Privacy Policy

PRIVACY AND PERSONAL DATA PROCESSING POLICY

This Privacy and Personal Data Processing Policy establishes the manner in which the personal data of users of the AsideWeb Studio SRL website is processed and has been prepared in accordance with the legislation of the Republic of Moldova, including Law No. 195/2024 on the Protection of Personal Data.

Last updated: September 29, 2026

1. Personal Data Controller
The personal data controller is:
AsideWeb Studio SRL
Republic of Moldova
Email: su*****@******eb.md
For questions concerning the processing of personal data, users may contact the above email address.

2. Personal Data That May Be Processed
Depending on how the website is used and the nature of the request, the following personal data may be processed:
Data provided by the user:
name;
telephone number;
email address;
company or project information, if provided by the user;
content of the message or request;
other information voluntarily provided by the user.
Technical data:
IP address;
date and time of the visit;
browser type and version;
device type and operating system;
pages visited;
source from which the website was accessed;
information concerning interaction with the website;
other technical data necessary for the operation and security of the website.

3. Purposes and Legal Bases for Processing
Personal data is processed only for specific and lawful purposes. Depending on the nature of the processing, the following purposes and legal bases apply.

3.1. Processing user requests and inquiries.
Purpose: receiving, reviewing and processing the user’s request and providing a response.
Legal basis: taking steps at the request of the data subject prior to entering into a contract and, where applicable, performing a contract.

3.2. Communication with the user.
Purpose: contacting the user using the contact details provided by the user to discuss a request, project or services.
Legal basis: taking steps at the request of the data subject prior to entering into a contract or performing a contract where a contract has been concluded.

3.3. Preparation of commercial offers.
Purpose: preparing and providing the user with an offer concerning website development, an online store, a web application or other services provided by AsideWeb Studio SRL.
Legal basis: taking steps at the request of the data subject prior to entering into a contract.

3.4. Performance of contractual and legal obligations.
Purpose: entering into and performing contracts and maintaining accounting, tax and other records required by law.
Legal basis: the necessity to perform a contract and/or comply with a legal obligation applicable to the controller.

3.5. Website and information system security.
Purpose: ensuring the operation and security of the website, preventing unauthorized access, abuse and other threats.
Legal basis: the legitimate interest of the controller in ensuring the security of information systems, preventing abuse and protecting its rights and legitimate interests, provided that such interest does not override the rights and freedoms of the data subject.

3.6. Website analytics and improvement.
Purpose: analyzing website usage and improving its content, functionality and performance.
Legal basis: the user’s consent where the use of analytical cookies and related processing requires consent under applicable law.

4. Requirement to Provide Personal Data
Providing personal data through website forms is voluntary; however, certain data may be necessary to process a request and provide a response.
Where the provision of certain personal data is necessary to enter into or perform a contract or is required by law, failure to provide such data may make it impossible to conclude a contract, process a request or fulfil the relevant legal obligation.
Data that is not necessary should not be provided by the user.

5. Processing of Personal Data Through Website Forms
When a user submits a contact form, the information provided is used to process the relevant request and contact the user.
Where a specific processing activity is based on consent, consent is requested separately and may be withdrawn by the user at any time.
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

6. Google Analytics
The website uses Google Analytics to analyze website traffic and usage.
Depending on the Google Analytics configuration, technical and analytical information may be processed, including information about the device, browser, pages viewed, traffic source and interaction with the website.
The use of analytical cookies and related analytical processing is carried out in accordance with the user’s consent preferences where consent is required.
Detailed information about the cookies used is available in the Cookie Policy.

7. Cookies
The website may use necessary technical, functional, analytical and other cookies and similar technologies depending on the functionality used on the website.
Necessary cookies may be used to ensure the operation, security and proper functioning of the website.
Non-essential cookies are used in accordance with the applicable legal basis and the user’s preferences.
Users may change their cookie preferences through the cookie management mechanism available on the website.
Detailed information about specific cookies, their purposes, storage periods and providers is available in the Cookie Policy.

8. Recipients and Categories of Recipients of Personal Data
Personal data may be accessible to the following categories of recipients where necessary for the relevant processing purpose:
employees and authorized representatives of AsideWeb Studio SRL;
hosting service providers;
email service providers;
technical infrastructure providers;
analytics service providers;
software and information system providers;
other service providers whose involvement is necessary to process the relevant request;
public authorities — where required and in accordance with the legislation of the Republic of Moldova.
Access to personal data is granted only to the extent necessary for the relevant processing purpose.

9. International Transfers of Personal Data
Some providers of services used on the website may be located outside the Republic of Moldova, and personal data may therefore be transferred to or become accessible to recipients in other countries.
In particular, the use of Google Analytics may involve international processing of data.
Such transfers are carried out only where a legal mechanism and appropriate safeguards provided for by Law No. 195/2024 are applicable.
Information concerning the applicable safeguards and the method of obtaining a copy thereof is provided where and as required by law.

10. Retention of Personal Data
Personal data is retained only for the period necessary to achieve the relevant processing purpose or for a longer period where such period is required by law or necessary to protect the controller’s rights and legitimate interests.
The retention period or criteria used to determine it depend on the purpose of processing, the nature of the data, the need to perform a contract, legal requirements, the need to resolve disputes and other applicable legal grounds.
After the purpose of processing has been achieved and the applicable retention period has expired, personal data is deleted, destroyed or anonymized unless further retention is required by law or another lawful basis.

11. Rights of the Data Subject
Under Law No. 195/2024, the data subject has the rights provided by law, including the right:
to receive information about the processing of their personal data;
to obtain confirmation as to whether their personal data is being processed;
to access their personal data;
to obtain a copy of their personal data where provided by law;
to request correction of inaccurate or incomplete data;
to request deletion of personal data in the cases provided by law;
to request restriction of processing in the cases provided by law;
to object to processing in the cases provided by law;
to request portability of personal data in the cases provided by law;
to withdraw consent where processing is based on consent;
not to be subject to a decision based solely on automated processing, including profiling, in the cases provided by law;
to lodge a complaint with the National Center for Personal Data Protection (CNPDCP);
to bring proceedings before a court in the cases and manner provided by law.

12. Exercising Data Subject Rights
To exercise their rights, users may submit a request to:
su*****@******eb.md
The request should preferably include the user’s name, contact details for the response, the substance of the request and the right the user wishes to exercise.
For the protection of personal data, the controller may request additional information necessary to verify the identity of the requester where this is necessary to prevent unauthorized disclosure of data.
Requests are handled within the time limits and in accordance with the procedures established by Law No. 195/2024.
As a general rule, information regarding the action taken on a data subject request is provided without undue delay and no later than one month from receipt of the request. Where permitted by law, this period may be extended by an additional two months, and the data subject will be informed in accordance with the law.

13. Personal Data Security
AsideWeb Studio SRL implements appropriate technical and organizational measures to protect personal data against unlawful or unauthorized processing, accidental loss, destruction, alteration, disclosure or access.
Security measures are determined taking into account the nature and scope of processing, potential risks and available technical and organizational means.
Such measures may include access restrictions, authentication, access control to information systems, software updates, backups and other protective measures.

14. Personal Data Security Breaches
In the event of a personal data security breach, AsideWeb Studio SRL takes measures to determine the nature of the breach, assess the associated risks, limit the consequences and restore security.
Where required by Law No. 195/2024, the controller shall notify the National Center for Personal Data Protection within the period established by law and take any other measures required by law.

15. Automated Decision-Making and Profiling
AsideWeb Studio SRL does not make decisions based on data submitted through website forms that produce legal effects for the user or similarly significantly affect the user solely through automated processing, including profiling.
If such processing is introduced, the user will be provided with the information required by law regarding its existence, the logic involved, its significance and the envisaged consequences.

16. Special Categories of Personal Data
The website is not intended for the collection of special categories of personal data.
Users are advised not to submit through website forms information that is not necessary for processing their request, including special categories of personal data.

17. Data Minimization Principle
AsideWeb Studio SRL seeks to collect and process only personal data that is necessary for specific and lawful purposes.
Users should not provide through the website excessive information that is unrelated to their request or the service requested.

18. Further Processing of Personal Data
If AsideWeb Studio SRL intends to use personal data for a purpose different from the purpose for which it was originally collected, the user will be informed in advance about the additional purpose and other required information in accordance with applicable law.

19. Changes to This Policy
This Policy may be updated as a result of changes in legislation, technologies used, services or the manner in which personal data is processed.
The current version of this Policy is published on this page.
The date of the latest update is indicated at the beginning of the document.
Where changes require additional user information or consent, the appropriate measures shall be taken in the cases and manner required by law.

20. Contact Information
For questions concerning the processing of personal data and this Policy:
AsideWeb Studio SRL
Republic of Moldova
Email: su*****@******eb.md
The same address may be used to exercise data subject rights: su*****@******eb.md