privacy policy

Our company conducts its activities in compliance with the applicable legislation of the Republic of Moldova on personal data protection, including the provisions of Law No. 133 of 8 July 2011 on Personal Data Protection and, as of 23 August 2026, the provisions of Law No. 195 of 25 July 2024 on Personal Data Protection, which replaces the previous legislative framework and fully transposes into national legislation the standards established by the European Union’s General Data Protection Regulation (GDPR).

The company implements appropriate technical and organizational measures to ensure the lawfulness of data processing and to safeguard the confidentiality, integrity and security of personal data collected and processed in the course of its research activities. [imas] commits to all efforts necessary to define and implement procedures with the purpose of protecting the personal data we collect.

PERSONAL INFORMATION

Which are the personal data we can collect and how do we collect it?

The personal data that [imas] collects and processes are, mainly, the following: identification data (first name, last name), e-mail address, phone number, and these are collected directly from you via the questionnaire you answered by phone, face-to-face, online or via e-mail.

What do we process your personal data for?

We collect your information for specific and legitimate reasons, including but not limited to the following:

• In order to sign or execute a contract between you and us (for example registering for one of our panels);
• Processing transactions when taking part in a research involves paying the respondent;
• In order to verify that the questionnaires were properly carried out;
• In order to answer your questions and queries;
• In order to diagnose or remedy technical issues;
• In order to protect ourselves from cybernetic attacks;
• In order to create and/or upkeep accounts;
• In order to comply with legislation.

What are the legal bases for data processing?

• Data processing is required to sign or execute a contract between you and us, such as executing a Contract for registering to one of the panels we manage
• Data processing is necessary in order to fulfill a legal commitment, such as keeping accounting documents for 3 years (in the case of payments made / participation incentives given for taking part in our research projects)
• Data processing is necessary for a legitimate interest to carry out an opinion poll / market research, either our own or made by the client interested in that research.

Security measures designed to protect your personal data

When working with personal data, nothing is more important that how you understand to safeguard the security of this data. We tried to do everything currently technically possible to maintain an extremely high standard of security.

We have built a set of physical, technical and administrative security measures to help us protect your data as well as possible.

We have structured access to your personal data based on rights hierarchies, so that [imas] employees can only access your data when they are entitled to do so. Furthermore, we train our employees on the importance of confidentiality and of maintaining confidentiality and security for your data. We commit to taking proper disciplinary measures to ensure that our employees respect the responsibility to protect personal data.

For how long do we process personal data?

We keep the personal data we collect for 3-6 months, in the case of information necessary to verify how the questionnaires were applied, and for the legally provided duration in the case of data necessary to make payments / give incentives for the research projects we carry out.

How can you manage the consents you’ve given?

You can write us anytime in order to change your preferences, by email at elena.petruti@imas.md. 

PERSONAL DATA RIGHTS

The current legislation provides more rights to the persons who have their personal data processed. For the duration that the personal data is being kept by [imas], you, as a data subject have the following rights:

The right of access means that you have the right to obtain a confirmation from us that we process or not the personal data concerning you and, if so, access to that data and information on how the data is processed.

The right to data portability refers to the right to receive personal data in a structured, commonly used format that can be read automatically, and the right to send this data directly to another controller, if technically feasible.

The right to opposition concerns the right to object to the processing of personal data where processing is necessary for the performance of a task that serves a public interest or when it concerns a legitimate interest of the operator. When the processing of personal data is intended for direct marketing, you have the right to object to processing at any time.

The right to rectification refers to the correction, without undue delay, of inaccurate personal data. The correction will be communicated to each recipient to whom the data were transmitted, unless this proves impossible or involves disproportionate efforts.

The right to delete data (‘the right to be forgotten’) means that you have the right to request to deletion of your personal data without undue delay, if one of the following reasons is applied: they no longer serve the purposes for which they were collected or processed; you withdraw your consent and there is no other legal basis for processing; you oppose the processing and there are no legitimate reasons to prevail; personal data have been illegally processed; personal data must be deleted in compliance with a legal obligation; personal data were collected in connection with the provision of services of the information society.

The right to restriction of the processing may be exercised if the data subject challenges the accuracy of the data, for a period that allows us to verify the accuracy of the data; the processing is illegal, and the person opposes the deletion of personal data, yet instead he is requesting restriction; if [imas] no longer needs personal data for the purpose of the processing, but the person asks for it in order to establish, exercise or defend a right in court; if the data subject has objected to the processing for the time frame during which it is verified, whether the legitimate rights of the operator prevail over those of that person.

All these rights may be exercised by a written, signed and dated request, sent to our headquarters or at the email address elena.petruti@imas.md. 

Do we communicate personal data to other recipients?

Occasionally, when executing a contract between you and us involves the intervention of third parties (such as, but not limited to, a courier company involved in sending you gift vouchers, when applicable), we have to transfer your personal information to those third parties. Whenever we do this, however, we will make sure we only transfer the information strictly necessary for executing the contractual obligations.

Restrictions on disclosing information to third parties

We may disclose your personal data (as described above) in the following cases:

• You expressly request this of us, or expressly authorize the disclosure;
• The information is supplied in order to comply with the law (for example, in order to comply with a search warrant, a summons or a court order), to impose an agreement we have with you or in order to protect our own rights, property or safety or the rights, property or safety of our employees or other people;
• The information is supplied to our agents, suppliers or service providers that carry out tasks in our name;
• In cases of emergencies or force majeure, or
• In case the disclosure is necessary in order to solve litigation, demands or for people who have a legal or beneficial interest;

Applicable law

This set of terms and conditions is governed by the legislation of Republic of Moldova. Any claim regarding the clauses of this document, as well as regarding the consequences it involves, will be solved before the competent courts in Chisinau.

Questions and queries

If you have questions or queries regarding the processing of your data, or you wish to act upon your legal rights regarding the data we hold, or if you have any concerns regarding the way we treat any confidentiality issue, you may write us an email at elena.petruti@imas.md.

Restrictions applied in processing personal data

[imas] does NOT sell and does NOT rent out personal data to any third party.

The right to choose how personal data is being used

We understand and respect the right to protect the identity of each person and we appreciate the trust users of our services grant us by offering us personal information. [imas] offers mechanisms through which users can easily act on their rights over their personal data. Thus:

– Respondents can verify the data they sent to [imas] by sending an explicit request to this end, at: elena.petruti@imas.md. Our security measures require that the request be accompanied by proof of the applicant’s identity, so that we make sure the request is coming from the person entitled.

– Respondents can contact us at any time at the same address to modify, correct or delete the personal data associated to their answers in the questionnaires they filled in.

– Registered members can unsubscribe or give up their membership by a simple click on the unsubscribe / panel deletion button present in all our communications, and in the Panelist accounts. After unsubscribing, the user will not receive any further marketing communication from us.

– The persons in our database may request a copy of the data we hold, in an easily readable format. To do so, we need to receive an explicit request at elena.petruti@imas.md.