Official documents
Privacy Policy
1. Who is the controller
CONNECTBASE SRL, IDNO/tax code 1023600007753, registered office: MD-2089, Republic of Moldova, Chișinău municipality, Ciorescu village, 9 Ștefan cel Mare Street, operates autocare.md, autobuse.md, autobuze.md and the Autocare mobile application.
For questions and to exercise your rights: [email protected], telephone +373 60 003 377.
2. Who this policy applies to
This policy applies to users of the websites and application, account holders, passengers included in requests, people who contact support or explicitly subscribe to price alerts. A person entering another passenger’s data must have the right to provide it and must inform them of this policy and the relevant booking conditions.
We collect contact details only for the person making the booking. We do not request the separate telephone number or email address of the other passengers, and Autocare communications about the request and journey are sent to the person making the booking, who must forward them to the people for whom they booked.
3. What data we process
| Category | Examples | Usual source |
|---|---|---|
| Identity and contact | Passengers’ first and last names; the booking party’s telephone number, email address, preferred language and account identifier. | The user, the adult making the booking or account authentication. |
| Booking and travel data | Route, date/time, carrier, boarding/alighting points, passengers, seat, luggage/options, necessary comments. | The user, the selected offer, the carrier and connected systems. |
| Additional data required for the journey | Date of birth, document type/number or other information only if the offer/carrier explicitly requires it for the selected journey. | The user, after being informed in the form. |
| Information regarding payment directly to the carrier | The selected payment method, the booking price and currency, payment status communicated by the carrier and, if provided for a complaint, proof of payment. These records do not constitute payment processing by Autocare. | The offer, the user, the carrier and documents received through support. |
| Communications and support | Emails, SMS, push notifications, requests, complaints, responses and necessary operational history. | The user, Autocare and the carrier. |
| Technical and security data | IP address, timestamps, device/browser, logs, session identifiers, authentication/push tokens, error and anti-fraud events. | The device, servers and technical providers. |
| Preferences and analytics | Language, theme, favourite/recent routes, cookie consent and Google Analytics events only in accordance with consent choices. | The user and use of the platform. |
| Price alerts | Tracked route and subscription status. | Explicit user subscription; we do not use bookings for a general newsletter. |
4. Why we use the data and the legal basis
| Purpose | Legal basis used, as applicable |
|---|---|
| Searching, forwarding the request, confirmation, booking management and communicating with the passenger. | Steps taken at the user’s request and performance of the service/contractual relationship. |
| Transmitting data to the carrier for acceptance, the passenger list and performance of the journey. | Necessity for the requested booking/transport and applicable obligations. |
| Recording the payment method and payment status with the carrier, and forwarding requests concerning amounts collected by the carrier. | Performance of the booking management service and handling the user’s requests; legal obligations applicable to complaints. |
| Account, authentication, OTP, security, abuse prevention and incident investigation. | Performance of the service, security obligations and proportionate legitimate interests. |
| Support, complaints, protection of rights and dispute resolution. | Legal obligations, performance of the service and legitimate interests. |
| Price alerts for selected routes. | Explicit request/subscription; these can be stopped at any time. |
| Google Analytics and associated optional storage. | Consent given through the cookie banner. |
| Compliance with the requirements of competent authorities. | Legal obligation or protection of a right. |
5. Data transmitted to the carrier
In the standard process, we transmit to the carrier the name of each passenger, the booking party’s telephone number, the route, date/time and boarding/alighting points. If a journey justifiably requires additional data, this is indicated in the form before collection.
The carrier uses the data to check availability, accept/refuse the request, prepare the passenger list, make operational contact, issue the transport document and provide the journey. The carrier is independently responsible for its processing and must be contacted regarding rights relating to its own records.
For an offer from a carrier that has no commercial contract with Autocare, before transmission an infobox is displayed identifying the carrier, indicating its available contact details and listing the categories of data that will be transmitted to it. Clicking the “Send request” button constitutes the user’s request to transmit this data to the named recipient for booking and transport arrangements. This processing is necessary to fulfil the user’s request; it is not presented as optional consent for marketing or other unrelated purposes.
6. Who else we may disclose data to
- hosting, database, storage, CDN, security and technical support providers;
- email, SMS and notification providers; for mobile, depending on the platform, we use Firebase Cloud Messaging and Apple Push Notification service;
- Google Analytics, if you have allowed the analytics category; Google reCAPTCHA to protect OTP requests; Google Maps when you open map features;
- Sentry for server-side diagnosis of errors in production;
- the communications infrastructure used to transmit data to the carrier, including Telegram integration;
- professional advisers and authorities, where disclosure is necessary and lawful;
- a business successor, subject to continuity of protection and the information required by law.
We do not sell personal data. Analytics, advertising or communication tools not listed in this policy are not part of the active set of services described in this version.
Online payment directly to the carrier is handled outside Autocare. The carrier and its payment provider provide their own information about the data processed in that process; this information should be consulted before payment.
7. International transfers
Carriers may be established in the Republic of Moldova, Ukraine or countries of the European Union. Some technical providers may process data in other countries. When data is transferred abroad, we use the legal basis and safeguards required by applicable law, limit data to the purpose and impose contractual obligations where necessary.
You may request information about the relevant destination and safeguards at [email protected]. The foreign carrier remains responsible for the data it receives and uses for the purpose of transportation.
8. How long we keep data
| Category | Retention rule |
|---|---|
| Bookings and identifiable passengers | In the normal process, no more than 5 years from the travel date, unless a legal deadline or justified dispute requires otherwise. |
| Valid deletion request | Eligible data is deleted or anonymised without undue delay, within a maximum of one month. Data strictly necessary for a future journey or required by law is isolated and reassessed once the reason no longer applies. |
| Proof of payment to the carrier, received for support or complaints | For as long as necessary to resolve the request and meet legal obligations or protect rights. Autocare’s own accounting and financial documents are retained for the period required by applicable legislation. |
| Complaints and proof of acceptance | For as long as necessary to resolve the matter and for the duration of the applicable limitation periods/periods for the protection of rights. |
| Price alerts | Until unsubscribing/deleting the alert or until the feature is no longer available. |
| Security and error logs | For the minimum period justified by security, investigation and service stability; the period may vary depending on the type of log. |
| Cookies and local storage | In accordance with the Cookie Policy and the user’s choices. |
| Backups | Until the backup is rotated/expires; deleted data is not returned to current use if a technical restoration becomes necessary. |
9. Your rights
Subject to applicable law, you may request:
- confirmation of processing and access to data;
- rectification of inaccurate data or completion of data;
- deletion or anonymisation of eligible data;
- restriction of processing;
- objection to processing based on legitimate interest;
- data portability, where applicable;
- withdrawal of consent, without affecting processing carried out before withdrawal;
- information about recipients and transfers;
- lodging a complaint with the National Center for Personal Data Protection or bringing a matter before the competent court.
10. How to submit a data request
Write to [email protected] and describe the right you wish to exercise. We may request information strictly necessary to verify identity and protect the account/passengers. We respond without undue delay and normally within a maximum of one month. If the law allows an extension for a complex request, we will inform you within the initial period of the reason and the estimated duration.
If the request concerns data held by the carrier in its systems, also contact the carrier using the details in the confirmation. Autocare may forward the request, but cannot delete on behalf of the independent controller data that is exclusively under that controller’s control.
11. Minors
The account and request are created by a person aged at least 18. An adult may provide data about a minor passenger only if they have the right to do so and are responsible for its accuracy. We do not intentionally use a minor’s data for a newsletter or advertising profiling.
12. Automated decisions
The carrier, not an Autocare algorithm, decides whether to accept the request. The system may automatically update the booking status and send notifications based on the recorded information. Autocare does not make online payments or refunds. We do not use profiling to make exclusively automated decisions with significant legal effects on a person. If such a feature is introduced, we will inform the person and provide the safeguards required by law.
13. Security
We apply proportionate technical and organisational measures, including access control, authentication, logging, encryption of communications where available, data minimisation, backups and incident monitoring. No transmission is risk-free; please protect OTP codes, passwords and your device.
14. Changes to the policy
We publish the version and effective date. Material changes are communicated by appropriate means and, if they are based on consent or affect accepted conditions, we request a new choice where required by law. The versions accepted for a booking must be retained as historical evidence.
CONNECTBASE SRL · IDNO/tax code 1023600007753
[email protected] · +373 60 003 377