Personal Data Processing Policy

This Policy sets out how personal data is processed and the measures taken to ensure its security by the operator of the billmgr.dev website (the “Operator”, “we”).

The Policy is prepared in accordance with the personal data protection legislation of the Republic of Moldova: Law No. 133/2011 on the protection of personal data and, from 23 August 2026, Law No. 195/2024 replacing it, which fully transposes Regulation (EU) 2016/679 (GDPR).

Where the law applicable to you grants broader rights, those provisions prevail.

By using the Website and submitting your data, you confirm that you have read this Policy.

The Operator is the person whose details are set out at the end of this page.

Enquiries about personal data processing: [email protected]

Personal data — any information relating to a directly or indirectly identified natural person (the data subject).

Processing — any operation or set of operations performed on personal data (collection, recording, storage, use, transfer, anonymisation, deletion and others).

Data subject — the natural person to whom the personal data relates (a user of the Website).

Consent of the data subject — for contact forms and notifications not related to the performance of a contract.

Performance of a contract to which the data subject is a party — providing access to modules, technical support, processing payments and enquiries.

Compliance with legal obligations — including record keeping and retention of documents.

The Operator’s legitimate interest — keeping the Website operational and secure and preventing abuse and fraud.

Consent may be withdrawn at any time by writing to [email protected]. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal and does not stop processing that is necessary to perform the contract or to comply with the law.

Data you provide: name, email address, company name (if provided), the content of your enquiries and any files attached to them.

Account and order data: the modules purchased, payment statuses, amounts and currency, transaction identifiers.

Technical data collected automatically: IP address, browser and device information, cookies, and interaction data.

We do not process special categories of personal data or biometric data. Bank card details never reach us — see section 8.

Providing access to modules and performing the contract concluded with you.

Responding to enquiries and providing technical support.

Informing you about the status of orders and payments.

Record keeping and compliance with legal requirements.

Keeping the Website secure and preventing abuse.

Improving the Website and the quality of service.

Account data is processed for as long as the account exists and is deleted or anonymised after the account is removed.

Order and payment records are kept for the period required by law for the retention of accounting documents.

Support enquiries and their attachments are kept for no longer than three years after the last message.

Technical logs are kept for no longer than twelve months.

Payments are processed by a payment provider. Bank card details — the card number, expiry date and CVV/CVC code — are entered on the provider’s secure page; they never reach the Operator and are not stored by it.

From the provider the Operator receives only the information required to perform the contract: the fact and status of the payment, its amount and currency, the transaction identifier and the payer’s email address.

We do not sell personal data and do not transfer it for purposes unrelated to providing the services.

Data may be shared with service providers required for the Website to operate: the payment provider, the email delivery service, the hosting provider, the traffic protection and delivery provider, and the web analytics service. Such providers process the data on the Operator’s instructions and only to the extent needed to provide their services.

Some providers are located outside the Republic of Moldova. Cross-border transfers are carried out subject to an adequate level of personal data protection.

Data may be disclosed to competent authorities in the cases and in the manner provided for by law.

The Website uses cookies necessary for it to function: session, client area authentication, and storing your interface preferences.

The Website uses a web analytics service to measure traffic and improve its pages.

You can restrict or block cookies in your browser settings. This may limit the functionality of the Website, including the ability to sign in to the client area.

You have the right to be informed about the processing of your personal data, to access it, to request rectification of inaccurate data, its erasure or restriction of processing, to object to processing, and to receive your data in a machine-readable format.

To exercise your rights, send a request to [email protected]. We respond within the period established by law.

If you believe your rights have been infringed, you may lodge a complaint with the National Center for Personal Data Protection of the Republic of Moldova (Centrul Național pentru Protecția Datelor cu Caracter Personal).

The Operator takes the necessary legal, organisational and technical measures to protect personal data from unlawful or accidental access, destruction, modification, blocking, copying and other unlawful actions.

Data transmitted between your browser and the Website is protected by TLS encryption. Access to data is limited to those who need it in order to provide the services.

The Operator may amend this Policy. The current version is always available on this page. Continued use of the Website after changes are made constitutes acceptance of the new version.