1. Personal data controller

The controller of the Localbooking.md platform is: "TENERVENT" S.R.L., IDNO 1012600002853, headquartered at str. C. Brîncuși, 124/1, Chișinău.

For questions regarding the processing of personal data, exercising the rights provided by law, or submitting a request regarding your personal data, you can contact us:

• Email: info@localbooking.md
• Phone: +373 68 999 608

Localbooking has assessed the need to designate a Data Protection Officer (DPO) in accordance with Art. 37 of Law No. 195/2024 and has determined that, given the nature and scale of the processing activities carried out, designating a DPO is not mandatory. The email address above is dedicated to data protection requests and questions and is managed by a responsible person within the company.

2. What is personal data

Personal data means any information relating to an identified or identifiable natural person.

Depending on the services used, Localbooking may process:

• email address;
• first and last name;
• phone number;
• booking information (chosen accommodation or tour, check-in/check-out dates, number of guests, number of rooms);
• booking history;
• data required for issuing booking-related documents;
• IP address;
• information about the device used;
• information about the browser and operating system;
• data collected through cookies and similar technologies.

For certain bookings, the accommodation facility may request directly, upon arrival, additional data required by legislation on tourist records (for example, ID document data), in accordance with section 6.

Localbooking collects data only to the extent necessary for the purpose for which it is processed.

3. Creating an account

Creating an account on Localbooking requires providing an email address.

The user sets their own password, which is used to log into the account.

The email address is used to identify the account, for authentication and for communications necessary for the functioning of the account and the services requested by the user.

4. Making a booking

To make an accommodation or tour booking, Localbooking may request:

• first name;
• last name;
• phone number;
• email address associated with the account;
• number of guests and, if applicable, number of rooms;
• check-in and check-out dates or the tour date.

This data is used to process the booking, identify the beneficiary, confirm and transmit the booking to the service provider, communicate with the user and provide the requested service.

5. Payment of bookings

Localbooking accepts payment by VISA and Mastercard cards, through the payment service provider used by the platform.

Depending on the conditions set by the tourism service provider, at the time of the online booking the user may be charged partially or in full for the booked service, the payment being processed to the Localbooking account, which subsequently settles the amounts to the service provider, according to the contractual arrangements between them.

Full bank card data is not collected or stored by Localbooking, as it is entered and processed exclusively on the payment service provider's platform.

Localbooking may receive and retain the information necessary to confirm the transaction result, process the booking and, if applicable, resolve refunds.

6. Additional data requested at check-in

In accordance with the applicable legislation on the records of accommodated persons, accommodation facilities may request guests, upon arrival, ID document data (for example, name, date of birth, ID series and number, nationality).

This data is collected directly by the accommodation facility, acting as its own controller, and generally does not pass through the Localbooking platform, except when the accommodation facility expressly requests its collection through the platform for a specific booking, in which case the provisions of section 7 apply.

Localbooking is not responsible for how the accommodation facility collects, uses or retains this data at the time of actual check-in.

7. Transmission of data to the tourism service provider

To complete the booking, Localbooking transmits to the tourism service provider (accommodation facility, guide or tour operator) the data necessary to fulfill the booking, which may include:

• first name;
• last name;
• phone number;
• email;
• booking information (dates, number of guests, rooms, requested services).

Data is transmitted to the provider only to the extent necessary to prepare and provide the booked service.

For data that the service provider collects or uses for its own purposes (for example, records of accommodated guests, as per section 6, or its own communications to the guest), the provider acts as an independent controller and is responsible for complying with the applicable data protection legislation. Localbooking processes the data transmitted to the provider solely for the purpose of completing the booking through the platform.

8. Purposes of processing and corresponding legal bases

Localbooking processes personal data for the following purposes, each based on the indicated legal basis:

• creating and managing the account — performance of the contract with the user;
• processing bookings and transmitting them to the service provider — performance of the contract;
• processing and confirming payments, as well as settlements to tourism service providers — performance of the contract and fulfillment of a legal obligation (fiscal-accounting records);
• communication regarding bookings and information about changes, postponements or cancellations — performance of the contract;
• resolving requests and providing support — performance of the contract and the legitimate interest of Localbooking;
• preventing fraud and false bookings, and ensuring platform security — legitimate interest of Localbooking;
• improving services — legitimate interest of Localbooking;
• fulfilling legal obligations (fiscal, accounting, reporting) — fulfillment of a legal obligation;
• defending Localbooking's legitimate rights and interests — legitimate interest of Localbooking;
• sending commercial communications (newsletter, offers) — consent of the data subject.

Using Localbooking's services does not automatically constitute consent for all types of data processing. Where consent is required, it will be requested separately and in a form that allows the person to freely and knowingly express their choice.

9. Booking-related communications

Localbooking may send the user communications necessary for the requested service, including:

• booking confirmation;
• payment confirmation;
• information about changes or cancellation of the booking;
• information about refunds;
• other information necessary for using the booking or carrying out the tour.

10. Newsletter and commercial communications

Localbooking may send users newsletters, offers and other commercial communications under the conditions provided by applicable law.

Where consent is required, it is requested separately from the data required to create the account and make bookings.

The user may unsubscribe at any time from commercial communications using the unsubscribe mechanism available in the messages sent. Unsubscribing from the newsletter does not affect the user's account or their ability to use Localbooking's services.

11. Cookies

Localbooking uses cookies and similar technologies for the platform's operation, security, remembering preferences (including selected language and currency), analytics and other purposes described in the Cookie Policy.

Cookies for which the law requires obtaining consent will only be used after such consent is given, through a mechanism that allows both acceptance and refusal, under equally simple conditions.

12. Service providers

To operate the platform, Localbooking may use service providers, including:

• banking and payment service providers;
• hosting and IT infrastructure providers;
• email service providers;
• technical and platform development service providers;
• security service providers;
• analytics service providers;
• other providers necessary for the platform's operation.

These providers may only access the data necessary to provide the respective services and are contractually required to ensure data protection in accordance with applicable requirements and Localbooking's instructions.

13. Data retention

Localbooking retains personal data for a maximum period of 5 years from the date of the user's last active interaction with the platform or from the complete conclusion of the booked tourism service.

Depending on the category of data, the specific terms are:

• User account data will be kept for the entire duration of the account's existence and will be deleted or anonymized within a maximum of 5 years from the last login to the platform.
• Data regarding bookings, payments and financial transactions is kept for a period of up to 5 years after the end of the financial year in which they occurred, for the purpose of complying with applicable accounting, fiscal and legal reporting obligations in the Republic of Moldova.
• Data transmitted to tourism service providers is stored on the platform for a maximum of 5 years from the end of the stay or tour, for the purpose of resolving any complaints or contractual disputes.

Upon expiry of these terms, data is permanently deleted or irreversibly anonymized, except where retention is necessary for the defense of rights in court.

14. Data security

Localbooking applies appropriate technical and organizational measures to protect personal data against unauthorized access, loss, destruction, alteration, disclosure or other forms of unlawful processing. Access to data is limited to persons who need it to perform their duties.

In the event of a security incident or breach affecting personal data, Localbooking undertakes to notify the National Center for Personal Data Protection (CNPDCP) within a maximum of 72 hours from becoming aware of it.

15. Rights of data subjects

Under the conditions provided by law, the data subject may have the following rights:

• the right to be informed about the processing of data;
• the right to access their data;
• the right to rectify inaccurate or incomplete data;
• the right to erasure of data, under the conditions of the law;
• the right to restrict processing;
• the right to object;
• the right to data portability, in cases provided by law;
• the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them, in cases provided by law;
• the right to withdraw consent, where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal;
• the right to lodge a complaint with the National Center for Personal Data Protection (CNPDCP), the competent supervisory authority in the Republic of Moldova, as well as the right to apply to a court of law;
• other rights provided by applicable law.

The exercise of these rights may be subject to the limitations provided by law.

16. Exercising your rights

To exercise rights regarding personal data, the user can contact us:

• Email: info@localbooking.md
• Phone: +373 68 999 608

To protect data against unauthorized access, Localbooking may request additional information to verify the identity of the person making the request.

Requests are generally reviewed within a maximum of one month of receipt, a term which may be extended by up to two additional months depending on the complexity and number of requests, with the user being informed of any such extension, under the conditions provided by applicable law.

For data collected directly by the accommodation facility at check-in (section 6), the request must be addressed to that accommodation facility, as the controller of that data.

17. Minors' data

For creating an account or directly using Localbooking's services by a minor, based on consent, processing is lawful only if the minor is at least 14 years old, in accordance with Art. 8 of Law No. 195/2024.

If the minor is under 14 years old, the account may only be created and the services used with the consent expressed or authorized by the parent or the minor's legal representative, Localbooking reserving the right to request reasonable proof in this regard.

Bookings made for minors traveling with an adult are made by the adult account holder, who is responsible for the accuracy of the data provided.

18. Transfer of data to other states

Localbooking may transmit personal data to technical service providers (for example, hosting, IT infrastructure, email services) which may be located outside the Republic of Moldova.

In such cases, the transfer is carried out only if the destination country ensures an adequate level of protection (adequacy decision) or if appropriate safeguards are implemented, such as standard contractual clauses or other mechanisms provided by Law No. 195/2024 and related legislation on international data transfers.

Users may request additional information about the safeguards applied to a specific transfer by contacting us at the details indicated in section 16.

19. Principles of processing

Localbooking processes personal data in accordance with the applicable data protection principles, including:

• lawfulness, fairness and transparency;
• purpose limitation;
• data minimization;
• accuracy of data;
• storage limitation;
• integrity and confidentiality;
• accountability of the controller.

20. Changes to the policy

Localbooking may update this Privacy Policy to reflect changes in legislation, services, or the way the platform operates.

The updated version will be published on this page and will indicate the date of the last update.