Privacy Policy

Last updated: 3 November 2026

This policy explains what personal data we process when you visit bnb.md or write to us through the website form, why we process it, how long we keep it and what your rights are.

1. Who we are

The data controller is B+B LOGISTICS S.R.L. (B&B Logistics), IDNO 1013600014268, registered at 7 Zelinski St., office 210, Chișinău, MD-2015, Republic of Moldova. You can write to us at any time at info@bnb.md with any question about your data.

We process data under Law No. 195/2024 on personal data protection of the Republic of Moldova and, for visitors from the European Union, under Regulation (EU) 2016/679 (GDPR).

2. What data we process

• Contact form data: your name, email address, the field you select and the message you send us.
• Technical data: IP address, browser type and time of access, recorded automatically by the hosting server in its security logs.
• Spam-protection data: when you submit the form, we use Cloudflare Turnstile to tell people apart from automated programs; it analyses technical signals about your browser and connection. To limit the number of messages sent from the same address, we keep a cryptographic fingerprint (hash) of the IP address, not the address itself, for at most one hour.

• Cookieless usage statistics: we use Cloudflare Web Analytics, which measures visits in aggregate (pages viewed, country, device type, referring source, load speed) without cookies and without identifying visitors. We also anonymously count a few on-page actions (for example how many times the “Book a demo” button is pressed), without IP addresses or any identifier.

We do not use advertising, we do not track visitors across other websites and we do not build profiles.

3. Why and on what legal basis

• To reply to you and, if you wish, arrange a demo or prepare an offer: steps taken at your request before a possible contract, and our legitimate interest in answering messages we receive.
• To understand how the website is used and improve it, based on aggregate statistics: our legitimate interest.
• To protect the website against spam, abuse and attacks: our legitimate interest in keeping the website secure.
• To meet legal obligations, where the law requires us to keep or disclose certain information.

4. How long we keep data

• Messages received through the form: at most 24 months after our last correspondence with you, then deleted. If you become a client, the data falls under the rules of the contract we sign.
• The IP-address fingerprint (hash) used for rate limiting: at most one hour.
• Anonymous action counts (no personal data): at most 24 months.
• Server technical logs: the period set by the hosting provider, usually a few weeks.

5. Who we share data with

We do not sell or rent your data. Only the providers that help us run the website can access it, strictly for that purpose:

• MivoCloud (Republic of Moldova): website and email hosting.
• Cloudflare, Inc. (USA): Turnstile spam check and cookieless Web Analytics statistics. Cloudflare may process data outside the Republic of Moldova and the European Union, with the safeguards required by law (including the EU–US Data Privacy Framework and standard contractual clauses).

We may disclose data to authorities only where the law requires it.

6. Your rights

You have the right to request access to your data, its rectification or erasure, restriction of processing and data portability, and to object to processing based on our legitimate interest. For any of these, write to info@bnb.md; we reply within 30 days.

If you are unhappy with how we process your data, you can lodge a complaint with the National Center for Personal Data Protection of the Republic of Moldova (datepersonale.md) or, if you live in the European Union, with the data protection authority in your country.

7. Security

The website uses an encrypted connection (HTTPS). Access to the messages we receive is limited to the members of our team who need to reply to you.

8. Children

The website is aimed at companies and professionals. We do not knowingly collect data from people under 16.

9. Changes

We may update this policy when the website or the law changes. The version in force is always the one published on this page.