Terms and Conditions of Use

Last updated: 20 August 2026

1. Purpose of the Policy

This Privacy Policy describes how the personal data of users of the martsfitness.md website (the “Website”) is collected and processed, as well as the rights of data subjects in relation to the processing of such data.

Personal data is processed in accordance with Law No. 195/2024 on personal data protection and the other regulations applicable in the Republic of Moldova.

The Website is the shared website of the Marts Fitness club network; the clubs are managed by separate legal entities.

This Policy applies to personal data collected through the Website, including through contact forms and enquiries concerning Marts Fitness clubs, memberships, services and offers.

2. Personal data controllers

The controller of personal data submitted through the Website is determined by the Marts Fitness club selected by the user:

  • Marts Fitness Ciocana: MARTS GROUP S.R.L.
  • Marts Fitness Botanica: MARTS BARBERSHOP S.R.L.
  • Marts Fitness Toro: SMART FITNESS COMPANY S.R.L.
  • Marts Fitness Buiucani: SMART FITNESS COMPANY S.R.L.
  • Marts Fitness Centru: SMART FITNESS COMPANY S.R.L.
  • Marts Fitness Rîșcani: SMART FITNESS COMPANY S.R.L.

Data submitted through a form for a particular club is processed by the company managing that club and forwarded to its authorised personnel.

Each controller is responsible for processing personal data relating to the club or clubs it manages, in accordance with applicable law.

The controllers’ full identification details — IDNO, registered office, contact address and email address for data-protection requests — are set out in the “Contact details” section of this Policy.

3. Personal data we collect

The forms available on the Website may collect the following data:

  • first and last name;
  • telephone number;
  • selected Marts Fitness club;
  • membership or service of interest, when specified;
  • information voluntarily provided by the user in connection with the submitted enquiry.

Depending on the technical operation of the Website, certain technical data concerning use of the Website may also be processed, including the IP address, device and browser information, and data collected through cookies or similar technologies.

Information about cookies and similar technologies used on the Website is provided separately, where they are used.

Marts Fitness does not request health data, biometric data or other special categories of personal data through the Website’s general contact forms.

4. Purposes of processing personal data

Personal data collected through the Website may be processed for the following purposes:

  1. receiving and responding to enquiries submitted by users through the Website;
  2. contacting the user by the sales department of the selected Marts Fitness club in connection with the submitted enquiry;
  3. providing requested information about clubs, memberships, services, prices and available offers;
  4. taking steps requested by the user prior to the possible conclusion of a membership or service contract;
  5. managing and recording enquiries received through the Website;
  6. ensuring the operation, security and integrity of the Website;
  7. complying with legal obligations applicable to the controller;
  8. sending Marts Fitness marketing communications, offers and promotions, only under the conditions provided by applicable law and on an appropriate legal basis.

Data collected to deal with a specific enquiry will not subsequently be used for other purposes incompatible with the purpose for which it was collected.

5. Legal grounds for processing

Personal data is processed through the Website, as applicable, on the following legal grounds:

  1. taking steps at the data subject’s request before entering into a contract — where the user requests information about a membership, service or club, asks to be contacted, or submits a request with a view to the possible conclusion of a contract;
  2. performance of a contract — where processing is necessary for the performance of an existing contractual relationship with the data subject;
  3. compliance with a legal obligation to which the controller is subject;
  4. the controller’s legitimate interest, in cases and within the limits permitted by law, including to ensure the security and proper operation of the Website, while respecting the data subject’s fundamental rights and freedoms;
  5. the data subject’s consent, where processing is based on consent, including for certain marketing communications where required by applicable law.

Where processing is based on consent, the data subject has the right to withdraw consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.

6. Enquiries submitted through the Website

When a user completes and submits a contact form, the data provided is sent to the selected Marts Fitness club and processed by the controller responsible for that club.

The data is used to deal with the enquiry and to contact the user in connection with it.

Submitting the form does not, by itself, constitute consent to subsequently receive marketing communications.

If the user wishes to receive such communications, their choice is obtained separately where this is required under applicable law.

7. Direct marketing communications

The controller may use personal data for direct-marketing purposes only under the conditions and on the legal grounds provided by applicable law.

Marketing communications may include information about memberships, promotions, special offers, services, events and other news from Marts Fitness clubs.

Where processing for direct-marketing purposes is based on consent, that consent will be requested separately from the submission of an enquiry through the Website.

The data subject has the right to object at any time to the processing of their personal data for direct-marketing purposes. Once this right is exercised, that person’s data will no longer be processed for direct-marketing purposes.

Exercising the right to object does not affect the provision of contracted services or the handling of enquiries addressed to the controller.

8. Recipients of personal data

Personal data collected through the Website is accessible only to persons who need it to perform their duties and deal with the user’s enquiry.

Depending on the selected club, the data may be accessed by:

  • authorised employees of the relevant club’s sales department;
  • authorised personnel of the controller managing the club;
  • providers of IT, hosting, maintenance, CRM or other technical services, where access is necessary to provide those services;
  • public authorities or other persons where disclosure is required or permitted by law.

Data submitted in connection with a particular club is not automatically made available to the sales departments of other Marts Fitness clubs managed by other controllers.

If the user expressly asks to be contacted by another Marts Fitness club, the data necessary to handle that enquiry may be transmitted to the controller managing that club.

Providers processing personal data on the controller’s behalf will process such data only within the limits and under the conditions established by the controller and applicable law.

9. Transfers of data to other countries

To the extent that, for operation of the Website or provision of related services, the controller uses providers whose systems or infrastructure involve transfers of personal data to other countries or international organisations, such transfers will be carried out only in compliance with the conditions provided by Law No. 195/2024.

For transfers to Member States of the European Economic Area, no special authorisations are required under Article 44(2) of Law No. 195/2024.

In other cases, the controller will use the mechanisms and safeguards provided by applicable law, as appropriate.

Additional information about relevant international transfers may be requested from the controller using the contact details stated in this Policy.

10. Data retention period

Personal data is retained only for the period necessary to fulfil the purposes for which it was collected, in compliance with the controller’s applicable legal obligations.

In particular:

  1. enquiries about memberships, services or clubs — data is retained for the period necessary to handle the enquiry and, where applicable, continue the steps initiated by the user with a view to entering into a contract;
  2. if a contract is concluded with the club, data necessary for the contractual relationship is processed and retained in accordance with the contract and the periods laid down by applicable law;
  3. data used for direct marketing is processed for as long as a valid legal basis exists and until the right to object is exercised or consent is withdrawn, where processing is based on consent;
  4. technical data concerning the operation and security of the Website is retained only for the period justified by the purpose for which it was collected.

When the applicable periods expire, data is deleted, anonymised or, where retention is required by law, archived under the conditions set out in applicable law.

11. Health data and other special categories of data

Through the general forms available on the Website, the controllers do not request data concerning health status, diagnoses, medical conditions, disabilities, injuries, biometric data or other special categories of personal data.

Users are asked not to submit such information through the Website’s general forms unless it is expressly requested.

Any processing of such data in the provision of fitness services is carried out separately, subject to the conditions provided by applicable law.

12. Children’s data

Marts Fitness services may be offered to minors subject to the conditions established by the club and applicable law.

Where an enquiry concerning a minor is submitted through the Website, personal data will be processed only to the extent necessary to handle the enquiry and in compliance with legal requirements applicable to the protection of minors’ data.

The Website is not intended to intentionally collect, through its general forms, additional volumes of personal data about minors.

Where consent from a legal representative is required for particular processing, the controller will obtain that consent under the conditions provided by law.

13. Data security

The controllers apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, alteration, disclosure or improper use.

Access to data collected through the Website is limited to authorised personnel and, where applicable, authorised providers requiring access to provide the contracted services.

Security measures are established and updated taking into account the nature of the processed data, processing purposes, associated risks and technical means used.

14. Rights of the data subject

Subject to the conditions of Law No. 195/2024 on personal data protection, the data subject has, where applicable, the following rights:

  1. the right to information — the right to receive clear and transparent information on how their personal data is processed;
  2. the right of access — the right to obtain confirmation of whether the controller processes personal data concerning them and, if so, access to that data and information required by law;
  3. the right to rectification — the right to request correction of inaccurate personal data and completion of incomplete data;
  4. the right to erasure — the right to request deletion of personal data in the cases and under the conditions provided by law;
  5. the right to restriction of processing — the right to request restriction of data processing in the cases provided by law;
  6. the right to data portability — in the cases provided by law, the right to receive personal data provided to the controller in a structured, commonly used and machine-readable format and to request its transmission to another controller where the legal conditions are met;
  7. the right to object — the right to object, under the conditions provided by law, to the processing of personal data concerning them. Where data is processed for direct-marketing purposes, the data subject has the right to object at any time. Once this right is exercised, the data will no longer be processed for direct-marketing purposes;
  8. the right to withdraw consent — where processing is based on consent, consent may be withdrawn at any time without affecting the lawfulness of processing carried out before its withdrawal;
  9. the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning the data subject or similarly significantly affects them, except in the cases provided by law.

The exercise of these rights is subject to the conditions, limits and exceptions provided by applicable law.

15. Exercising data-subject rights

To exercise rights provided by personal-data protection legislation, the data subject may send a request to the controller managing the Marts Fitness club in relation to which their data is processed.

The request may be sent using the contact details in the “Contact details” section of this Policy.

The request should include information needed to identify the applicant and the processing to which it relates, including, where applicable:

  • first and last name;
  • contact details;
  • the Marts Fitness club to which the request relates;
  • the right the person wishes to exercise;
  • any other information needed to identify and handle the request.

If there are reasonable doubts about the identity of the person making the request, the controller may request additional information necessary to confirm that identity.

The controller will respond without undue delay and, in any event, within no more than one month of receiving the request, under the conditions provided by law.

Taking into account the complexity and number of requests, this period may, where necessary, be extended by no more than two months. The data subject will be informed of any such extension and the reasons for the delay within one month of receiving the request.

If the controller does not act on the data subject’s request, it will inform the person, within the conditions and timeframe provided by law, of the reasons for not taking action and of the possibility of lodging a complaint with the competent supervisory authority and seeking a judicial remedy.

Exercise of data-subject rights is free of charge, except where the law permits a reasonable fee to be charged or permits refusal to act on a manifestly unfounded or excessive request.

16. Right to lodge a complaint

If the data subject considers that processing of their personal data infringes Law No. 195/2024 on personal data protection, they have the right to lodge a complaint with the National Centre for Personal Data Protection (CNPDCP), as well as the right to seek a judicial remedy, under the conditions provided by law.

CNPDCP contact details:

National Centre for Personal Data Protection
Chișinău municipality, 48 Serghei Lazo Street, MD-2004
Email: centru@datepersonale.md
Telephone: (022) 820-801

17. Cookies and similar technologies

The Website may use cookies and other similar technologies necessary for its operation, security and administration and, where applicable, to remember user preferences, analyse use of the Website, and carry out analytics or marketing activities.

Cookies and similar technologies may enable processing of information such as IP address, device and browser type, information on interaction with the Website, pages visited and other online identifiers.

Cookies and similar technologies are used in accordance with applicable law, depending on their purpose and characteristics.

Cookies strictly necessary for the operation and security of the Website may be used to the extent necessary to provide the service requested by the user.

Where user consent is required for the use of certain cookies or similar technologies, they will be activated only after the relevant choice has been made, and the user will be able to change or withdraw that choice under the conditions provided by law.

Detailed information on categories of cookies and similar technologies actually used on the Website, their purposes, providers and period of use will, where applicable, be presented through the cookie-management mechanism and/or a Cookie Policy available on the Website.

18. Changes to the Privacy Policy

The controllers reserve the right to update this Privacy Policy where necessary to reflect legislative changes, changes to the operation of the Website, services offered or personal-data processing activities.

The updated version of the Policy will be published on the Website with the date of the latest update.

In the event of significant changes to the way personal data is processed, the controllers will inform data subjects by appropriate means, under the conditions provided by applicable law.

19. Controllers’ contact details

For questions about this Privacy Policy, the processing of personal data or exercising rights provided by law, the data subject may contact the controller managing the Marts Fitness club to which the enquiry relates.

MARTS GROUP S.R.L.

Controller for: Marts Fitness Ciocana
IDNO: 1025600068657
Registered office: MD-2068, Republic of Moldova, Chișinău municipality, Rîșcani district, 11/5 Moscova Boulevard.

MARTS BARBERSHOP S.R.L.

Controller for: Marts Fitness Botanica
IDNO: 1023600012759
Registered office: MD-2001, Republic of Moldova, Chișinău municipality, Centru district, 3 Ștefan cel Mare și Sfânt Boulevard.

SMART FITNESS COMPANY S.R.L.

Controller for: Marts Fitness Toro, Buiucani, Centru and Rîșcani
IDNO: 1022600034378
Registered office / legal address: MD-2068, Republic of Moldova, Chișinău municipality, Rîșcani district, 11/5 Moscova Boulevard.

If the data subject cannot identify the competent controller, they may state in the request the Marts Fitness club to which it relates.

20. Final provisions

This Privacy Policy applies to the processing of personal data carried out through the martsfitness.md website.

The Policy must be read together with the Website Terms and Conditions of Use and, where applicable, the specific information provided to the data subject at the time data is collected.

This Policy does not replace notices or specific documents applicable to other processing activities carried out within Marts Fitness clubs where such notices or documents are required by applicable law.

Priority version notice: In the event of any inconsistency between versions, the Romanian-language version shall prevail.