Moberca and the General Data Protection Regulation (GDPR)

The General Data Protection Regulation (GDPR) is a European Union regulation designed to protect personal data and strengthen individuals’ rights over their information. It applies to any organization that processes the personal data of individuals located in the European Economic Area (EEA), regardless of where the organization operates.

Moberca is committed to processing personal data lawfully, transparently, and securely. This page explains how Moberca aligns its operations and platform architecture with GDPR principles.

• Who we are
• Scope of this notice
• What data do we collect?
• Legal basis for processing
• Why do we process data?
• How long do we retain data?
• Third-party processors and services
• International data transfers
• Your rights under GDPR
• How to access, update, export, or delete your data
• How to contact us about data protection

What is GDPR?

GDPR is a data protection regulation that grants individuals greater control over their personal data and requires organizations to be transparent about how data is collected, used, stored, and shared.

As a digital B2B tender platform, Moberca may process personal data related to user accounts, organizational representatives, and platform activity. Where GDPR applies, we ensure that such processing complies with regulatory requirements.

How Moberca Implements GDPR

Moberca applies data protection by design and by default. Our platform architecture, access controls, and internal processes are structured to minimize data exposure and ensure secure handling of personal information.

Data we collect

• Account Information: Name, surname, email address, phone number, password (hashed), role (buyer/supplier), and organization details provided during registration or profile setup.

• Platform Usage & Log Data: IP address, device and browser information, access times, pages visited, actions taken within the platform, and security logs for auditability and fraud prevention.

• Tender & Offer Data: Tender details, offers, messages, and documents uploaded by users (e.g., specifications, proposals, attachments). This data may include business-sensitive information.

• Cookies & Similar Technologies: Session cookies for authentication, security cookies to prevent abuse, and limited analytics cookies to improve platform performance and reliability.

Why we collect your data

• To provide and operate the Moberca digital tender platform
• To create and manage user and organization accounts, roles, and permissions
• To enable tender creation, offer submissions, evaluations, and audit logging
• To detect, prevent, and respond to fraud, abuse, or unauthorized access
• To provide operational communications and user support when requested
• To maintain, troubleshoot, and improve platform performance and user experience
• To comply with legal obligations and enforce our platform policies

Third-Party services we use

• Hosting & Infrastructure Providers: Used to host and operate the platform securely (compute, storage, databases, backups). Access is restricted and covered by confidentiality and data protection obligations.

• Security & Monitoring Tools: Used for incident detection, performance monitoring, and threat prevention. These tools process limited technical data necessary for security and reliability.

• Email Delivery Services (if enabled): Used to send essential platform notifications (e.g., account verification, security alerts). We do not use third parties for marketing emails without consent.

Your data rights

• Access your personal data and obtain information about processing

• Rectify inaccurate or incomplete personal data

• Request erasure of personal data, where applicable

• Restrict processing under certain conditions

• Object to processing based on legitimate interests, where applicable

• Receive a copy of your data in a portable format, where applicable

• Withdraw consent where processing is based on consent

• Lodge a complaint with a supervisory authority, where applicable

How to manage or delete your data

• You can update certain profile and organization details from your dashboard.
• To request a data export or deletion request (where applicable), please contact us via the Contact page on the platform.
• For security reasons, we may need to verify your identity before fulfilling certain data rights requests.