Privacy policy

1. Data controller

• "NICOREANU SELFIEPARTY" S.R.L., IDNO 1021600038184, MD-6813, s. Costești, r-nul Ialoveni, Republica Moldova.
• For any question about your data: +373 79 803 183.

2. What data we collect

• From the booking request: first name, last name, phone, email, date of birth, your message, the car, the period, pick-up and return locations, chosen extras.
• After your booking is confirmed or at pick-up: the details and photos of your ID card or passport and driving licence (including personal ID number, licence number and date, address), needed for the contract. You can send the photos from the booking page, or we take them at pick-up.
• During the rental: contract and payment details, and any damage or fines.
• During the rental: the car's position, speed and mileage, recorded by the GPS device fitted in every car.
• When you contact us: conversations by phone, WhatsApp, Telegram or email.
• Technical data: IP address and browser information, logged automatically by the hosting servers for security.

3. Why we process them and on what legal basis

• To answer your request and to conclude and perform the rental contract (performance of a contract or steps taken at your request before concluding it).
• To check your age and right to drive and to identify the driver in case of fines or accidents (legal obligation and legitimate interest).
• For GPS tracking of the car: protection against theft, checking the speed, mileage and territory limits set in the contract, and evidence in case of accidents, fines or disputes (performance of the contract and legitimate interest). GPS data relate to the car; we link them to you only for the period of your rental.
• For accounting and tax records (legal obligation).
• For website security, fraud prevention and the defence of our rights in a dispute (legitimate interest).
• We do not send you commercial communications without your prior consent and we do not take automated decisions that affect you.

4. Mandatory data

Your name, phone and date of birth are needed to process the request, and your ID and driving licence are needed to sign the contract. Without them we cannot rent you the car. Email and message are optional.

5. Who we share data with

• Providers hosting our website, database and documents (cloud services), only as needed for their operation and under contract.
• The GPS tracking service provider (X-GPS), which stores the cars' location data, under contract.
• Insurers, in case of damage or accidents.
• Public authorities (police, State Tax Service, courts), only when required by law.
• Messaging platforms (WhatsApp, Telegram), if you choose to write to us there.
• We do not sell or rent your data.

6. Transfers outside the Republic of Moldova

Some cloud providers process data on servers in the European Union or the United States. These transfers take place only with the safeguards provided by Law no. 195/2024, such as standard contractual clauses.

7. How long we keep data

• Requests that do not become rentals: for as long as we need them to reply to you and for a possible later booking. We review them periodically and delete those no longer needed; if you ask, we delete them straight away.
• Customer and rental data: for the duration of our relationship and then as long as accounting and tax law requires.
• Copies of documents: until the rental ends and any fines, damage or disputes are settled, then deleted.
• GPS data from the rental period: until the rental ends and any fines, damage or disputes are settled.
• Technical security data: a few months at most.

8. Your rights

• the right to be informed and to access your data;
• the right to rectify inaccurate data;
• the right to erasure (“right to be forgotten”), as provided by law;
• the right to restrict processing;
• the right to data portability;
• the right to object, including to direct marketing, at any time;
• the right not to be subject to a decision based solely on automated processing;
• the right to withdraw consent at any time, as easily as it was given, without affecting earlier processing;
• the right to refuse the collection of data not needed for the contract.

You exercise your rights by writing to the contact details above. We reply free of charge within one month (extendable by two months in complex cases, in which case we tell you). If you believe your rights have been breached, you can lodge a complaint with the National Center for Personal Data Protection (datepersonale.md) or go to court.

9. Cookies and tracking

The public website does not use analytics, advertising or marketing tracking cookies.

The Google map in the Contact section loads only if you accept “External content” in the cookie banner or tap the map; from then on Google may set its own cookies under its policy. Your choice is stored in your browser and you can change it at any time from the “Cookie settings” link in the footer. The admin panel uses only a strictly necessary cookie for staff login.

10. Data security

The website works only over an encrypted connection (HTTPS). Document copies are kept in private storage, reachable only through temporary links, and access to data is limited to authorised staff with an account and password. In the event of a data breach, we notify the authority within 72 hours and inform you if there is a high risk to you.

11. Minors

Our services are for people aged 21 or over. We do not knowingly collect data about minors.

12. Changes

We may update this policy; the version in force is the one published on this page. Last updated: 20 Oct 2026.