COOKIE AND WEBSITE PRIVACY POLICY

SRL „ART-GRANIT”

1. Data Controller: SRL „ART-GRANIT”, registered in the Republic of Moldova (IDNO 1009600002286, registered office in Chișinău, bd. Grigore Vieru 19), processes the personal data of website users in full compliance with Law No. 195/2024. We are committed to protecting your privacy when you browse our website or request quotes from us.

2. Data collected through the site: First name, last name, phone number, e-mail, address for measurements/delivery, technical drawings, as well as technical data collected through cookies (IP address, general geographic location data, cookie ID, browsing behaviour).

3. Purposes and Legal Bases of processing: Your data is used on the basis of the following legal grounds: (a) Preparation of price quotes and measurements (Art. 6(1)(b) — pre-contractual steps); (b) Performance of manufacturing and installation contracts for stone products (Art. 6(1)(b) — contract performance); (c) Fulfilment of tax/invoicing obligations in the 1C software (Art. 6(1)(c) — legal obligation); (d) Direct marketing, advertising on Google/Facebook and newsletters (Art. 6(1)(a) — explicit consent).

4. Server Location and Data Hosting: The databases related to the website, as well as the databases of the Bitrix CRM and 1C Accounting software, are hosted on secure physical servers located in Romania (European Economic Area — EEA). The transfer of data to the EEA is carried out without the need for special authorisations, in accordance with Article 44 of Law No. 195/2024, ensuring a high and adequate level of security.

5. Disclosure of Data to Third Parties: We do not sell or transfer your data to third parties for commercial purposes. Data may be accessed, to the extent necessary, by our internal departments, authorised delivery/installation teams, and our IT Outsource partner, which acts as a data processor under a strict data processing agreement (DPA).

6. Data Retention Period: Information from quote request forms that did not result in a contract is kept for a maximum period of 12 months, after which it is deleted or anonymised. Accounting documents in 1C are kept for 10 years as required by law. Marketing data (e-mail, phone number) obtained through consent is kept until you withdraw your consent.

7. Your Rights: In accordance with Law No. 195/2024, you have full rights: the right of access to data, rectification, erasure ("the right to be forgotten"), restriction of processing, objection to direct marketing, and data portability. To exercise these rights or to withdraw your consent for cookies or marketing, send a simple request by e-mail to: dcp@artgranit.md or submit it at our physical address. You also have the right to lodge a complaint with the National Centre for Personal Data Protection (CNPDCP).

Home