Security Policy

1.The purpose of the policy

This Security Policy describes the general principles applied by SBC SMART SRL to protect the website camere.md, of the associated infrastructure and of the information processed through it.

Website security is treated by SBC SMART as a continuous process, adapted to the nature of the information processed, the technologies used and the risks identified.

This Policy refers exclusively to the security of the Website and must be read together with:

• Terms and Conditions of use camere.md;
• Privacy Policy;
• Cookie Policy.

2.Website operator

The camere.md website is managed by:

SBC SMART SRL
IDNO: 1022600029556
Address: 15 Balcani str., Republic of Moldova
Phone: 078 180 808
Email: oferta@camere.md
Website: camere.md

3.Security objectives

SBC SMART aims to protect:

• confidentiality of information;
• data integrity;
• the availability of the Website;
• User accounts and sessions, if any;
• forms and information transmitted through the Website;
• technical infrastructure;
• personal data;
• systems and services connected to the Website.

The measures adopted are established according to the relevant risks and the nature of the services offered through camere.md.

4.Security measures

Depending on the architecture and functionality of the Website, SBC SMART may apply technical and organizational measures such as:

• use of secure communications;
• access control to administrative systems;
• limiting access to information based on need;
• authentication of authorized users;
• updating software components;
• fix identified vulnerabilities;
• protection against unauthorized access;
• monitoring events relevant to security;
• journaling of certain operations;
• making backup copies when they are needed;
• protecting the hosting infrastructure;
• measures to prevent the loss or unauthorized modification of data;
• incident management procedures;
• restricting staff access to data;
• evaluation of relevant external suppliers.

SBC SMART can modify or improve the measures applied without publishing the technical details that could reduce the security of the Website.

5.Protection of personal data

When personal data is processed through camere.md, SBC SMART applies technical and organizational measures appropriate to the identified risks.

These measures aim, as appropriate, to prevent:

• unauthorized access;
• unauthorized disclosure;
• data loss;
• unauthorized modification;
• accidental or illegal destruction;
• using the data for other than legitimate purposes;
• other forms of unauthorized processing.

Detailed information on data processing is provided in Camere.md Privacy Policy.

6.Security of data transmission

SBC SMART aims to use appropriate mechanisms to protect the communication between the User's device and the Website.

The user is advised to check that they are accessing the correct domain:

camere.md

and avoid entering data on copies, clones or domains that try to imitate the Website.

7.Administrative access

Access to the internal and administrative systems of the Website is intended exclusively for authorized persons.

Access rights can be granted according to the person's duties and limited to the information necessary for the performance of his activity.

SBC SMART may withdraw or modify access rights when they are no longer required.

8.Accounts and passwords

If camere.md allows the creation of accounts, the User is responsible for maintaining the confidentiality of his authentication data.

The user is advised to:

• use strong passwords;
• not to disclose the password to other people;
• not reuse compromised passwords;
• disconnect from shared devices;
• to inform SBC SMART if it suspects unauthorized access.

SBC SMART will not ask the User to communicate his password by e-mail or telephone.

9.User responsibility

Website security also depends on how it is used.

User must maintain their own device, browser and operating system in a reasonably secure state.

It is prohibited:

• unauthorized access attempt;
• exploitation of vulnerabilities;
• introducing malware;
• carrying out attacks on the Website;
• unauthorized interception of communications;
• bypassing security mechanisms;
• aggressive or automated scanning without authorization;
• affecting the availability of services.

SBC SMART may restrict the access of a source or a User when it identifies activities that may pose a risk to the security of the Website.

10.External suppliers

For the operation of camere.md, services provided by third parties can be used, such as hosting infrastructure, communications, technical services or other components necessary for the operation of the Website.

SBC SMART aims to use providers that offer appropriate guarantees in relation to the nature of the service provided and the information processed.

The security of external services may also be subject to the policies of the respective providers.

11.Safety copies and continuity

When necessary in relation to the systems and data processed, SBC SMART may use backup and recovery mechanisms designed to reduce the risk of permanent information loss.

Procedures may be adapted periodically depending on the infrastructure used.

12.Security incidents

A security incident may include, among others:

• unauthorized access;
• compromising a system;
• accidental disclosure of information;
• loss or destruction of data;
• computer attacks;
• compromising credentials;
• unauthorized data modification.

If an incident is identified, SBC SMART can take measures such as:

• isolation of the affected system;
• access restriction;
• investigating the case;
• vulnerability fix;
• data recovery, if possible;
• change credentials;
• notification to competent persons or authorities when required by law.

13.Reporting a vulnerability

If a User identifies a possible vulnerability of camere.md, he is encouraged to communicate it to:

Email: oferta@camere.md

The message should contain enough information to identify the problem.

The user must not:

• exploit the vulnerability beyond what is necessary for its identification;
• access other people's data;
• alter or destroy information;
• disrupts the functioning of the Website;
• make the vulnerability public before SBC SMART has a reasonable opportunity to review and fix it.

Reporting a vulnerability does not grant unauthorized access to SBC SMART systems.

14.Limitation of Security Warranties

SBC SMART takes reasonable measures to protect the Website, but no computer system connected to the Internet can be guaranteed to be completely free of vulnerabilities or incidents.

This Policy does not represent a guarantee regarding the absolute impossibility of a computer attack, technical incident or unauthorized access.

This provision does not limit the obligations or liability of SBC SMART in situations where they are established imperatively by law.

15.Policy update

SBC SMART may update this Policy as a result of:

• infrastructure changes;
• the introduction of new functionalities;
• the emergence of new risks;
• amending the legislation;
• changes to internal security procedures.

The current version will be published on camere.md.

16.Contact

For questions or notifications regarding the security of the Website:

SBC SMART SRL
IDNO: 1022600029556
Address: 15 Balcani str., Republic of Moldova
Phone: 078 180 808
Email: oferta@camere.md
Website: camere.md