PROCESSING AND PROTECTION OF PERSONAL DATA

The Public Association Professional Association "National Bureau of Motor Insurers" (hereafter referred to as BNAA), with IDNO 1003600005045 and headquartered at 16 M. Kogălniceanu Street, Chisinau, operating under the Statute approved by Decision no. 9 of June 14, 2023, of the General Assembly of the members of the National Bureau of Motor Insurers of the Republic of Moldova, informs you that it collects and processes personal data in accordance with the provisions of Law no. 133 of July 8, 2011 on the protection of personal data and Law no. 106 of April 21, 2022 on compulsory motor third party liability insurance for damage caused by vehicles, as well as the Regulation on the Protection Fund for Street Victims, approved by Decision of the National Council of Finance and Economy no. 19/11 of April 9, 2009 and the Regulation on the Compensation Fund, approved by Decision of the National Council of Finance and Economy no. 23/3 of May 29, 2008.

The types of personal data that may be processed include: name, surname, personal identification number (IDNP), home address, copies of documents (identity card, driving license, passport, power of attorney, registration certificate), contact details (email address, telephone/fax number), bank details (IBAN, debit/credit card information), signature, and sensitive personal data such as medical information (provided by the data subject in the compensation process).

In cases where individuals provide personal data concerning other persons, they are responsible for communicating the content of this document and obtaining their consent.

The purposes of processing personal data by BNAA include:

1. Ensuring insurance compensation to injured parties as stipulated in Articles 38-40 of Law no. 106 of April 21, 2022;
2. Providing information as stipulated in Article 41, paragraphs (1) and (2) of Law no. 106 of April 21, 2022;
3. The settlement of damages/claims recovery, including through legal proceedings.

The lawfulness of the data processing undertaken by BNAA is derived expressly from the provisions of Article 39, paragraph (8), and Article 41, paragraph (4) of Law no. 106 of April 21, 2022, as well as from Article 5, paragraphs (1) and (5) letters b), d), e), g) of Law no. 133 of July 8, 2011.

The recipients or categories of recipients to whom the collected personal data may be disclosed include national offices—members of the "Green Card" System, insurers or their correspondents (including those from abroad), state authorities, criminal prosecution bodies, persons (including injured parties) demonstrating a legitimate interest—authorized administrators, lawyers, bailiffs; and service providers involved in damage investigation and assessment, as well as in the anti-fraud analysis process.

Transfer of personal data to third countries or international organizations may occur for the aforementioned purposes. BNAA may transfer personal data to national bureaux—members of the "Green Card" System and insurers or correspondents abroad, in line with BNAA's participation in the "Agreement between the national insurance bureaux of the Member States of the European Economic Area and other associated states" signed in Rethymno (Crete) on May 30, 2002, and the "Personal Data Processing Agreement" of June 6, 2018, signed between the Member National Bureaux and the Council of Bureaux.

Personal data retention period: Personal data will be retained for a period of 7 years from the completion of any data processing activities. This retention period is established to fulfill the purposes outlined above, including compliance with legal obligations under Law no. 106 of April 21, 2022. After this period, data will be destroyed or anonymized, in the latter case being retained strictly for statistical/audit purposes.