Politica de confidențialitate (GDPR)

1. Who is the controller

The personal data controller is Inter Bus, hereinafter referred to as “Inter Bus”, “we”, or “the store”. For any request regarding personal data, you can reach us through the contact form on the site or via the team's email address.

2. What data we collect

• Identification data: first name, last name, email address, phone number, company name and tax code (for business customers).
• Delivery data: the address where we will deliver the order, city, country, and any additional instructions.
• Order data: products purchased, values, payment method chosen, transaction history.
• Technical data: IP address, device type, operating system, pages visited, session duration — collected strictly for security, aggregated statistics, and site improvements.
• User account: if you create an account, we store the password in encrypted form (hash); we never see it in plain text.

3. Why we collect this data

• To process orders and ship the parts purchased.
• To issue invoices and accounting documents required by law.
• To answer your technical, warranty, and return questions.
• To improve the site and catalog (aggregate analytics, without identifying the individual).
• To send you commercial communications, only if you have given explicit consent (newsletter, offers). You can unsubscribe at any time.

4. Legal basis

We process your data either to perform the sales contract (Art. 6(1)(b) GDPR), based on your freely given consent (Art. 6(1)(a)), or to comply with Inter Bus's legal obligations in accounting and taxation (Art. 6(1)(c)).

5. Who we share data with

• Couriers and shipping operators — for order delivery (name, phone, address).
• Payment processors — when you choose online payment, financial data goes directly to the processor (it does not pass through our servers).
• IT vendors — web hosting, email services, analytics tools — all contractually required to meet the same GDPR standards.
• Public authorities — strictly upon a legally grounded request.

We do not sell your data to third parties and we do not use it outside of the purposes listed here.

6. How long we keep data

Order and invoice data is retained for 10 years, as required by accounting law. Account data remains active as long as you keep your account; you can delete it at any time on request. Technical data (logs) is rotated every 12 months.

7. Your rights

• Right of access — to find out what data we hold about you.
• Right to rectification — to correct inaccurate or incomplete data.
• Right to erasure — to request deletion of your data (except for what we are legally required to retain).
• Right to restriction — to temporarily limit processing.
• Right to portability — to receive your data in a structured, machine-readable format.
• Right to object — particularly against direct marketing.
• Right to lodge a complaint — with the National Center for Personal Data Protection (Republic of Moldova) or the equivalent authority in your country.

8. Cookies

We use strictly necessary cookies (cart session, authentication) and aggregated analytics cookies. We do not use tracking cookies for targeted advertising without your consent. You can delete or block cookies in your browser settings, but some features (cart, login) may stop working.

9. Data security

We use HTTPS across the entire site, encrypt passwords, continuously update our infrastructure, and restrict internal access only to people who need it. That said, no method of internet transmission is 100% secure; we commit to informing you without delay in the event of any incident affecting your data.

10. Changes to this policy

We may update this policy to reflect legislative changes or changes in how we operate. The current version is always displayed on this page, with the date of the last modification in the header.