Privacy policy

01Who is responsible

The controller is NOVA DARS S.R.L., IDNO 1026600017227, registered at 87 Columna St., Chisinau, Republic of Moldova. For any question about your data, write to [email protected].

02What we collect

When you send the request form (your name and email address are required, because without them we cannot reply; the other fields are optional):

• your name, company, email address and phone number, where you give them;
• the catalogue listing or service you chose and your message, including any machine details you give;
• the page you sent the request from, the page that brought you to the site, and the campaign tags in the address (utm_source, utm_medium, utm_campaign);
• your IP address and browser details, which arrive automatically with the request.

03Why we use it, and on what basis

We send no marketing, sell no data and make no automated decisions about you.

• To answer your request and prepare an offer: steps taken at your request before a contract (Article 6(1)(b) of Moldova's Law 195/2024 and of the GDPR).
• To protect the form from automated messages and abuse (IP address, browser details, the spam check): our legitimate interest in receiving only real requests (Article 6(1)(f)).
• To learn which pages and campaigns bring requests (the referring page, the campaign tags): our legitimate interest in improving the site (Article 6(1)(f)).

04Cookies and statistics

This site sets no cookies. Campaign tags are kept in your browser for the visit only (sessionStorage), so they can go with a request, and are cleared when you close the tab.

Visit statistics come from Cloudflare Web Analytics, which uses no cookies and builds no visitor profiles.

The form is protected by Cloudflare Turnstile, which looks at technical signals from your browser to tell a person from a bot. It loads only once you start filling in the form.

05Who receives it

We use these providers, who process the data only on our behalf:

• Cloudflare, Inc. (USA): hosting, the database that stores requests (in Western Europe), the spam check and statistics;
• Plus Five Five, Inc. (Resend, USA): sending the notification email and your confirmation;
• Google LLC (USA): the mailbox where requests arrive.

06Transfers outside Moldova and the EU

These providers are based in the USA, so data may reach it. Transfers rely on the standard contractual clauses adopted by the European Commission, included in their data processing agreements (Article 46(2)(c) of Law 195/2024 and of the GDPR). You can ask us for a copy of these clauses at [email protected].

07How long we keep it

If a request leads to a contract, the data the contract needs is kept as long as accounting and tax law require.

• Your request (contact details, the listing chosen, your message): 3 years from our last contact with you.
• IP address and browser details: 12 months from when the request was sent.

08Your rights

You can ask at any time for:

• access to the data we hold about you;
• correction of wrong data;
• erasure of your data;
• restriction of processing;
• your data in a format you can pass on (portability);
• an end to processing based on our legitimate interest (objection);
• not to be subject to an automated decision (we make none).

09How to use your rights

Write to [email protected]. We reply within one month; for complex requests this can be extended by two more months, and if so we tell you why within the first month. We may also ask you to confirm that the email address is yours.

If you are not satisfied with our answer, you can complain to the National Center for Personal Data Protection of the Republic of Moldova, 48 Serghei Lazo St., MD-2004 Chisinau, [email protected], datepersonale.md. In the EU you can also complain to the data protection authority of the country where you live or work.

10Changes

When we change this policy, we publish the new version here with the date it applies from.