TENDERHub

Privacy Policy

Last Updated:

 August 23, 2026

Effective Date:

 Immediately

1. Introduction

This Privacy Policy explains how TENDERHub collects, uses, stores, discloses and protects personal data processed through the platform, as well as the rights of data subjects in relation to the processing of their personal data.

The personal data controller is:

EMPI-Tech S.R.L.

IDNO: 1026023041005

Registered office: str. Vasile Lupu 87/8, apt. 2, Chisinau, Republic of Moldova

Email for data protection requests: support@tenderhub.md

Further, TENDERHub.md (“TENDERHub.md”, “we”, “our” or “us”) is committed to respecting and protecting the privacy and personal data of its users and to ensuring a safe and reliable environment for using the platform.

TENDERHub.md processes personal data in accordance with the applicable legislation of the Republic of Moldova in the field of personal data protection, including the provisions of Law No. 195/2024 on the protection of personal data, as well as other applicable regulatory acts in this field.

By accessing or using the TENDERHub.md platform, users acknowledge, confirm and accept this Privacy Policy and the manner in which TENDERHub.md processes personal data, in accordance with the conditions provided by applicable legislation.

This policy applies to individuals who:

  • visit the TENDERHub.md platform;
  • create or manage an account;
  • post ads;
  • purchase or use a subscription/service package;
  • contact the support service;
  • interact with the TENDERHub.md pages on social media;
  • represent an organization that uses the TENDERHub.md services;
  • use other functionalities made available through the portal.

This policy does not apply to third-party sites, applications or services to which TENDERHub.md may provide links. The processing carried out by these third parties is governed by their own privacy policies.

1.1. What is considered as personal data

Personal data is information relating to an identified or identifiable real person.

Data relating to a legal entity, such as the name of an organisation or its IDNO, is not always personal data. However, such information may be personal when it allows the identification of a real person, such as an administrator, a representative, an individual entrepreneur or a person whose business address coincides with their home address.

2. Information We Collect

TENDERHub.md may collect personal data voluntarily and directly provided by users during the registration process, the creation and administration of their account, as well as during their use of the platform.

Personal data may include:

  • First and last name
  • Company or organization name
  • Email address
  • Username
  • Telephone number
  • Tax Identification Number
  • IDNO

System-generated logs are collected for purposes such as:

  • Administration and operation of the platform;
  • Ensuring and monitoring security;
  • Troubleshooting technical issues;
  • Service optimization and performance improvements of the platform.

2.1. Contractual, subscription/service package and billing data

We may process:

  • type and period of subscription
  • date of activation and expiration of subscription
  • subscription status
  • value of services
  • billing data
  • invoice number and date
  • payment status
  • payment method
  • transaction identifier
  • order and payment history
  • correspondence regarding the contract, invoices or payments

If the payment is made through an external processor (Paynet), the full bank card data is entered directly into the payment processor's system.

TENDERHub.md does not store the full card number, CVV code or other full bank authentication data, except where expressly indicated otherwise.

2.2. Data regarding published ads

When a user publishes ads on TENDERHub.md, we may process:

  • the title and content of the ad
  • the name of the author
  • the organization on whose behalf the ad is published
  • the contact details included in the ad
  • the uploaded files
  • the date of creation and publication
  • the selected category
  • archiving information

2.3. Data regarding interactions on social networks

TENDERHub.md may collect and store information made available by social platforms regarding interactions with TENDERHub.md pages.

Depending on the information provided by the social platform, we may process:

  • the reaction or appreciation expressed
  • the type of reaction
  • the comments and shares
  • the public name of the profile
  • the public or technical identifier of the profile
  • the public photo of the profile, if provided
  • the date and time of the interaction
  • the post to which the interaction refers
  • the link to the post or to the public interaction
  • aggregate statistics regarding interactions and audience

This information may be associated with the person's public profile on the social network and, when there is sufficient information for correct identification and the association is necessary for the intended purpose, with the TENDERHub.md user account.

TENDERHub.md will not associate a reaction with an account based solely on an uncertain name match or other insufficient information.

The data may be used to:

  • measure interaction with TENDERHub.md posts
  • compile statistics on the performance of posts
  • prevent abusive or fraudulent use of programs
  • improve TENDERHub.md content and services

The fact that a reaction or profile is publicly visible on a social network does not mean that the information can be used without complying with data protection legislation.

TENDERHub.md does not use reactions to infer political opinions, religious or philosophical beliefs, trade union membership, health, sex life, sexual orientation or other special categories of data and does not create profiles based on such inferences.

Reactions are not used to adopt exclusively automated decisions that produce legal effects or similar significant effects on the person.

Social platforms also process data for their own purposes, in accordance with their own policies, conditions and privacy settings.

2.4. Data regarding communication with TENDERHub.md

When you contact us, we may process:

  • your name and contact details
  • the organization represented
  • the content of the message
  • the documents or attached files
  • the history of the communication
  • the answers provided
  • the information necessary to resolve the request

2.5. Server logs and technical traffic statistics

Server logs, application logs and technical traffic statistics. When the TENDERHub platform is accessed, the web server and hosting infrastructure automatically record certain technical information in access and error logs.

This information may include:

  • IP address
  • date and time of access
  • requested page or resource
  • referring page
  • browser type and version and operating system, as transmitted by the browser
  • device type
  • request method
  • server response code
  • volume of data transmitted
  • technical errors
  • information regarding unauthorized access attempts or automated or abusive activity

Separately from the server logs, the TENDERHub application generates its own technical logs in which operating errors are recorded. They may contain the identifier of the affected user account, the time and component in which the error occurred and the technical responses received from the integrated services. These logs do not contain passwords, card data or the content of documents uploaded by users.

This data is processed for:

  • maintaining the security of the platform and user accounts
  • ensuring the operation and availability of the services
  • identifying attacks, abuses and automated activities
  • diagnosing and remediating technical problems
  • investigating incidents
  • protecting accounts and infrastructure
  • compiling limited and aggregated technical statistics on traffic

Technical statistics may include, for example, the number of requests, pages accessed, traffic volumes, errors and general types of devices or browsers. These statistics are not used for personalized advertising and do not aim to create individual profiles of visitors.

The processing is based on TENDERHub.md's legitimate interest in ensuring the security, availability, integrity and performance of the platform.

Access to detailed logs is limited to authorized TENDERHub.md personnel and the hosting service provider, to the extent necessary for infrastructure administration. The logs are stored in areas of the server that are not publicly accessible.

Detailed server and application logs are kept for a maximum of 90 days, after which they are automatically deleted. Relevant data may be kept for a longer period when this is necessary to:

  • investigate a security incident
  • prevent or detect fraud
  • defend a right
  • settle a dispute
  • fulfill a legal obligation
  • respond to a legal request from a competent authority

Aggregated statistics that no longer allow the identification of an individual may be kept for longer periods.

Third-party services used for security and statistics Google reCAPTCHA. The login, registration, password reset and contact forms are protected with Google reCAPTCHA v3, provided by Google Ireland Limited. The service analyzes technical browser data and the way of interacting with the page to distinguish real users from automated programs. TENDERHub.md only receives an evaluation score and transmits the IP address to Google at the time of verification. The processing is based on our legitimate interest in preventing abuse and automated account creation. Further information is available in the Google Privacy Policy and Terms of Use.

Google Analytics. We use Google Analytics 4, provided by Google Ireland Limited, for aggregate statistics on the use of the platform: pages visited, duration of visit, traffic source, device and browser type, approximate region. The service uses cookies and randomly generated identifiers and does not store full IP addresses. Google Analytics is activated only after consent has been expressed through the cookie banner, and consent can be withdrawn at any time from the cookie preferences, accessible from the platform page. Personalized advertising features and Google Signals are disabled; data is not used for personalized advertising or remarketing.

Consent management. The cookie banner is provided by TermsFeed. When loading it, your browser transmits the IP address and technical browser data to the provider, strictly to the extent necessary for the delivery of the script. All other interface components are delivered directly from the TENDERHub.md servers.

3. Data sources

Data can be obtained:

  • directly from the data subject
  • through account registration and administration forms
  • through material publication forms
  • through subscription forms
  • through concluded contracts
  • through communications addressed to TENDERHub.md
  • automatically, through servers, technical logs, cookies and similar technologies
  • from the organization that the person represents
  • from other authorized users of the same organization
  • from payment processors
  • from social platforms
  • from publicly accessible sources
  • from authorities or other entities, when the transmission is permitted or required by law

When a person provides data about another person, he must ensure that he has the right to transmit the data and that the person has been duly informed

4. Purposes and grounds for processing

We process data only for specified, explicit and legitimate purposes.

4.1 How We Use Information

TENDERHub.md may process personal data for the following purposes, including:

  • Providing access to the TENDERHub.md platform and services
  • Creating, managing and securing user account / profile
  • Authentication
  • Recovering access
  • Improving functionality, security and user experience
  • Providing technical support and resolving user requests
  • Maintaining, developing and improving the functionality and performance of the platform
  • Monitoring and ensuring the security of IT systems
  • Sending necessary communications regarding the operation of the platform, accounts, services and security
  • Complying with TENDERHub.md’s legal obligations

Registration on TENDERHub.md leads to the creation of a user profile in the platform's internal systems, using the data provided by the user.

Data will not subsequently be used in a manner incompatible with the purposes for which it was collected, except as permitted by applicable legislation.

4.2. Provision of TENDERHub.md services

The data is used for:

  • publishing and managing advertisements
  • managing subscriptions
  • providing support
  • sending operational communications
  • complying with the Terms and Conditions

The basis for processing is the execution of the contract and carrying out pre-contractual measures.

4.3. Invoicing, accounting and legal obligations

The data is used for:

  • issuing invoices
  • recording payments
  • accounting
  • tax reporting
  • managing supporting documents
  • fulfilling legal obligations
  • responding to requests from competent authorities

The basis for processing is the fulfillment of legal obligations and executing the contract.

4.4. Handling complaints and disputes

The data may be used for:

  • resolving requests
  • investigating complaints
  • establishing, exercising or defending rights
  • preserving evidence
  • resolving disputes

The basis for processing is legitimate interest and, where applicable, compliance with legal obligations.

5. Information Published on the Platform and User Responsibility

Certain information published in publicly accessible areas or entered into the platform’s databases may be visible to other authorized users or companies that use the platform/service.

Users are responsible for the data and information they enter, publish or transmit through the platform and must ensure that they have the right to transmit such information and that its processing or publication is permitted under applicable legislation.

TENDERHub implements appropriate technical and organizational measures to protect users’ personal data under its control. However, once certain information has been made public, TENDERHub cannot fully control how third parties or authorized users may subsequently store, process or distribute information accessed through the platform.

For this reason, users are encouraged not to publish or transmit personal data or confidential, sensitive or legally protected information unless this is strictly necessary.

5.1. Content published on TENDERHub.md

Information entered in the fields intended for publication may become publicly accessible.

This information may include:

  • the author's name
  • the organization
  • the e-mail address or phone number included in the announcement
  • the names of the mentioned persons
  • other information included in the content

Published materials may:

  • be indexed by search engines
  • be included in electronic newsletters
  • be distributed on social networks
  • be taken over by archiving or aggregation services
  • remain temporarily available in the cache of third-party services after removal from TENDERHub.md

The user is responsible for not publishing excessive personal data and for ensuring that he has the right to publish data, images or information relating to other persons.

Removal of a material from TENDERHub.md does not guarantee the immediate removal of all copies existing on search engines, social networks, archives or third-party sites.

6. Cookies and similar technologies

TENDERHub.md uses cookies for platform operation, authentication, security, preference storage and usage statistics. We do not use advertising cookies and do not integrate social media plugins.

The server logs described in the previous section are not cookies; they are automatically generated at the infrastructure level when the browser requests a page or resource.

6.1 Strictly Necessary Cookies

These are essential for authentication, session retention, form protection against CSRF attacks, abuse prevention and remembering your cookie preferences. They cannot be disabled in the preferences panel.

Cookie Provider Purpose Duration
tenderhub_session TENDERHub current session identification 4 ore de la ultima acțiune
XSRF-TOKEN TENDERHub form protection (CSRF) 4 hours since last action
remember_web_* TENDERHub maintaining authentication, only if you check "Remember me" 5 years or until logout
cookie_consent_user_accepted, cookie_consent_level, cookie_consent_user_consent_token TermsFeed (set on the TENDERHub domain) remembering your cookie preferences 1 year
_GRECAPTCHA Google Google reCAPTCHA – anti-abuse protection on login, registration, password reset and contact forms 6 months

6.2 Functional cookies

Cookie Provider Purpose Duration
favorites TENDERHub keeping the list of favorite ads for non-authenticated visitors; upon authentication, the list is transferred to the 30 days

This cookie is only set when you use the favorites function.

6.3 Cookie-uri de analiză și performanță (opționale)

Cookie Provider Purpose Duration
_ga, _ga_9RTVJZM0DJ Google Analytics aggregated platform usage statistics 2 years

These cookies are only activated after you have given your consent in the cookie banner and are distinct from the limited technical statistics generated from server logs. The data is not used for personalized advertising.

6.4. Embedded content

The descriptions of some ads may include embedded content from third parties (for example, videos). When displaying it, the respective provider may set its own cookies, according to its privacy policy.

6.5. Cookie management

On your first visit, you are presented with a banner through which you can accept all cookies, reject optional cookies or select certain categories. To later change the expressed option, delete the platform cookies in your browser settings; on your next visit, the banner will be displayed again. You can also block or delete cookies directly from your browser. Blocking certain cookies may affect the functioning of some features of the platform, in particular authentication and the favorites list.

7. Legal Basis and Principles of Data Processing

TENDERHub.md processes personal data in accordance with the terms of Law No. 195/2024 on the Protection of Personal Data.

Depending on the purpose of the processing, the basis may include, as applicable:

  • the necessity of processing for the performance of a contract or for taking steps at the request of the data subject prior to entering into a contract
  • the necessity of complying with a legal obligation applicable to TENDERHub.md
  • other legal grounds provided by applicable legislation.

TENDERHub.md processes personal data in accordance with the following principles:

  • data is processed legally, fairly and transparently
  • data is collected only for specified, explicit and legitimate purposes
  • only strictly necessary data are collected
  • data is kept accurate and up to date
  • data is stored only for the necessary period
  • appropriate technical and organizational measures are implemented to protect data against unauthorized access, loss, misuse or disclosure.

Data processing is based on consent, the data subject has the right to withdraw consent at any time, without affecting the legality of the processing carried out prior to its withdrawal.

8. Data Retention Period

Personal data will be kept as long as the user's account remains active or as long as it is necessary to provide services and comply with legal obligations.

Users may request the deletion of their account and personal data at any time. Upon receipt of a valid request, TENDERHub.md will review and process the request within the time frame provided by applicable law and delete the information, except where retention is required by law.

The following terms typically apply:

  • contractual data: for the duration of the contractual relationship and until the expiry of the legal terms in which claims can be made
  • invoices and accounting documents: for the period provided by the accounting and fiscal legislation
  • proof of consent: during the use of consent and subsequently as long as necessary to demonstrate compliance with legal obligations
  • detailed server logs: usually no more than 90 days
  • published materials: during publication and, as the case may be, in the TENDERHub.md archive
  • backup copies: until they are overwritten according to the technical backup cycle, usually within 90 days at the most

Data may be kept for a longer period when:

  • there is a legal obligation
  • are necessary in a litigation
  • are necessary for the investigation of an incident
  • the person requests the preservation
  • there is another justified legal basis

Upon expiry of the applicable term, the data is deleted, anonymised or archived with restricted access.

9. User Rights

Under the conditions and within the limits provided by Law no. 195/2024 on the protection of personal data, platform users (data subjects) can benefit from the following rights:

  • the right to be informed about the processing of their personal data
  • the right of access to their personal data and information concerning its processing
  • the right to rectification of inaccurate data or completion of incomplete data
  • the right to delete personal data
  • the right to withdraw consent where processing is based on consent
  • the right to restrict processing, under the conditions provided for by law

Users may review and update their information directly through their user profile settings.

For requests concerning account deletion or the exercise of privacy-related rights, users may contact us at: support@tenderhub.md

TENDERHub.md may request additional information to verify the identity of the requesting party when this is necessary to protect personal data and prevent unauthorized access.

10. Organization Accounts and Associated Users

An organization may have multiple users associated with the same organizational subscription or profile.

In this case:

  • authorized administrators of the organization may see certain information about the associated accounts
  • the organization may request the addition or removal of users
  • expiration of the organization's subscription may affect access for all associated users
  • users must use the services only in connection with the organization they are authorized to represent

TENDERHub.md may request confirmation of the user's authorization by the organization.

11. Minors' Data

TENDERHub.md commercial and organizational services are not specifically intended for minors.

Individuals who create accounts, purchase services, or post ads on behalf of an organization must have the necessary capacity to perform these actions.

If certain functionalities, such as petitions or public forms, allow the participation of minors, their data will be processed in compliance with the applicable special requirements and, where necessary, with the authorization of the legal representative.

If we learn that a minor's data has been collected without the necessary authorization, we will take reasonable steps to delete or restrict it.

12. Third-Party Websites

The TENDERHub.md platform may contain links to websites or external services operated by third parties over which TENDERHub.md has no control.

TENDERHub.md is not responsible for the privacy policies, practices or content of such third-party websites. Users are encouraged to review the privacy policies of any external website they access.

13. Security Measures

TENDERHub.md implements appropriate administrative, technical and organizational measures, proportionate to the risks associated with processing, to protect personal data against unauthorized access, loss, destruction, alteration, disclosure or other forms of unauthorized processing.

However, no system of electronic data transmission or storage system can guarantee an absolute level of security. Therefore, although we make all reasonable efforts to protect personal information, we cannot guarantee its complete security.

In the event of a personal data breach, TENDERHub.md will act in accordance with its obligations under the applicable law, including risk assessment, incident documentation and, when necessary, notification of the supervisory authority and communication to the data subjects concerned.

14. Modification of this Privacy Policy

TENDERHub.md reserves the right to modify or update this Privacy Policy at any time to reflect legislative, operational or functional changes to the platform.

The updated version of the Policy will be published on the platform and will indicate the date of the latest update.

We encourage users to periodically review this Privacy Policy to stay informed about how their information is protected.

15. Contact Details

For questions, requests or concerns regarding this Privacy Policy or the processing of personal data, TENDERHub.md may be contacted through:

  • Email: support@tenderhub.md
  • Contact form available on TENDERHub.md
  • Telephone contact details published on the TENDERHub.md website

The TENDERHub.md platform is managed by:

EMPI-Tech S.R.L.

IDNO: 1026023041005

Registered office: 87/8 Vasile Lupu Street, apt. 2, Chisinau, Republic of Moldova

15.1. Supervisory authority

Data subjects may file a complaint with:

National Center for Personal Data Protection of the Republic of Moldova

Address: MD-2004, Chisinau Municipality, Serghei Lazo Street no. 48

Phone: +373 (022) 82-08-01

E-mail: centru@datepersonale.md

We recommend that, before filing a complaint, the person contact TENDERHub.md to give us the opportunity to examine and resolve the request.