Everything for hunting and tourism
+373 (22) 22-55-75
+373 (22)22-55-75

Privacy Policy

Last updated: 25.10.2026

This Privacy and Personal Data Protection Policy is drafted in accordance with Law No. 195/2024 on Personal Data Protection of the Republic of Moldova (which transposes Regulation (EU) 2016/679 — GDPR into national law) and Law No. 284/2004 on Information Society Services.

1. Data Controller

The controller of personal data processed through the cartus.md website is:

  • Company Name: Joint-Stock Company "Cartuș" (S.A. „Cartuș”)
  • IDNO (Registration Number): 1002600041066 (registered with the State Registration Chamber of the Ministry of Justice of the Republic of Moldova on 14.12.1998)
  • Registered Office: 1 Mitropolit Gurie Grosu St., Chișinău, MD-2028, Republic of Moldova
  • Phone: +373 (22) 22-55-75
  • E-mail: info@cartus.md

2. Categories of Personal Data Collected and Purpose of Processing

The cartus.md website adheres to the data minimization principle (Article 5 of Law No. 195/2024) and collects only strictly necessary information:

  • Contact Form Data ("Write to us!" on the Contacts page): Full name, email address or phone number, and the content of your message. These details are provided voluntarily based on your explicit consent (Article 6(1)(a) of Law No. 195/2024) solely for the purpose of responding to your inquiries addressed to S.A. „Cartuș” branches. Form submissions are not stored in a public website database; they are sent directly to the official email address of the selected branch (info@cartus.md or balti@cartus.md).
  • Technical Data and Cookies: This website uses strictly necessary technical cookies (session cookie and XSRF-TOKEN for CSRF protection), as well as local storage to remember your cookie notice acknowledgment. On the Contacts page, an interactive map is loaded to display branch locations.

3. Data Retention and Third-Party Disclosure

S.A. „Cartuș” does not sell, rent, or transfer your personal data to third parties for marketing or commercial purposes. Emails received via the contact form are retained only for the period necessary to resolve your inquiry or as required by applicable Moldovan correspondence archiving regulations.

4. Security Measures (Article 32 of Law No. 195/2024)

Appropriate technical and organizational security measures are implemented to protect your data against unauthorized access, alteration, or destruction, including CSRF token verification, strict input validation, request rate limiting, HTTP security headers, and HttpOnly / SameSite session cookie protections.

5. Your Rights as a Data Subject (Articles 15–22 of Law No. 195/2024)

Under the personal data protection legislation of the Republic of Moldova, you have the following rights:

  • Right of access to your personal data;
  • Right to rectification of inaccurate or incomplete data;
  • Right to erasure ("right to be forgotten");
  • Right to restriction of processing and right to object;
  • Right to withdraw consent at any time by contacting info@cartus.md;
  • Right to lodge a complaint with the national supervisory authority of the Republic of Moldova: National Center for Personal Data Protection (CNPDCP) — 48 Serghei Lazo St., Chișinău, MD-2004, website: www.datepersonale.md.