PRIVACY AND SECURITY POLICY
1. General information
1.1. This Privacy and Security Policy explains how „CHEF MANAGEMENT TAXI” S.R.L. collects, uses, stores, transmits and protects the personal data of the Users of the Chef Taxi Platform.
1.2. The Platform is operated by Societatea cu Răspundere Limitată „CHEF MANAGEMENT TAXI”, abbreviated name „CHEF MANAGEMENT TAXI” S.R.L., IDNO 1026023044198, registered office: str. Grădina Botanică, nr. 14/4, MD-2032, mun. Chișinău, Republica Moldova.
1.3. Website: https://cheftaxi.md/. Support e-mail and contact for data protection matters: Support@cheftaxi.md. Support phone: 078800822. Support hours: Monday–Friday, 09:00–18:00.
1.4. Within the meaning of the applicable legislation of the Republic of Moldova on the protection of personal data — Law No. 133/2011 on the protection of personal data and Law No. 195/2024, art. 90 para. (3) — the Company acts as a data controller for the data processed in connection with the use of the Platform.
2. What data we may process
2.1. For the creation and administration of the account, we may process: first name, last name, phone number, e-mail address, authentication data and other data provided by the User in the application.
2.2. For transport orders, we may process: the pick-up location, the destination, the route, the order time, the order status, the order history, the fare, the payment method, data regarding the person who carries out the order and other information necessary for carrying out the order.
2.3. For delivery services, we may process data of the Sender and the Recipient, including first name, last name, phone number, pick-up address, delivery address, a general description of the Parcel, the delivery status, delivery confirmation and other data necessary for carrying out the order.
2.4. For the use of the Platform, we may process technical data, such as the IP address, the device type, the operating system, technical identifiers, the application version, the date and time of access, technical errors and other data necessary for the functioning and security of the Platform.
2.5. For payment processing, we may process data regarding the transaction, such as the amount, the currency, the date and time of payment, the payment method, the payment status, the order number and other data transmitted by the acquiring bank or the payment processor.
2.6. The Company does not store the full bank card number, the CVV/CVC code or other full card data. This data is processed through the secure infrastructure of the bank and/or the payment processor.
2.7. For support, complaints and communications, we may process the first name, last name, phone number, e-mail address, the content of the request, information about the order, correspondence and other data necessary for resolving the request.
3. Geolocation
3.1. The Platform may use geolocation data for displaying the location, placing orders, determining the pick-up address, transmitting the order to available persons, calculating the route and providing the available services.
3.2. The User may manage geolocation permissions through the device settings. Limiting access to geolocation may affect the functionality of the Platform.
4. Purposes of processing
4.1. The data is processed for the creation and administration of the account, the placement and execution of orders, the display of fares, communication between the User and the persons who carry out the orders, payment processing, the issuance of the electronic receipt, customer support, fraud prevention, the security of the Platform, the resolution of complaints and the fulfilment of legal obligations.
4.2. The data may also be processed for the improvement of the Platform, the analysis of the functioning of the services, error diagnosis, the development of functionalities and the protection of the rights and legitimate interests of the Company, the Users and the partners.
4.3. Commercial communications, promotions or direct marketing may be transmitted only under the conditions of the law and, where necessary, on the basis of the User's consent.
5. Grounds for processing
5.1. The processing of data may be carried out for the performance of the contract or of pre-contractual measures, when the data is necessary for the use of the Platform and the provision of the requested services.
5.2. The processing may be carried out for the fulfilment of the Company's legal obligations, including tax, accounting, payment, reporting obligations or for responding to requests from the competent authorities.
5.3. The processing may be carried out on the basis of the Company's legitimate interest, including for security, fraud prevention, the protection of rights, the resolution of disputes, the improvement of services and the administration of the Platform.
5.4. In cases where the law requires the User's consent, the processing is carried out on the basis of consent, which may be withdrawn under the conditions of the law.
6. To whom we may transmit the data
6.1. The data may be transmitted to the persons who carry out the orders, including Drivers, Couriers, Carriers or Transport Partners, to the extent necessary for carrying out the order.
6.2. The data may be transmitted to the acquiring bank, the payment processor, payment systems and other participants involved in the processing of the payment, refunds or payment disputes.
6.3. The data may be transmitted to technical providers that help with the functioning of the Platform, such as providers of server infrastructure, communication services, notifications, e-mail, SMS, maps, geolocation, customer support, technical analysis and security.
6.4. The data may be transmitted to public authorities, courts, control bodies or other persons, if such transmission is required by law or is necessary for the protection of the rights and legitimate interests of the Company.
7. Data regarding payments and the electronic receipt
7.1. For all orders, regardless of the payment method, including cash payment, the Company makes available to the User an electronic receipt and/or an electronic confirmation, in accordance with the applicable legislation of the Republic of Moldova and the applicable rules.
7.2. The electronic receipt is transmitted to the e-mail address indicated by the User and/or through other means available on the Platform, if these are activated.
7.3. Data regarding payments and electronic receipts may be retained for the period necessary for the fulfilment of legal, tax, accounting, payment, audit, complaint-resolution obligations and for the defence of the rights of the Company.
8. Data security
8.1. The Company applies reasonable technical and organizational measures for the protection of personal data against unauthorized access, loss, alteration, disclosure or unauthorized destruction.
8.2. The measures may include access control, the use of secure connections, the limitation of access to data, the logging of technical operations, fraud prevention measures and cooperation with technical providers that apply adequate security measures.
8.3. Although the Company makes reasonable efforts to protect the data, no method of electronic transmission or storage can be guaranteed to be completely secure.
9. Retention period
9.1. Account data is retained for the duration of the existence of the User's account and thereafter, if retention is necessary for legal obligations, the resolution of complaints, fraud prevention or the defence of the rights of the Company.
9.2. Data regarding orders, payments, electronic receipts and transactions is retained for the period necessary in accordance with the applicable legislation, tax, accounting, payment rules and the requirements for the resolution of complaints or disputes.
9.3. Support and complaint data is retained for the period necessary for the resolution of the request and thereafter, if necessary for the defence of the rights or legitimate interests of the Company.
9.4. Data processed on the basis of consent is retained until the withdrawal of consent or until the purpose of the processing ceases, except in cases where the law permits or requires subsequent retention.
10. Rights of the User
10.1. Under the conditions of the applicable legislation, the User may have the right of access to data, rectification, erasure, restriction of processing, objection, withdrawal of consent and the right to lodge a complaint with the competent authority.
10.2. To exercise these rights, the User may contact the Company at Support@cheftaxi.md. The Company may request additional information for the identification of the User and the prevention of unauthorized access to data.
11. Account deletion
11.1. The User may request the deletion of the account through the functionality available in the application, if it is activated, or by contacting support at Support@cheftaxi.md.
11.2. After a request for the deletion of the account, certain data may be retained if retention is necessary for the fulfilment of legal, tax, accounting, payment obligations, for fraud prevention, the resolution of disputes or the defence of the rights of the Company.
12. Cookies and similar technologies
12.1. The website and the Platform may use cookies, technical identifiers or similar technologies for the functioning of the website, security, the saving of preferences, technical analysis and the improvement of the services.
12.2. The User may manage cookies through the settings of the browser or the device, to the extent that these settings are available. Limiting cookies may affect certain functions of the website or the Platform.
13. Transfers and storage
13.1. The data may be stored on the servers of the Company or of the technical providers that help with the functioning of the Platform.
13.2. If the data is transferred outside the Republic of Moldova, the Company will apply the measures required by the applicable legislation for the protection of personal data.
14. Amendment of the Policy
14.1. The Company may amend this Policy to reflect legislative, technical, operational changes or changes to the functionalities of the Platform.
14.2. The updated version will be published on the website and/or in the application. Continued use of the Platform after the publication of the updated version constitutes acknowledgement of the changes, to the extent permitted by law.
15. Language versions
15.1. This Policy may be available in Romanian, Russian, English and/or other languages.
15.2. In the event of discrepancies between the language versions, the Romanian version prevails, except where the applicable legislation requires otherwise.
16. Contacts
16.1. For questions regarding this Policy or the processing of personal data, the User may contact the Company at the details indicated below.
Company: „CHEF MANAGEMENT TAXI” S.R.L.
IDNO: 1026023044198
Registered office: str. Grădina Botanică, nr. 14/4, MD-2032, mun. Chișinău, Republica Moldova
Website: https://cheftaxi.md/
E-mail: Support@cheftaxi.md
Phone: 078800822
Support hours: Monday–Friday, 09:00–18:00
