Last updated: 24 September 2026
This policy explains how S.R.L. CONSVITRALIU collects, uses and protects personal data submitted through the website, the forms available on it and our communications with you.
1. Who is responsible for your data
S.R.L. «CONSVITRALIU», IDNO 1003600035657, is the controller of the personal data processed for the purposes described in this policy.
Address: Republic of Moldova, Chișinău municipality, Ciocana sector, 5/9 Transnistria Street.
You can contact us using:
Telephone: +373 60 669 797
Email: aconsvitraliu@mail.ru
Telephone: +373 67 738 542
Email: lc.consvitraliu@bk.ru
Telephone: +373 78 308 881
Email: gconsvitraliu@mail.ru
For questions about personal data protection or to exercise your rights, you may use any of the email addresses above or the postal address provided.
We process data in accordance with Law No. 195/2024 on personal data protection and other applicable legal provisions.
2. When this policy applies
This policy applies to individuals who:
visit our website;
complete the contact or quotation request form;
request information, advice or a quotation;
send photographs, sketches, plans or other documents;
communicate with us by telephone or email;
enter into a contract with us;
represent a company or another organisation with which we work.
If a particular activity involves processing not described in this policy, we will provide the necessary additional information.
3. What data we process
Depending on how you interact with us, we may process the following categories of data:
Identity and contact details
Name, telephone number, email address, location and, where relevant, the company you represent and the capacity in which you act.
Information about the enquiry or project
Products and services of interest, dimensions, quantities, materials, finishes, type of space, desired timeframe, contact preference and information entered in the message.
Submitted files
Photographs, sketches, plans or other documents relevant to the enquiry. Depending on the content submitted, these may contain personal data.
Data required for our business relationship
Worksite or delivery address, contractual, billing and payment information, correspondence and information relating to the performance of the work, warranties or complaints, to the extent necessary.
Technical data
IP address, information about website access, operation and security, and preferences saved through cookies.
Our website forms do not request health information, beliefs, other special categories of data or copies of identity documents. Please do not send information that is not needed to assess your enquiry.
If submitted files contain data about other people, please limit it to what is necessary for the project and ensure that you have the right to share it with us.
4. Where we obtain your data from
We mainly receive data directly from you:
through the website forms;
by telephone;
by email;
through submitted documents or files;
during our work together.
Technical data is generated or processed in connection with accessing and using the website.
If a company or another project participant provides your business contact details, we use them for project-related communications. In that case, we provide processing information under the conditions and within the time limits required by applicable law.
5. Why we use data and on what legal basis
| Purpose of processing | Legal basis |
|---|---|
| Reviewing a quotation request, clarifying requirements and preparing for a potential contractual relationship | Steps requested before entering into a contract — Article 6(1)(b) |
| Performing the contract, including communications about the work or delivery | Performance of a contract — Article 6(1)(b) |
| Communicating with company representatives and contact persons | Legitimate interest in managing business relationships and projects — Article 6(1)(f) |
| Responding to general questions | Legitimate interest in responding to enquiries — Article 6(1)(f) |
| Meeting tax, accounting and other statutory obligations | Legal obligation — Article 6(1)(c) |
| Protecting the website and preventing misuse | Legitimate interest in service security and operation — Article 6(1)(f) |
| Handling complaints and defending our rights | Legal obligation and/or legitimate interest — Article 6(1)(c) or (f) |
| Handling data protection requests | Legal obligation — Article 6(1)(c) |
| Keeping evidence of how personal data requests were handled | Legitimate interest in demonstrating compliance with obligations — Article 6(1)(f) |
When relying on legitimate interests, we assess the necessity of processing and its impact on the rights and freedoms of the individuals concerned.
Submitting an enquiry or quotation request does not constitute consent to receive advertising communications.
If we request consent for a separate processing activity, we will explain its purpose, how the data will be used and how to withdraw consent separately.
6. What information is necessary
Required fields are indicated in the forms.
To respond to an enquiry, we need at least one contact method: a telephone number or email address.
Providing the information needed for a quotation is a practical requirement for assessing the enquiry. Without sufficient information, we may be unable to respond, prepare a quotation or provide the requested service.
Entering into and performing a contract may require additional information, including data required by tax and accounting law.
Files and other optional information should be submitted only if relevant to the enquiry.
7. Who may access the data
Depending on the enquiry and the service provided, data may be accessed by:
authorised CONSVITRALIU personnel involved in handling enquiries and carrying out projects;
hosting, email and technical support providers;
providers directly involved in production, installation or delivery, where sharing the data is necessary;
accounting or legal service providers, to the extent necessary for their services;
authorities and other persons entitled to receive data under the law.
We only share information necessary for the relevant purpose.
Where a provider processes data on our behalf, the processing is managed as required by applicable law. Certain recipients may act as independent controllers for their own activities and obligations.
8. Data transfers to other countries
CONSVITRALIU does not ordinarily transfer personal data directly to recipients in other countries for purposes separate from managing enquiries and projects.
However, the use of technical service providers, including the mail.ru and bk.ru email services, may involve processing or storing certain data on infrastructure outside the Republic of Moldova. This may include contact details, correspondence and files sent by email.
Where such processing constitutes an international data transfer, it is carried out in accordance with the requirements of applicable personal data protection legislation.
If the service providers used or the way data is processed outside the Republic of Moldova changes, we will update this policy.
9. How long we keep data
We retain data only for as long as needed for its collection purpose or as required or justified by law.
Enquiries and quotations that do not lead to a contract
Data is retained for 12 months from the last relevant communication to continue discussions and follow up on the quotation. Information no longer needed may be deleted earlier.
Files attached to enquiries
Photographs, sketches, plans and other files are retained while the enquiry is reviewed and managed, and subsequently for the period applicable to that enquiry. Irrelevant or no longer needed files are deleted earlier.
Contract-related data
Contract-related data is retained during our work together and afterwards to the extent necessary to meet warranty obligations, statutory retention periods and to establish, exercise or defend legal rights.
Accounting and tax documents
They are retained for the mandatory periods applicable under the law of the Republic of Moldova.
Complaints and disputes
Data is retained while the matter is resolved and afterwards for as long as needed to give effect to the outcome, meet a legal obligation or defend a right.
Data protection requests
The request, response and evidence of resolution are retained for three years after the request is closed to demonstrate compliance with legal obligations and handling of the request.
Information used solely to verify identity is deleted after verification unless another legal reason for retention exists.
Technical logs
Records necessary for website operation and security are retained for no more than 30 days.
If a security incident is identified, relevant records may be retained separately to investigate and resolve it.
Backups
Backups containing personal data are kept on a cycle of no more than 90 days, after which they are deleted or overwritten.
Cookies
Applicable retention periods are set out in the Cookie Policy.
After the applicable periods expire, data is deleted or irreversibly anonymised, unless retention is necessary to meet a legal obligation or defend a right.
10. Cookies and external services
In the website's current setup, we use cookies to remember your cookie preferences and the selected language.
Details of the cookies used, their purposes and duration are available in the Cookie Policy.
Traffic analysis and marketing tools are not enabled in the current setup.
If such tools are introduced later, we will update the information and request consent where required by law.
The website may contain links to external services, including social networks and map services. Opening a link takes you to that service, where data processing is governed by its provider's policy.
11. How we protect data
We apply technical and organisational measures appropriate to the nature of the data and processing risks to prevent:
unauthorised access;
data loss;
unauthorised changes;
unlawful disclosure;
destruction or misuse.
Access to data is limited to people who need it to perform their duties.
Security incidents are managed in accordance with applicable legal obligations.
If a personal data breach requires notification to the supervisory authority or affected individuals, we will meet those obligations under the conditions and within the time limits prescribed by law.
We do not ask you to send passwords, full payment card details or other confidential information unrelated to the project through the website forms.
12. Your rights
Under Law No. 195/2024, you have the following rights:
Right of access
You may request confirmation that we process your data, access to it, a copy and information about the processing.
Right to rectification
You may request correction of inaccurate data and completion of incomplete data.
Right to erasure
You may request deletion when the legal conditions are met. The right to deletion does not override statutory retention obligations or situations where data is needed to establish, exercise or defend legal rights.
Right to restriction of processing
You may request restrictions on the use of data in the circumstances provided by law.
Right to portability
For automated processing based on consent or contract, you may request the data you provided in a structured, commonly used, machine-readable format and, where technically possible, its transfer to another controller.
Right to object
You may object to processing based on legitimate interests for reasons relating to your particular situation.
You may object to direct marketing at any time.
Right to withdraw consent
Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
Right not to be subject to solely automated decision-making
You have the right not to be subject to a decision based solely on automated processing that has legal effects or similarly significantly affects you, under the conditions provided by law.
The website does not use mechanisms that make such solely automated decisions about users.
Law No. 195/2024 transposes the European data protection framework into the law of the Republic of Moldova and governs these rights of data subjects.
13. How to exercise your rights
You may send a request to any of the following addresses:
aconsvitraliu@mail.ru
lc.consvitraliu@bk.ru
gconsvitraliu@mail.ru
or in writing to:
S.R.L. CONSVITRALIU
5/9 Transnistria Street, Ciocana sector
Chișinău municipality, Republic of Moldova.
State what you are requesting and provide the information needed to identify your relationship with us.
You do not need to use a special form or cite legal provisions.
If we have reasonable doubts about the requester's identity, we may ask for proportionate additional information necessary for verification. We do not automatically request a copy of an identity document.
We respond without undue delay and, in principle, within one month of receiving a request. Depending on its complexity and the number of requests, this may be extended by two further months, with notice to the individual within the initial period.
If we cannot fulfil the request, we explain the reasons and provide information about lodging a complaint or seeking judicial remedies.
Exercising these rights is generally free of charge. For manifestly unfounded or excessive requests, measures permitted by law may apply.
14. Where to lodge a complaint
If you believe your data is being processed unlawfully, you may lodge a complaint with:
National Centre for Personal Data Protection of the Republic of Moldova — CNPDCP
Up-to-date information about the authority, its contact details and the complaint procedure is available on the official CNPDCP website.
Contacting us to clarify a situation does not limit your right to complain to the supervisory authority or use the judicial remedies provided by law.
15. Updates to this policy
We may update this policy when our data processing practices, services or applicable legal requirements change.
The current version and its last update date will be published on this page.
If we intend to use data for a purpose other than originally stated, we will provide the necessary information in advance and establish the applicable legal basis.