Privacy Policy

Last updated: 23 August 2026

This policy explains what personal data we process when you use moldasig.md, why we process it, who we pass it to, how long we keep it and what rights you have. It is written under Law no. 195/2024 on the protection of personal data, in force from 23 August 2026, which replaces Law no. 133/2011.

moldasig.md is an insurer's own website. To calculate a premium and issue a policy we need data that identifies you directly, including your state identification number (IDNP), and some of it is checked against and recorded in state information systems. When you make a claim we may also process data about your health. This policy describes each of those operations explicitly.

Who the operator is

MOLDASIG S.A., tax code 1002600053315, licence seria CNPF nr. 000883, with its registered office at Chișinău, str. Albișoara 42, MD-2005, Republic of Moldova, is the personal data operator for this website, for the policies taken out through it, and for the claim files opened in connection with them.

MOLDASIG S.A. is entered in the register of personal data operators under numbers 0000131-001, 0000131-002, 0000131-003, 0000131-004 and 0000131-005.

For any question about your data, including to exercise the rights described below, write to us at info@moldasig.md or call +373 22 889 889.

The data protection officer designated by MOLDASIG S.A. is Ms Vera Oboroceanu, who can be contacted at info@moldasig.md or at the registered office address given above.

What we process, for what purpose, and on what basis

Calculating the premium and issuing the policy. Depending on the product you choose, we process:

identification data, for every product: your name, state identification number (IDNP), date of birth, address, phone number and email address;
for legal entities: the name, tax code (IDNO) and registered office, together with the details of the person entering into the contract;
for compulsory motor liability insurance (RCA), the Green Card and CASCO: the vehicle registration number, registration certificate number, make, model, year of manufacture, category, vehicle identification number, and the bonus-malus coefficient derived from your claims history;
for medical travel insurance: for each insured person, the name, date of birth, IDNP and passport number, together with the travel dates, the destination country and territory, the purpose of travel (tourism, business, skiing, physical work or sport) and, where the purpose is sport, the discipline practised;
for property insurance: the address and characteristics of the insured property;
contract data: the policy type, the period of cover, the sum insured, the currency and the calculated premium.

Basis: performance of the insurance contract to which you are a party, and, for compulsory motor liability insurance and the Green Card, compliance with a legal obligation that falls on us as a licensed insurer (art. 6(1)(b) and (c) of Law no. 195/2024).

Providing this data is mandatory. It is a contractual requirement and, for compulsory insurance, a legal one. Without it the policy cannot be calculated and cannot be issued.

We say this because it is a common misunderstanding: the purpose of travel and the sporting discipline are not data about your health. They are risk factors that determine the tariff, in the same way the age of a vehicle is. We do not ask you medical questions and we do not require a health questionnaire in order to take out a policy through this site.

Retention: PROPOSED, for MOLDASIG to confirm: 5 years from the end of the insurance contract. This covers the general three-year limitation period for claims under an insurance contract, plus margin for an event occurring at the end of the cover, and lines up with the accounting period.

Checks against and recording in state information systems. To calculate the premium correctly, to verify the data you give us and to register the policy issued, we query and send data to:

the information system of the National Bank of Moldova for compulsory motor liability insurance. We send it the insured person's data, including the IDNP, and the vehicle's data; in return we receive the calculated premium and the claims history that determines the bonus-malus coefficient, and after payment we register the issued policy and receive its document;
the government interoperability platform MConnect, run by the e-Governance Agency, through which we check identity data for individuals, company data and vehicle registration data against the state registers, so that we do not ask you for documents the state already holds and so that the policy is issued on correct data.

Basis: compliance with a legal obligation and performance of the contract (art. 6(1)(b) and (c)). These queries do not depend on your consent and cannot be refused separately, because without them the policy cannot lawfully be issued.

Claims and claim files. When you notify us of an event through the claims form on the site, we process your name, email address, phone number, the type of insurance, the policy number, the date of the event and your own description of what happened. Later, while handling the file, we may receive and process the documents needed to establish and quantify the loss.

That description is a free-text field. If your policy is a medical one, what you write there will naturally contain information about your state of health, and the file's documents may include medical reports, diagnoses and invoices for medical services. How we treat that information is set out in the next section.

Basis: performance of the insurance contract and the establishment, exercise or defence of legal claims (art. 6(1)(b) and (f)). Retention: PROPOSED, for MOLDASIG to confirm: 3 years from the closure of the claim file, or until a dispute is finally resolved if that takes longer. Deliberately shorter than the policy retention, because this is a special category of data, and PROPOSED, for MOLDASIG to confirm: 2 years from the case being closed for correspondence that contains no health data.

Payment. The amount, currency, payment method, timing and result of the transaction. Card payment takes place on the bank's secure pages; we never see and never store your card number, its expiry date or the CVV/CVC code. Basis: performance of the contract and legal accounting and tax obligations (art. 6(1)(b) and (c)). Retention: the period accounting and tax law requires, generally 5 years.

Unfinished quote requests. If you start a request and do not finish or pay for it, we keep what you entered so the conversation can be resumed, and if you left a phone number an operator may contact you to help you complete it. Basis: our legitimate interest in recovering an interrupted request, and pre-contractual steps taken at your request (art. 6(1)(b) and (f)). You can object at any time by writing to info@moldasig.md. Retention: PROPOSED, for MOLDASIG to confirm: 12 months from your last interaction, for quote requests that were never paid.

Your account and personal cabinet, if you choose to create one. Your email address, name, phone number and policy history, so you can find, download and renew them. Basis: performance of the contract. Retention: until you ask for the account to be deleted, except for data we are required to keep for policies already issued.

Policy communications. Order confirmation, the policy as a PDF, payment notifications and, before expiry, a reminder that your policy is about to lapse. Basis: performance of the contract, and our legitimate interest in warning you that you are about to be left without cover, which for compulsory insurance is also directly in your interest (art. 6(1)(b) and (f)). You can turn reminders off per policy in your personal cabinet or by writing to info@moldasig.md.

Support, enquiries and complaints. The content of the messages you send us through the forms on the site, by email or by phone, together with the contact details needed to reply. Basis: performance of the contract, and our legitimate interest in answering enquiries. Retention: PROPOSED, for MOLDASIG to confirm: 2 years from the case being closed.

Job applications. The data in the CV and message you send through the careers form. Basis: steps taken at your request before entering into an employment contract. Retention: until the recruitment process ends, or longer if you agree to us keeping your application for future openings.

Newsletter subscription, if you subscribed. Your email address. Basis: your consent. You can unsubscribe at any time. Retention: until you unsubscribe.

Site security and fraud prevention. IP address, browser type, time of access, technical events in the server logs and the result of the anti-bot check shown on forms. Basis: our legitimate interest in keeping the service available and preventing abuse (art. 6(1)(f)). Retention: PROPOSED, for MOLDASIG to confirm: no more than 12 months.

Site usage statistics. Pages visited, the source of the visit, device type, the point at which a calculator is abandoned, and identifiers from cookies. Basis: your consent (art. 6(1)(a)). Retention: as long as each cookie lasts, as set out in the Cookie Policy.

Advertising and campaign measurement. The ad click identifier, identifiers from cookies and the order value, sent to advertising platforms to measure which campaign led to a sale. Basis: your consent. If you refuse the Marketing category these transmissions do not happen, neither at the time of your visit nor afterwards. Retention: according to each platform's own policy.

Data about your health

Health data is a special category of data within the meaning of art. 9 of Law no. 195/2024. Processing it is prohibited in principle and becomes lawful only in the situations that article lists exhaustively. The ordinary bases in art. 6 are not enough, and we treat it accordingly.

When it arises. We do not ask you for health data in order to issue a policy through this site. It arises at a single point in our relationship: when you claim under a medical policy. At that point you give it to us yourself, in your description of the event, and it appears in the documents we receive to handle the file, including medical reports, diagnoses and invoices for the services you received.

On what basis. For the information you send us through the claims form on the site, the basis is your explicit consent (art. 9(2)(a)). The form asks for that agreement separately, and it can be withdrawn at any time with effect for the future. For handling the file itself, assessing the loss, paying the indemnity and defending a dispute, the basis is the establishment, exercise or defence of legal claims (art. 9(2)(f)).

If you refuse. You have the right not to give us health data. The consequence is direct, and we tell you before rather than after: without the information describing the medical event and the documents that evidence it, the claim cannot be handled, because we cannot establish whether the event is covered by the policy. You may send that information through a channel other than the form on this site if you prefer.

How we treat it. Access to files containing health data is limited, by role, to the people handling the file. This data is not used for marketing, is never passed to advertising or analytics platforms under any circumstances, and is not used to make automated decisions about you. We keep it for PROPOSED, for MOLDASIG to confirm: 3 years from the closure of the claim file, or until a dispute is finally resolved if that takes longer. Deliberately shorter than the policy retention, because this is a special category of data, which is less than we keep policy data, precisely because it is a special category.

Other people's data. If you take out a medical policy for someone else, for example a family member, you are giving us that person's data. You must inform them of this policy. If the insured person is a minor, the data is provided by a parent or legal representative, who is responsible for its accuracy.

Automated decisions

The premium is calculated according to rules and tariffs set by law, by the supervisory authority's acts and by the insurance conditions, on the basis of the data you provide and, for RCA, the claims history in the National Bank of Moldova's system. The calculation is automatic, but it applies a pre-set tariff; it does not build a profile of you and does not make decisions based solely on automated processing that produce legal effects concerning you within the meaning of art. 22. The state information system may refuse to register a policy, in which case the reason is communicated to you and you may ask for it to be checked by an operator.

Who we pass data to

We pass data on only where it is necessary for the purposes above, to:

the National Bank of Moldova, which runs the information system for compulsory motor liability insurance, for premium calculation, claims-history checks and registration of the issued policy;
the e-Governance Agency, which runs the MConnect interoperability platform, through which the checks against the state identity and vehicle registers are made;
BC "MOLDOVA-AGROINDBANK" S.A. (maib), as card payment processor;
the suppliers who process data on our behalf: site hosting, the traffic delivery and security network, and the transactional email delivery service;
medical providers and assistance companies abroad, in the case of a claim under a medical policy, to the extent strictly necessary to verify cover and pay for the services you received;
reinsurers, where the risk is ceded in reinsurance, to the extent necessary for assessment and settlement;
analytics and advertising platforms, only within the limits of your consent and only for the categories you accepted. Health data is never passed to them;
public authorities, where the law obliges us, including the financial market supervisory authority and the tax authorities.

Suppliers who process data on our behalf do so under a contract imposing confidentiality and security obligations on them, in accordance with art. 28 of Law no. 195/2024. The National Bank of Moldova and the e-Governance Agency process the data in their own right, under their statutory powers, not on our behalf. The full, current list of suppliers can be provided on request by writing to info@moldasig.md.

We do not sell your data and we do not make it available to third parties for their own marketing purposes.

Transfers outside the Republic of Moldova

The data needed to issue the policy and to run the state register checks is processed in the Republic of Moldova.

Some of our technical suppliers, in particular the analytics, advertising and email delivery platforms, process data on servers located in the European Union and the United States of America. Those transfers are made on the basis of standard contractual clauses and the guarantees the suppliers give in their terms, in accordance with the international transfers chapter of Law no. 195/2024. Transfers relating to analytics and advertising happen only if you gave consent for that category.

For the Green Card, the data of the issued policy becomes accessible to the national insurers' bureaux and to insurers in the member states of the Green Card system, to the extent necessary to verify that the policy is valid and to settle a claim arising abroad. That is the very purpose for which the policy is taken out.

For medical travel insurance, if an event occurs abroad, the necessary data may be sent to the assistance company and the medical provider in that country, so that the services can be given to you and paid for. The transfer is made under art. 9(2)(f) and is strictly limited to what that case requires.

Cookies

The site uses strictly necessary cookies without asking you, and statistics and marketing cookies only with your consent, given through the banner shown on your first visit. The full list, the purposes and the durations are in the Cookie Policy. Your choice can be changed at any time from the Cookie settings link in the page footer.

Simply continuing to browse is not consent. Consent is given by an unambiguous action, through the banner's buttons.

Your rights

In relation to your data you have the following rights:

the right of access: to find out whether we process data about you and to receive a copy of it;
the right to rectification: to correct inaccurate or incomplete data;
the right to erasure: to ask for data to be deleted where there is no longer a basis for keeping it;
the right to restriction of processing in the situations the law provides for;
the right to object to processing based on our legitimate interest, and, at any time and unconditionally, to processing for direct marketing;
the right to portability: to receive the data you provided in a structured, commonly used, machine-readable format;
the right to withdraw your consent at any time, as easily as you gave it, including the explicit consent for health data, without affecting the lawfulness of processing carried out before withdrawal.

These rights have a limit we would rather state plainly: the data of a policy already issued and of a claim file already handled cannot be deleted on request alone, because keeping it is required of us by law and is necessary for the establishment, exercise or defence of legal claims, including yours. Deleting your user account does not delete the policies issued.

To exercise any of these rights, write to info@moldasig.md. We reply within one month of receiving the request. If the request is complex the deadline may be extended, and in that case we tell you within the first month about the extension and the reasons for it.

If you consider your rights have been infringed, you may apply to the National Centre for Personal Data Protection, str. Serghei Lazo 48, MD-2004, Chișinău, telephone (022) 820 801, email centru@datepersonale.md, or to the courts.

Data security

We use encrypted connections, role-based access control, logging of administrative operations, backups and regular updates of software components. Files containing health data are accessible only to the staff handling them. Employees with access to personal data are trained and bound to confidentiality. No system can be guaranteed absolutely, but we treat your data with the same care we treat our own records.

If a security incident occurs that may expose you to a high risk, we inform you without undue delay and notify the authority, in accordance with art. 33 and 34 of Law no. 195/2024.

Children

Taking out a policy through this site assumes full legal capacity. We do not knowingly collect children's data for our own purposes. A minor's data may appear as an insured person, for example on a medical travel policy, in which case it is provided by a parent or legal representative, who is responsible for its accuracy. Where a person lacks legal capacity or has limited capacity, consent is given by their legal representative.

Changes

We may update this policy when our services or the legal requirements change. The date of the last update is shown at the top of the page. If a change affects you significantly we will say so on the site and, where appropriate, by email. If the purposes for which we use cookies change, we will ask for your consent again.