Privacy Policy
This Privacy Policy explains how the Mihai Eminescu Theoretical Lyceum, Cimișlia (“the Lyceum”) processes personal data in connection with its official website https://lteminescu-cimislia.md.
The Lyceum respects the right to privacy and takes measures to protect the personal data of students, parents, staff, visitors, and other individuals whose data may be processed in connection with the operation of the website. The website does not use visitors’ data for behavioral advertising, profiling, or commercial analysis.
1. Data Controller
The controller of personal data is the Mihai Eminescu Theoretical Lyceum, with its registered office at 48 Mihai Eminescu, Cimișlia, MD-4101, Republic of Moldova, email info@lteminescu-cimislia.md, phone +373 241 22256 / +373 241 23187 / 067 303 755.
Within the meaning of applicable personal data protection legislation, the Lyceum determines the purposes and means of the data processing carried out in the course of its activities and through the website.
2. What personal data is processed
2.1. Data provided through the contact form
The website provides visitors with a contact form. When a person submits a message through it, the data that person chooses to enter is processed — typically first and last name, email address, phone number, and the content of the message, as well as any other information the person voluntarily chooses to provide.
Submitting this data is voluntary, and messages are routed to the Lyceum’s official email address for the purpose of reviewing and responding to the request. The Lyceum does not request, through the form, information that is not necessary to handle an inquiry, and advises users not to include sensitive data or personal data about other people in their messages unless strictly necessary.
2.2. Data concerning students and the Lyceum’s activities
For the purpose of informing the public about its educational and extracurricular activities, the website may publish photographs from school activities and events, students’ names and information about their achievements, results from competitions and olympiads, student projects and papers, video materials in which students may appear, and information about awards, participations, or other achievements of the school community.
These materials are selected and published by the Lyceum as part of its institutional activity. They are published only where a legal basis for processing exists and in compliance with the principles of lawfulness, necessity, proportionality, and protection of privacy. For minor students, the Lyceum pays particular attention to protecting their privacy and, where applicable law requires it, obtains the prior consent of the parent or legal guardian.
2.3. Technical data
The website does not use tools such as Google Analytics or other visitor-behavior analytics services, and does not profile users for advertising or marketing purposes.
The hosting provider may temporarily retain certain technical data necessary for the operation and security of the infrastructure, such as the IP address, date and time of access, or other technical connection information. This data is used solely to the extent needed to operate, secure, and technically administer the website.
3. Purposes and legal grounds for processing
Data submitted through the contact form — name, email, phone number, and message content — is processed to handle the relevant request, based on the consent given by submitting the message or, where applicable, another applicable legal basis.
Names, photographs, results, projects, and video materials published about the Lyceum’s activities are processed to inform the public about the institution’s activity, based on the Lyceum’s legal duties and, where the nature of the material requires it, based on the consent of the individual or their legal guardian.
Technical data and minimal access logs are processed to operate and secure the website, based on the Lyceum’s legitimate interest in ensuring the proper functioning of the service.
In all cases, the Lyceum processes data only for specified, explicit, and legitimate purposes, and ensures that the data processed is adequate, relevant, and limited to what is necessary for that purpose.
4. Who the data may be disclosed to
Personal data is not sold or rented to third parties for commercial or marketing purposes.
Depending on the nature of the processing, data may be accessed or transmitted, to the extent necessary and under the conditions set by law, to the Lyceum’s authorized staff, to the providers of website hosting and technical administration services, to the email service provider used to receive messages sent through the form, and to public authorities or other competent institutions where disclosure is required or permitted by law. Any other disclosure takes place only where a legal basis for it exists.
All persons and providers with access to the data are required to comply with applicable confidentiality and data security requirements.
5. Cookies
The website does not use cookies for analyzing visitor behavior, personalized advertising, cross-site tracking, or user profiling. It may use, where technically necessary, cookies strictly required for certain website components to function.
If analytics, advertising, or tracking cookies are introduced in the future, this Policy will be updated, users will be informed of the change, and, where required, their consent will be requested.
6. Retention period
Data submitted through the contact form is retained for as long as necessary to review and respond to the request and to address any subsequent clarifications, after which it is deleted, anonymized, or archived in accordance with the institution’s legal obligations and archiving rules.
Materials published about the Lyceum’s activities — photographs, results, projects, announcements — may remain on the website for as long as they retain informational or institutional relevance, and may later be removed, updated, or archived in accordance with applicable rules.
Technical data and access logs are retained for the period necessary to ensure the security and operation of the technical infrastructure, within the limits set by service providers and applicable law.
7. Rights of data subjects
Under applicable law, you have the right to access your data and, where legally provided, to obtain a copy of it; the right to have inaccurate data corrected or incomplete data completed; the right to erasure and the right to restriction of processing, in the cases provided by law; the right to object to certain processing; the right to data portability, where the legal conditions are met; the right to withdraw your consent at any time, where processing is based on consent; the right not to be subject to a decision based solely on automated processing; and the right to lodge a complaint with the supervisory authority.
Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
To exercise these rights, you may write to us at info@lteminescu-cimislia.md. Requests will be reviewed within the timeframe set by applicable law; if verifying the requester’s identity is necessary, the Lyceum may ask for additional information strictly required for that purpose. Exercising these rights is, in principle, free of charge, subject to the exceptions provided by law.
8. Protection of minor students’ data
The Lyceum recognizes the need for heightened protection of children’s and minor students’ personal data. When publishing photographs, video materials, names, results, or other information about students, the Lyceum ensures that the published information is relevant to the institution’s activities and does not disclose excessive or unwarranted information about the student.
Where the consent of a parent or legal guardian is required for a given processing activity, it is obtained before that processing takes place. A parent or legal guardian may contact the Lyceum to request information about a specific publication or, where a legal basis exists, to withdraw consent and request removal of the material.
The Lyceum does not publish on the website data such as the personal identification number (IDNP), ID document series and number, home address, health data, or other sensitive data about students, except where an express legal obligation requires it. Protecting children’s data is a priority, and publishing identifiable images of minors is treated with particular care, in line with CNPDCP’s recommendations on publishing images of minors online.
9. Data security
The Lyceum applies reasonable and proportionate technical and organizational measures to protect personal data against unauthorized access, unauthorized use or disclosure, accidental loss or destruction, unauthorized alteration, and other forms of unlawful processing. Access to data is limited to those who need it to carry out their duties.
The Lyceum makes efforts to maintain the security of the website and the services used to process data, although no method of electronic transmission or storage can guarantee absolute security.
In the event of a security incident affecting personal data, the Lyceum will take the measures required by applicable law, including assessing the incident and, where necessary, notifying the competent authority and informing affected individuals.
10. Transfers of data to other countries
The Lyceum does not intentionally transfer visitors’ personal data to third countries for commercial or marketing purposes. If a technical provider used to operate the website involves a transfer of data to another country, that transfer will take place only under the conditions and safeguards required by applicable law.
11. Supervisory authority
If you believe that the processing of your personal data does not comply with applicable law, you have the right to lodge a complaint with the National Center for Personal Data Protection (CNPDCP): 48 Serghei Lazo St., Chișinău, MD-2004, Republic of Moldova, phone +373 22 820 801, email centru@datepersonale.md, website https://datepersonale.md.
Filing a complaint with the CNPDCP does not exclude your right to pursue other remedies available under the law.
12. Changes to this Privacy Policy
This Policy may be updated periodically, including when applicable legislation, the website’s features, technical providers, or data processing practices change. The current version will be published on this page, together with the date of the last update.
In the event of significant changes affecting data subjects’ rights or the main purposes of processing, the Lyceum will ensure appropriate notice and, where necessary, will seek renewed consent.
13. Applicable law
The processing of personal data is carried out in accordance with the legislation of the Republic of Moldova on the protection of personal data and other applicable normative acts governing the institution’s activity.
As of the publication of this Policy, the relevant legal framework is Law No. 133/2011 on the Protection of Personal Data. Law No. 195/2024, which transposes the principles of the General Data Protection Regulation (GDPR) and was adopted on July 25, 2024, enters into force on August 23, 2026; this Policy will be applied and updated in accordance with the new legal framework from that date.
14. Contact
For questions regarding this Privacy Policy or the processing of personal data, you may contact us:
- Institution
- Mihai Eminescu Theoretical Lyceum
- Phone/Fax
- +373 241 22256
- Phone
- +373 241 23187 / 067 303 755
- Address
- 48 Mihai Eminescu, Cimișlia, MD-4101, Republic of Moldova