Consent for the processing of personal data

Consent to the Processing of Personal Data

I have been informed in accordance with the provisions of Article 12 of Law No. 133 of July 8, 2011, on the Protection of Personal Data, and I hereby give my consent to the processing of my personal data, including my first name, last name, date of birth, email address, telephone number, and other personal data related to my preferences when purchasing products from the alcomarket.md website.

I confirm that my rights provided for under Articles 12–18 of the Law on the Protection of Personal Data have been explained to me, including the right to be informed, the right of access, the right to rectification, the right to object, and the right to apply to a court in matters relating to the processing of my personal data.

I acknowledge that my personal data will be processed in compliance with security and confidentiality requirements, in accordance with the provisions of the Law on the Protection of Personal Data and Government Decision No. 1123 of December 14, 2010, approving the requirements for ensuring the security of personal data during their processing within personal data information systems.

Excerpt from Law No. 133 of 08.07.2011

Article 12. Information for the Data Subject

Where personal data are collected directly from the data subject, the controller or its authorized representative shall provide the following information, except where the data subject already possesses such information:

the identity of the controller or, where applicable, its authorized representative;

the purpose of processing the collected data;

additional information, including:

(a) the recipients or categories of recipients of the personal data;

(b) the rights of access, rectification, objection, and the conditions under which these rights may be exercised;

(c) whether replies to questions concerning the collection of personal data are mandatory or voluntary, and the possible consequences of failing to provide such information.

Where personal data are not collected directly from the data subject, the controller shall provide information on the categories of data to be collected or disclosed, together with the information referred to in paragraph 1, except for subparagraph (c).

The provisions of paragraph 2 shall not apply where:

(a) the data subject already has this information;

(b) the processing is carried out for statistical, historical, or scientific research purposes;

(c) providing the information is impossible or would involve a disproportionate effort in relation to the legitimate interests that may be affected;

(d) the recording or disclosure of personal data is required by law.

Article 13. Right of Access to Personal Data

Every data subject has the right to obtain from the controller, upon request, free of charge and without undue delay:

(a) confirmation as to whether or not their personal data are being processed, as well as information regarding the purposes of processing, the categories of data, and the recipients or categories of recipients;

(b) communication of the data in an intelligible form without requiring additional equipment;

(c) information about the principles governing any automated processing mechanisms concerning the data subject;

(d) information about the legal consequences of the processing of personal data for the data subject.

Where health-related data are used for scientific purposes, the data subject must give consent to the processing of such data and to the possible postponement of providing information if this is necessary to avoid adversely affecting the research.

Article 14. Right to Rectification of Personal Data

Every data subject has the right, free of charge and upon request, to obtain from the controller or its authorized representative:

(a) the rectification, updating, blocking, or erasure of personal data where their processing is contrary to the law;

(b) notification of third parties to whom the data have been disclosed regarding the actions taken.

Article 15. Exceptions and Restrictions

The provisions of Articles 4(1), 12(1) and (2), 13, 14, and 28 shall not apply where the processing of personal data is carried out for the protection of national security, public order, or the rights and freedoms of other persons.

The processing of personal data shall not continue beyond the period necessary to achieve the purposes for which the data were collected.

Article 16. Right to Object

The data subject may, at any time and free of charge, object to the processing of their personal data where such processing is related to their personal circumstances, except where otherwise provided by law.

The data subject has the right to object to the use of their personal data for commercial purposes. The controller shall inform the data subject of this right before disclosing the personal data to any third party.