Last updated: 22 September 2026.
1. Who is responsible for your data
S.R.L. «CONSVITRALIU», IDNO 1003600035657, is the controller of the personal data processed for the purposes described in this policy.
Contact address: Republic of Moldova, Chișinău municipality, Ciocana sector, 5/9 Transnistria Street.
You can contact us using:
Telephone: +373 60 669 797; email: aconsvitraliu@mail.ru;
Telephone: +373 67 738 542; email: lc.consvitraliu@bk.ru;
Telephone: +373 78 308 881; email: gconsvitraliu@mail.ru.
For questions about personal data protection and to exercise your rights, you may use any of the email addresses above or the postal address provided.
We process data in accordance with Law No. 195/2024 on personal data protection and other applicable legal provisions.
2. When this policy applies
This policy explains how we process the data of people who:
- visit our website;
- complete the contact form or configurator;
- request information, advice or a quote;
- communicate with us by telephone or email;
- enter into a contract with us or represent a company we work with.
If a particular activity involves processing that is not described here, we will provide the necessary additional information.
3. What data we process
Depending on your interaction with us, we may process the following categories of data:
Identification and contact details: name, telephone number, email address, locality and, where applicable, the company you represent and the capacity in which you act.
Enquiry or project information: the products and services you are interested in, dimensions, quantities, materials, finishes, type of premises, preferred timeframe, contact preference and information entered in your message or in the configurator.
Files submitted: photographs, sketches, plans or other documents relevant to your enquiry. Depending on what you send, they may contain personal data.
Data needed for our work together: the work or delivery address, contractual, invoicing and payment information, correspondence, and information about the work, warranties or complaints, to the extent necessary.
Technical data: IP address and records relating to access to, operation and security of the website, as well as preferences stored through cookies.
We do not request health information, beliefs, other special categories of data or copies of identity documents through our website forms. Please do not send information that is not needed to assess your enquiry.
If files contain data about other people, limit this to information needed for the project and make sure you have the right to share it with us.
4. Where we obtain data
We mainly receive data directly from you through forms, the configurator, telephone, email or during our work together.
Technical data is processed in connection with access to and use of the website.
If a company or another project participant provides your professional contact details, we use them for communication needed for the project. In this situation, we inform you about the source of the data and its processing under the conditions and within the time limits set out in Article 14 of Law No. 195/2024, usually no later than our first communication with you.
5. Why we use data and on what legal basis
| Purpose of processing | Legal basis |
|---|---|
| Assessing a request for a quote, clarifying requirements and preparing for possible cooperation with you | Taking steps at your request before entering into a contract — Article 6(1)(b) |
| Performing our contract with you, including communication about the work or delivery | Performance of a contract — Article 6(1)(b) |
| Communicating with company representatives and contact persons | Our legitimate interest in managing business relationships and projects — Article 6(1)(f) |
| Responding to general questions unrelated to entering into a contract | Our legitimate interest in responding to enquiries received — Article 6(1)(f) |
| Meeting tax, accounting and other applicable legal obligations | Compliance with a legal obligation — Article 6(1)(c) |
| Protecting the website and preventing misuse | Our legitimate interest in ensuring the operation and security of our services — Article 6(1)(f) |
| Handling complaints and defending our rights | Compliance with applicable legal obligations and, where appropriate, our legitimate interest in establishing, exercising or defending a legal claim — Article 6(1)(c) or (f) |
| Handling requests about personal data | Compliance with legal obligations concerning the exercise of rights — Article 6(1)(c) |
| Keeping evidence of how personal data requests were handled | Our legitimate interest in demonstrating how requests were handled and responding to possible challenges — Article 6(1)(f) |
When relying on legitimate interests, we assess the need for processing and its impact on your rights and freedoms.
Submitting an enquiry does not constitute consent to receive advertising. If we seek consent for a separate processing activity, we will explain its purpose and how you can withdraw consent separately.
6. What information is necessary
Required fields are indicated in the forms. To respond, we need at least one way to contact you: a telephone number or email address.
Providing the information needed for a quote is a practical requirement for assessing your enquiry, rather than a general obligation to provide personal data. Without the necessary information, we may be unable to respond, prepare a quote or provide the requested service.
Additional data may be needed to enter into and perform a contract, including information required by tax and accounting law. We will explain these requirements when applicable.
Company information, files and other optional fields should only be provided if relevant to the enquiry.
7. Who may access the data
Depending on the enquiry and the service provided, data may be accessed by:
- authorised CONSVITRALIU staff involved in receiving enquiries and delivering projects;
- hosting, email and technical support providers;
- service providers directly involved in carrying out, installing or delivering the work, where sharing data is necessary;
- accounting or legal service providers, to the extent necessary for their services;
- authorities and other persons entitled to receive data under the law.
We only share information necessary for the relevant purpose.
When a provider processes data on our behalf, we govern the processing through the contractual terms required by law. Other recipients may act as independent controllers for their own activities and obligations.
8. Processing data in other countries
Personal data processed for the purposes described in this policy is not transferred to recipients outside the Republic of Moldova.
If this changes, we will update this notice before making transfers and apply the conditions set out in Chapter V of Law No. 195/2024. The notice will identify the relevant destinations and the legal mechanism used, including applicable safeguards and how to obtain a copy of them, where relevant.
9. How long we keep data
We only keep data for as long as needed for the purpose for which it was collected or as required by law.
Enquiries and quotes that do not lead to a contract
We keep data for 12 months from the last relevant communication about the enquiry, so we can continue discussions and follow up on the quote provided. We remove information that is no longer needed earlier.
Files attached to enquiries
We keep files while assessing and managing the enquiry and subsequently for the retention period applicable to that enquiry. If a file is irrelevant or no longer needed, we remove it earlier.
Contract-related data
We keep data for the duration of our work together and afterwards to the extent necessary to fulfil warranty obligations, comply with statutory retention periods, and establish, exercise or defend legal claims.
The period is determined by the nature of the document, applicable legal obligations, the warranty period and relevant limitation periods.
Accounting and tax documents
We keep these documents for the mandatory periods applicable to each category under the laws of the Republic of Moldova.
Complaints and disputes
We keep data while the matter is being resolved and afterwards to the extent necessary to implement the outcome, meet a legal obligation or defend a legal claim, taking applicable legal time limits into account.
Data protection requests
We keep the request, response and evidence of its resolution for 3 years after the request is closed, to demonstrate compliance with legal obligations and respond to possible challenges. We only keep information necessary for this purpose.
Additional information used solely to verify identity is deleted after verification unless there is a justified legal reason to keep it.
Technical logs
We keep records necessary for the operation and security of the website for no more than 30 days.
If we identify an incident, relevant records may be kept separately to investigate and resolve it and, where necessary, defend a legal claim.
Backups
Backups containing personal data are kept on a cycle of no more than 90 days, after which they are deleted or overwritten.
Data deleted from active systems disappears from backups when this cycle expires. During this period, backups are used to recover systems when necessary. If we restore a backup, we reapply the necessary deletions.
Cookies
Retention periods are set out in the Cookie Policy.
When the applicable periods expire, data is deleted or irreversibly anonymised. If certain information must be kept for a dispute or legal obligation, we limit its retention and use to the data necessary for that purpose.
10. Cookies and external services
In the website's current configuration, we use cookies to remember cookie preferences and the selected language. Details and retention periods are set out in the Cookie Policy.
Traffic analytics and marketing tools are not enabled in the current configuration. If we introduce such tools, we will update this notice and seek consent where required by law.
The website may contain links to external services such as social networks or maps. Following such a link takes you to the selected service. Data processing on that platform is described in its provider's policy.
11. How we protect data
We apply technical and organisational measures appropriate to the nature of the data and the risks of processing to prevent unauthorised access, loss, alteration or unauthorised disclosure.
We restrict data access to people who need it to carry out their duties and manage security incidents in accordance with our legal obligations.
If a personal data breach requires notification to the supervisory authority or affected individuals, we fulfil these obligations under the conditions and within the time limits required by law.
We do not ask you to submit passwords, full payment card details or other confidential information unrelated to the project through the website forms.
12. Your rights
Under the conditions set out in Law No. 195/2024, you have the following rights:
Right of access
You can find out whether we process your data and request access to it, a copy and information about its processing.
Right to rectification
You can ask us to correct inaccurate data and complete incomplete data.
Right to erasure
You can request erasure when the legal conditions are met. This right does not override legal retention obligations or the need to use data to establish, exercise or defend a legal claim.
Right to restriction of processing
You can request limits on the use of data in situations provided for by law, for example while the accuracy of disputed data is being checked.
Right to portability
For processing carried out by automated means and based on consent or a contract, you can receive the data you provided in a structured, commonly used, machine-readable format. You can also request its transmission to another controller where technically feasible.
Right to object
You can object to processing based on legitimate interests on grounds relating to your particular situation. We will stop processing unless we demonstrate compelling legitimate grounds that override your interests or the processing is needed to establish, exercise or defend a legal claim.
You may object to direct marketing at any time without giving reasons.
Right to withdraw consent
Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
Right concerning solely automated decisions
You have the right not to be subject to a decision based solely on automated processing that produces legal effects or similarly significantly affects you, subject to the exceptions and safeguards provided by law.
Configuring a product and submitting an enquiry through the website does not constitute such a decision. Enquiries are assessed by our team; the configurator does not automatically make a contractual decision about you.
13. How to exercise your rights
You can send your request to any of the following addresses:
You may also write to us at: Republic of Moldova, Chișinău municipality, Ciocana sector, 5/9 Transnistria Street.
Explain what you are requesting and provide the information needed to identify your relationship with us. You do not need to use a special form or cite legal provisions.
If we have reasonable doubts about the requester's identity, we may ask for proportionate additional information needed for verification. We do not automatically request a copy of an identity document for every request.
We respond without undue delay and within one month of receiving the request. If necessary, this period may be extended by a further two months, taking the complexity and number of requests into account. We will inform you of the extension and the reasons for it within the first month.
If we cannot act on the request, we will explain why and inform you of the possibility of lodging a complaint or going to court within the time limit required by law.
Exercising your rights is generally free of charge. For manifestly unfounded or excessive requests, the law allows a reasonable fee or refusal to act under certain conditions. It is our responsibility to demonstrate that a request is manifestly unfounded or excessive.
14. Where to lodge a complaint
If you consider that your data is being processed in breach of the law, you may lodge a complaint with the National Centre for Personal Data Protection of the Republic of Moldova — CNPDCP.
Information about the procedure and current contact details is available at www.datepersonale.md.
You may contact us for clarification, but this is not a condition for exercising your right to lodge a complaint. You may also use the judicial remedies provided by law.
15. Updates to this policy
We update this policy when data processing or legal requirements change. The version in force and its update date are published on this page.
If we intend to use data for a purpose other than the one originally communicated, we will provide the necessary information in advance and establish the applicable legal basis.