the deadline may be extended, in which case we tell you within the first month about the extension and its reasons.

If you consider that your rights have been infringed, you may contact the National Centre for Personal Data Protection, str. Serghei Lazo 48, MD-2004, Chișinău, telephone (022) 820 801, e-mail centru@datepersonale.md, or the courts.

Data security

We apply appropriate technical and organisational measures to protect personal data against:

  • unauthorised access;
  • unauthorised disclosure;
  • unauthorised alteration;
  • accidental loss or destruction;
  • improper use;
  • other forms of unlawful processing.

We use encrypted connections, role based access control, logging of administrative operations, backups and regular updates of software components. Files containing health data are accessible only to the staff handling them. Employees with access to personal data are trained and bound by confidentiality. No system can be guaranteed absolutely, but we treat your data with the same care with which we treat our own records.

If a security incident occurs that may expose you to a high risk, we inform you without undue delay and notify the authority, in accordance with art. 33 and 34 of Law no. 195/2024.

Changes

We may update this policy when our services or legal requirements change. The date of the last update is shown at the top of the page. If a change affects you significantly we will announce it on the website and, where appropriate, by e-mail. If the purposes for which we use cookies change, we will ask for your consent again.