GDPR & Data Protection

TerraLux SPA (TerraLux Group), operating the ExecutiveMoldova service, is committed to protecting personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable data protection law in the Republic of Moldova. This notice explains your rights and how we uphold them.

1. Data Controller

The data controller responsible for your personal data is TerraLux SPA, part of TerraLux Group, Strada Sfatul Țării 15, Chișinău, Republic of Moldova. You can reach us regarding data protection at terraluxspa@gmail.com.

2. Principles We Follow

We process personal data lawfully, fairly, and transparently. We collect only the data we need, keep it accurate and up to date, retain it no longer than necessary, and protect it with appropriate security measures.

3. Lawful Basis for Processing

We rely on one or more of the following legal bases when processing your data:

• Consent — where you have given clear consent for a specific purpose;
• Contract — where processing is necessary to provide the services you request;
• Legal obligation — where we must process data to comply with the law;
• Legitimate interests — to operate, secure, and improve our services.

4. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right to be informed — about how your data is used;
• Right of access — to obtain a copy of your data;
• Right to rectification — to correct inaccurate data;
• Right to erasure — to request deletion of your data;
• Right to restrict processing — in certain circumstances;
• Right to data portability — to receive your data in a portable format;
• Right to object — to certain types of processing;
• Right to withdraw consent — at any time, without affecting prior processing.

5. How to Exercise Your Rights

To exercise any of these rights, contact us using the details below. We will respond within the timeframe required by law, normally within one month. There is no charge for exercising your rights, unless a request is manifestly unfounded or excessive.

6. International Transfers

Where personal data is transferred to service providers, we take reasonable steps to ensure it is protected by appropriate safeguards consistent with GDPR standards.

7. Data Breaches

In the unlikely event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant authority and, where required, affected individuals without undue delay.

8. Complaints

If you believe your data protection rights have not been respected, you have the right to lodge a complaint with the competent supervisory authority. We would, however, appreciate the opportunity to address your concerns first — please contact us.

9. Contact — Data Protection