Last updated: 6 September 2026
1. WHO IS RESPONSIBLE FOR YOUR DATA
The data controller is MOGUL INC. SRL, registered at ⟨REGISTERED ADDRESS, CHIȘINĂU⟩, IDNO 1022600019038, which operates the siteai.md website.
For any question about your data, write to contact@siteai.md or call +373 60 686 611.
⟨If the company has appointed a data protection officer, add their name and contact details here. The law requires an appointment in certain situations — check with a lawyer whether it applies to you.⟩
2. WHAT DATA WE COLLECT AND WHY
We only collect the data you give us yourself, through the contact form. We don't buy contact lists and we don't gather information about you from other sources.
| DATA | WHY | LEGAL BASIS | RETENTION |
|---|---|---|---|
| Name | So we know who we're replying to | Your consent | 24 months from last contact |
| Email address | So we can send you the audit and our reply | Your consent | 24 months from last contact |
| Company and website address | So we can analyse the site you're asking about | Your consent | 24 months from last contact |
| The message you write | So we understand what you need | Your consent | 24 months from last contact |
| Your cookie choice | So we don't ask on every page | Legitimate interest — the duty to demonstrate consent | 12 months, then we ask again |
3. WHAT WE DON'T DO
- We don't sell your data and we don't rent it to anyone.
- We don't build behavioural profiles of our own and we don't link your visits to the name you give in the form.
- We don't use form data to send you newsletters or advertising unless you explicitly and separately ask for it.
- We make no automated decisions about you and we do no profiling.
4. COOKIES AND LOCAL STORAGE
We use Google Tag Manager to manage our measurement tools. It starts with every consent set to “denied” (Google Consent Mode v2) and fires no analytics or advertising tag until you press accept in the banner. The container itself writes no cookies.
If you accept the “Analytics” category, the cookies in the table below may be written. If you decline, none are written, and the only thing stored remains your choice.
You can change or withdraw your choice at any time through the “Cookie settings” link in the footer of every page. Withdrawal takes effect immediately, not from your next visit, and is exactly as easy as giving consent.
| WHAT IS STORED | WHO SETS IT | PURPOSE | DURATION |
|---|---|---|---|
| siteai-consimtamant | Us, in your browser's local storage | Remembers what you chose in the banner. Stored without consent, because without it we could not demonstrate your choice. | 12 months |
| _ga, _ga_* | Google Analytics, only with your consent | Distinguishes unique visitors and remembers the session | up to 24 months |
| ⟨OTHER COOKIES⟩ | The tags you add in GTM | ⟨Complete this as you enable new tags in the container — the table must reflect what actually runs.⟩ | ⟨—⟩ |
5. FONTS AND EXTERNAL CONTENT
The fonts used on the site are downloaded at build time and served from our own server. Your browser does not contact Google's servers when you open a page, so your IP address never reaches them through fonts.
We load no maps, embedded videos or social media buttons.
We do, however, load Google Tag Manager from Google's servers. This means that when you open a page your IP address reaches Google before you have chosen anything in the banner — an unavoidable technical consequence of using this tool. What does not happen without your consent is the firing of measurement tags and the writing of cookies.
6. WHO ELSE SEES YOUR DATA
To operate, we use a few suppliers who process data on our behalf. They may use the data solely to provide us with their service, not for their own purposes.
| SUPPLIER | WHAT IT DOES | WHAT DATA IT SEES | WHERE IT PROCESSES |
|---|---|---|---|
| Web3Forms | Delivers the form message to our email | Everything you fill in on the form | Outside the Republic of Moldova |
| Google (Tag Manager, Analytics) | Manages measurement tags and counts visits | IP address, pages visited, device and browser type | The United States and other countries where Google operates |
| ⟨HOSTING PROVIDER⟩ | Hosts the site and records server logs | ⟨IP address, time of access, page requested⟩ | ⟨TO COMPLETE⟩ |
| ⟨EMAIL PROVIDER⟩ | Delivers and stores correspondence | The content of messages | ⟨TO COMPLETE⟩ |
7. TRANSFERS OUTSIDE THE REPUBLIC OF MOLDOVA
Some of the suppliers above process data on servers outside the Republic of Moldova. Law no. 195/2024 permits such transfers only where the destination country ensures an adequate level of protection or where appropriate contractual safeguards are in place.
Google processes data in the United States. Transfers of data to Google are among the most frequently challenged points in European data protection practice, and the basis for them must be established explicitly.
⟨To complete with a lawyer: the specific basis for each transfer (adequacy decision, standard contractual clauses) and the exact destination country for each supplier in the table above.⟩
8. HOW LONG WE KEEP DATA
We keep form data for 24 months from our last exchange of messages with you, so we have the context if you come back. After that we delete it.
If you become a client, we keep contract-related documents for as long as Moldovan accounting and tax legislation requires.
You can ask for earlier deletion at any time, and we will do it unless we have a legal obligation to retain that data.
9. YOUR RIGHTS
The law gives you the following rights over your data. You can exercise them free of charge, and we reply within 30 days at most.
- Right of access — to find out what data we hold about you and what we do with it.
- Right to rectification — to have incorrect or incomplete data corrected.
- Right to erasure (“the right to be forgotten”) — to have your data deleted.
- Right to restriction — to have processing paused while we check a complaint.
- Right to portability — to receive your data in a format you can take to another provider.
- Right to object — to object to processing, including direct marketing.
- Right to withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.
10. HOW TO EXERCISE YOUR RIGHTS
Write to us at contact@siteai.md and tell us what you want. We reply within 30 days at most.
So that we don't hand your data to someone impersonating you, we may ask for additional confirmation of your identity. We ask only for the minimum needed.
11. IF YOU'RE NOT SATISFIED
If we say no, or you believe we have breached your rights, you can contact the supervisory authority:
National Centre for Personal Data Protection (CNPDCP) MD-2004, Chișinău, str. Serghei Lazo 48 Phone: (022) 820 801 Email: centru@datepersonale.md www.datepersonale.md
You also have the right to go directly to court.
12. SECURITY
The site is served exclusively over an encrypted connection (HTTPS). Access to incoming messages is limited to the team members who need it in order to reply to you.
If a security incident nonetheless occurs that puts your rights at risk, we notify the CNPDCP within 72 hours and inform you as well where the law requires it.
13. CHANGES TO THIS POLICY
When we change something significant — a new purpose, a new supplier — we update the date at the top and ask for your cookie consent again where relevant. The version in force is always the one published here.