Privacy Policy

1. Who is responsible

CVS.md is responsible for the personal data described in this policy when it determines why and how that data is processed.

Privacy contact: cvs.tatiana@gmail.com. Postal address: Bulevardul Grigore Vieru 14, Office 17, Chișinău, Moldova.

2. Data we may collect

Identity and contact data, such as your name, email address, phone number, and preferred contact method.
Rental request details, including dates, number of guests, budget, preferred area, stay purpose, and messages.
Owner and property details, including listing content, address, photos, availability, rental terms, account details, and communications.
Transaction and relationship records, such as requests, approvals, contracts, payments reported to us, support history, and correspondence.
Technical and usage data, such as IP address, browser, device, requested pages, timestamps, security logs, and analytics data when you consent.
Information you choose to provide in documents or messages. Please avoid sending sensitive information unless it is genuinely needed.

3. Why we use data and our legal grounds

Purpose	Typical legal ground
Responding to inquiries, matching requests with listings, and taking steps toward a rental.	Steps requested before a contract and performance of a contract.
Publishing and managing owner listings, accounts, availability, and communications.	Contract or pre-contract steps; legitimate interests in operating the service.
Security, fraud prevention, troubleshooting, and service administration.	Legitimate interests in keeping the service safe and reliable; legal obligations where applicable.
Accounting, records, disputes, and compliance requests.	Legal obligations and legitimate interests in establishing or defending legal claims.
Optional site analytics and performance measurement.	Consent, which may be withdrawn at any time.

4. When data may be shared

With a relevant apartment owner, prospective tenant, or authorised representative when needed to evaluate or complete a rental request.
With hosting, email, analytics, security, technical support, and communications providers acting for us or providing their own service.
With professional advisers, payment or contract participants, where relevant to the requested service.
With courts, regulators, law enforcement, or other authorities when lawfully required or necessary to protect rights and safety.
In connection with a business reorganisation, subject to appropriate confidentiality and legal safeguards.

5. International services and transfers

Some technology and communications providers, including Google, PostHog, email, messaging, or hosting providers, may process data outside Moldova or the country where you live. Where required, we rely on provider safeguards and other lawful transfer mechanisms. Review a third-party service’s policy before choosing to use it.

6. How long we keep data

We keep personal data only as long as reasonably needed for the purpose collected, the rental or owner relationship, security, accounting, legal compliance, dispute handling, and the establishment or defence of claims. Retention varies by record type. When data is no longer needed, we delete, anonymise, or securely isolate it as appropriate.

7. Your privacy rights

Depending on the law that applies and the circumstances, you may have the following rights:

To be informed and to request access to your personal data.
To correct inaccurate or incomplete data.
To request deletion or restriction where legal conditions are met.
To object to processing based on legitimate interests and to withdraw consent at any time.
To receive certain data in a portable format where applicable.
To complain to the National Center for Personal Data Protection of the Republic of Moldova or another competent supervisory authority.

8. Security, children, and external links

We use reasonable organisational and technical measures intended to protect personal data. No internet service can promise absolute security, so please use care when sending information online.

CVS.md is not directed to children. A parent or guardian should contact us if they believe a child has provided personal data without appropriate permission.

Our pages may link to or embed third-party services. Those services are responsible for their own privacy practices.

9. Applicable framework and updates

We handle personal data under applicable Moldovan data protection law, including Law No. 195/2024, and the GDPR where it applies to a particular activity or person.

We may revise this policy as our services or legal duties change. Material changes will be reflected on this page with a new update date.