This is an English translation provided for convenience. In the event of any discrepancy, the Romanian version of this document prevails.
Who we are
MyMoldova.online is an online guide to the Republic of Moldova. The controller of personal data is [COMPANY NAME] SRL, unique registration code (CUI) [CUI], registered with the Trade Register under no. [J../..../....], with its registered office at [REGISTERED OFFICE ADDRESS].
For any matter relating to your data — including exercising the rights set out below — you can write to us at contact@mymoldova.online, through the contact page or by telephone on 0741 222 535.
What data we collect
We collect only what is strictly necessary, in three situations:
- When you write to us through the contact form — your name, email address, the message and, optionally, your telephone number.
- When you submit a review — the display name, the rating and the text of the review. We also retain an irreversibly encrypted form of the IP address (a hash), solely in order to prevent spam. The IP address cannot be reconstructed from that hash.
- When you browse the site — aggregated technical data (browser type, device, pages visited, source of the visit), by means of cookies and similar technologies. This is collected only if you accept via the cookie banner.
We do not ask for and do not store payment data. We do not collect special categories of data (health, political opinions, religion, etc.).
Why we use it and on what legal basis
- To respond to your enquiries — legal basis: pre-contractual steps or consent (Article 6(1)(b) and (a) GDPR).
- To publish reviews — legal basis: your consent (Article 6(1)(a)).
- To understand how the site is used and to improve it — legal basis: the consent given through the cookie banner.
- To display relevant advertising and offers — legal basis: the consent given through the cookie banner.
- To prevent abuse (hashed IP on reviews) — legal basis: our legitimate interest in keeping the content clean (Article 6(1)(f)).
Who we share it with
We do not sell your data. We share it only with the service providers we need in order for the site to work:
- Supabase — the database in which messages and reviews are stored (servers in the European Union).
- Hostinger — hosting of the site.
- Google (Analytics 4 and AdSense) — traffic measurement and the display of advertising. Activated only with your consent.
- Meta (Facebook Pixel) — measuring the effectiveness of our promotion. Activated only with your consent.
- Stay22 and Travelpayouts — the partners through which we display accommodation and travel offers. When you click such a link, you are redirected to the partner's platform, which applies its own privacy policy.
Some of these providers may transfer data outside the European Economic Area. In such cases, the transfer takes place on the basis of the standard contractual clauses approved by the European Commission or of an adequacy decision.
How long we keep it
- Messages from the contact form — up to 3 years from the last interaction.
- Published reviews — for as long as they remain published on the site, or until you request their erasure.
- Data from cookies — in accordance with the durations set out in the cookie policy.
What rights you have
Under the GDPR, you have the right:
- to find out what data we hold about you and to receive a copy;
- to request the rectification of inaccurate data;
- to request its erasure (the „right to be forgotten”);
- to request the restriction of processing;
- to object to processing based on legitimate interest;
- to withdraw your consent at any time — including from the cookies page, just as easily as you gave it;
- to receive your data in a portable format;
- to lodge a complaint with the supervisory authority. In Romania this is the ANSPDCP (Romania's National Supervisory Authority for Personal Data Processing); in the Republic of Moldova, the National Centre for Personal Data Protection.
To exercise any of these rights, write to us at contact@mymoldova.online or through the contact page. We respond within 30 days at the latest.
Security
The site runs entirely over HTTPS. Access to the database is restricted by row-level security policies, and the IP addresses used for spam prevention are stored exclusively in hashed form, never in the clear.
Children
The site is not directed at children under 16 and we do not knowingly collect data from them. If you become aware that a child has sent us personal data, write to us and we will erase it.
Changes
We may update this policy. The version in force is always the one published here, with the date of the last update shown at the top.
