PRIVACY POLICY

Website: artgranit.md

S.R.L. „ART-GRANIT” pays particular attention to the protection of personal data and to the privacy of persons who visit the website www.artgranit.md, request information about materials, products or works, ask for an offer or a calculation, schedule measurements, communicate with representatives of the Company or use the contact channels made available.

This Policy explains what personal data we may collect, for what purposes and on what legal grounds we process it, from what sources we obtain it, to whom we may disclose it, how long we keep it, what protection measures we apply and what rights data subjects have.

Personal data is processed in accordance with Law no. 195/2024 on the protection of personal data, in force in the Republic of Moldova, as well as with the other applicable regulations.

1. WHO IS THE DATA CONTROLLER

The controller of personal data is:

S.R.L. „ART-GRANIT”
Website: www.artgranit.md
E-mail: info@artgranit.md
Phone: +373 (79) 04-02-05
Showroom: bd. Grigore Vieru, 19, MD-2005, Chișinău, Republic of Moldova
Stone Gallery: str. Columna 170, MD-2004, Chișinău, Republic of Moldova

Within the meaning of data protection legislation, ART-GRANIT determines the purposes and means of processing for the activities described in this Policy.

2. WHO THIS POLICY APPLIES TO

This Policy applies mainly to:

• persons who visit the website www.artgranit.md;
• persons who complete the forms available on the website, including forms such as “Talk to the manager”, “Request a calculation”, “Request a call” or other similar forms;
• persons who request information about natural stone, quartz, ceramics, Dekton, Silestone or other materials and products promoted by ART-GRANIT;
• persons who request an offer, a price calculation, measurements, custom manufacturing, delivery, installation or other related services;
• persons who contact ART-GRANIT by phone, e-mail, social networks, messaging applications or other communication channels;
• persons who visit the Company's showrooms, to the extent that their data is processed in connection with the request or the commercial relationship;
• persons who interact with ART-GRANIT's online ads and campaigns;
• persons who opt in to receive commercial communications.

For certain operations beyond the use of the website — for example, performance of a contract, access to a site, processing of data of representatives of legal entities or video surveillance in certain spaces — ART-GRANIT may provide additional information specific to that operation.

3. WHAT PERSONAL DATA WE MAY PROCESS

ART-GRANIT processes data that is adequate, relevant and limited to what is necessary in relation to the specific purpose of the processing.

3.1. Identification and contact data

• first and last name;
• phone number;
• e-mail address;
• home, delivery, measurement or works address, where necessary;
• data of the representative or contact person of a corporate client;
• other contact details you decide to provide.

3.2. Data regarding the request, the project and preferences

• the type of product or work requested: kitchen/bathroom countertop, window sill, stairs, cladding, flooring, wall, façade, paving or another product/work;
• the material or collection of interest;
• dimensions, sketches, photos, plans or other technical information provided for estimation or execution;
• the indicative budget and the requirements you communicate;
• the address or approximate location of the object, if necessary for measurements, delivery or installation;
• the content of the request and the relevant history of communications with ART-GRANIT representatives.

3.3. Data regarding orders and the contractual relationship

• data necessary for preparing the offer, order, contract, invoice, handover document or other commercial documents;
• information about the products and services ordered;
• data regarding delivery, measurement and installation;
• information about payments and settlement status, without ART-GRANIT storing full bank card data when the payment is processed by a payment provider;
• data regarding warranties, complaints, returns, remedies or other after-sales requests.

3.4. Communication data

• messages sent through the website;
• e-mail correspondence;
• messages sent through messaging applications used by ART-GRANIT;
• messages and interactions via social networks;
• date and time of the communication;
• information necessary to handle the request.

3.5. Data regarding telephone conversations

If ART-GRANIT uses call recording for certain phone lines, the phone number, date and time of the call, call duration, audio recording and information communicated during the call may be processed. The person will be informed about the recording before it starts or at the beginning of the call, according to applicable requirements.

3.6. Technical data regarding the use of the website

• IP address;
• device type, browser and operating system;
• date and time of access;
• pages visited and approximate duration of the visit;
• the source of the visit;
• online identifiers;
• information collected through cookies or similar technologies, depending on the website configuration and the options expressed by the user.

Details about the cookies actually used are presented in the Cookie Policy and in the preference management mechanism on the website.

3.7. Images and audiovisual data

Where certain showrooms, access areas or other ART-GRANIT premises are under video surveillance, images of persons entering the range of the cameras may be processed. Such processing is carried out for the purpose of security and protection of persons and goods and is signposted accordingly at the monitored location. This Policy does not replace the specific notice regarding video surveillance.

4. HOW WE COLLECT DATA

We may collect data:

Directly from you, when you:

• complete a form on the website;
• ask to be contacted, request a calculation or an offer;
• call us or send us an e-mail;
• contact us via social networks or messaging applications;
• visit the showroom and request advice;
• send dimensions, sketches, images or information about the project;
• schedule measurements, delivery or installation;
• place an order or start negotiations for concluding a contract;
• submit a complaint, warranty claim or other request;
• opt in to receive commercial communications.

Automatically, through the website: depending on the website settings and your choices, certain technical information may be collected through cookies, logs and similar technologies.

From third parties:

• advertising platforms and social networks through which you asked to be contacted;
• designers, architects, contractors, partners or representatives who lawfully forward your request;
• the person or organisation you represent;
• providers involved in payments, delivery, installation or other operations, to the extent necessary;
• public sources or other sources permitted by law, where necessary for a legitimate and proportionate purpose.

Where data is not obtained directly from you, ART-GRANIT fulfils the information obligations provided by law, to the extent they are applicable.

5. FOR WHAT PURPOSES WE PROCESS DATA

5.1. To respond to requests: answer questions about materials, products and works; communicate information about the availability of products and materials; send offers, estimates or requested calculations; schedule discussions, consultations, visits or measurements; put you in contact with the responsible manager or specialist.

5.2. For pre-contractual steps and order preparation: clarify technical and commercial requirements; analyse dimensions, sketches, photos or other information provided; carry out or schedule on-site measurements; select the material and the appropriate technical solution; calculate the price and negotiate conditions; prepare the order, offer, estimate or contract.

5.3. To perform contracts and manage orders: manufacture or prepare the ordered products; coordinate measurement, manufacturing, delivery and installation; invoice and record payments; communicate during the execution of the order; provide warranty and after-sales services; handle complaints, remedies and other contractual requests.

5.4. To manage relationships with clients and potential clients: register and allocate requests; keep the relevant communication history; avoid repeatedly requesting the same information; improve the organisation of the quoting and sales process; resolve complaints and misunderstandings.

5.5. For marketing and commercial communications: send information about materials, collections, products and services; communicate promotions, offers and campaigns; inform about new products or collections; send newsletters and event invitations; run remarketing or personalised advertising campaigns only under the conditions permitted by law and depending on cookie choices.

5.6. To analyse and improve the website and our activity: analyse how the website is used; identify pages, materials and products of interest; evaluate the effectiveness of advertising campaigns; improve website functionality; improve services, communication and customer experience.

5.7. For security, prevention of abuse and defence of rights: protect the website, accounts, systems and IT equipment; prevent and detect fraud or abusive use; investigate security incidents; protect people, goods and ART-GRANIT premises; establish, exercise or defend rights and claims; manage complaints, administrative proceedings or litigation.

5.8. To comply with legal obligations: prepare and keep accounting and tax documents; respond to lawful requests from authorities; comply with archiving and record-keeping obligations; fulfil other obligations provided by applicable legislation.

6. LEGAL GROUNDS FOR PROCESSING

The legal basis is determined according to the specific purpose and context of the processing. ART-GRANIT may process data, as the case may be, on the following grounds:

Performance of a contract or steps taken prior to entering into it (Art. 6 para. (1) let. b) of Law no. 195/2024): this ground may be used when you request an offer, a calculation, a measurement, an order or other steps with a view to purchasing a product or service, and for performing the obligations assumed under the contract.

Compliance with a legal obligation (Art. 6 para. (1) let. c)): data is processed when ART-GRANIT must comply with legal obligations, including in accounting, tax, archiving and security matters or in relation to the competent authorities.

Legitimate interest (Art. 6 para. (1) let. f)):

• efficient management of requests and commercial relationships;
• keeping evidence of communications and operations;
• security of the website, systems, premises, persons and goods;
• prevention of fraud and abusive use;
• resolving complaints and defending ART-GRANIT's rights;
• analysing and improving services, where the rights and freedoms of the person do not override.

Where legitimate interest is invoked, ART-GRANIT assesses the necessity and proportionality of the processing in relation to the rights and freedoms of the data subject.

Consent (Art. 6 para. (1) let. a)): consent is used where it is the appropriate legal basis, including, as the case may be, for certain marketing communications, non-essential cookies or other operations for which the law requires the person's agreement. Consent may be withdrawn at any time, without affecting the lawfulness of processing carried out prior to withdrawal.

7. DIRECT MARKETING

ART-GRANIT may send commercial information regarding materials, products, works, collections, promotions and other offers under the conditions provided by law.

Where marketing is based on consent, this is requested separately from the actions necessary for submitting a request, obtaining an offer or entering into a contract. Refusing marketing does not affect the possibility of requesting information, receiving an offer or contracting ART-GRANIT's products and services.

You may object at any time to direct marketing or withdraw your consent through the mechanism indicated in the message received or by contacting ART-GRANIT. We may keep the minimum information necessary about your objection in order to avoid accidental subsequent inclusion in marketing lists.

8. COOKIES AND SIMILAR TECHNOLOGIES

The website www.artgranit.md may use cookies and similar technologies. Depending on the actual configuration, these may be:

• strictly necessary for the operation of the website;
• intended to remember preferences;
• used for audience measurement and statistics;
• used for analytics;
• used for marketing, advertising and conversion measurement.

Cookies and technologies that require consent will not be activated before the user expresses their choice, where legislation requires this. The user may refuse non-essential cookies and subsequently change their preferences.

9. TO WHOM WE MAY DISCLOSE DATA

Access to data is granted only to persons and entities for whom it is necessary in relation to the specific purpose. Data may be accessible or transmitted, as the case may be, to:

• authorised employees and collaborators of ART-GRANIT;
• hosting, maintenance and IT service providers;
• providers of customer and request management systems (CRM);
• providers of e-mail, telephony and communications services;
• providers of analytics, marketing and online advertising services;
• social media and online advertising platforms, to the extent they are used and subject to your choices;
• providers involved in measurement, transport, delivery, installation, payment processing or other ancillary services, where transmission is necessary;
• designers, architects, contractors or other partners involved in a project, where the transmission is justified and lawful;
• lawyers, consultants, accountants, auditors or insurers, to the extent necessary;
• public authorities, courts or other institutions, where transmission is required or permitted by law;
• other providers that process data for ART-GRANIT on the basis of appropriate instructions and safeguards.

ART-GRANIT does not sell or trade personal databases.

Where a provider processes data on behalf of ART-GRANIT, the relationship is organised in accordance with the legal requirements regarding processors and data security.

10. TRANSFERS OF DATA OUTSIDE THE REPUBLIC OF MOLDOVA

Some IT, e-mail, social media, analytics, advertising or request management services may involve storing or accessing data from other states. In the case of an international transfer of personal data, ART-GRANIT applies the mechanisms and safeguards provided by Law no. 195/2024.

Additional information about a specific transfer and the applicable safeguards may be requested using the contact details indicated in this Policy.

11. HOW LONG WE KEEP DATA

ART-GRANIT does not keep personal data longer than necessary for the purposes for which it was collected. When establishing the retention period we take into account:

• the purpose of the processing;
• the nature, volume and sensitivity of the data;
• the existence of a pre-contractual or contractual relationship;
• the duration of the project or order;
• legal retention and archiving obligations;
• limitation periods;
• the need to establish, exercise or defend a right;
• any complaints, checks or litigation.

In particular:

• requests from persons who did not become clients are kept for the period necessary to handle the request and for a reasonable subsequent period, according to internal rules;
• data relating to orders, contracts, payments and accounting documents is kept for the duration of the relationship and thereafter, for the periods imposed by applicable legislation or necessary for defending rights;
• data used for marketing is kept until consent is withdrawn, an objection is exercised or another applicable legal ground ceases;
• call recordings, if made, are kept for a limited period established according to the purpose;
• data collected through cookies is kept according to the periods indicated in the Cookie Policy.

After the applicable period expires, data is deleted, anonymised or, if there is a legal reason for retention, access to it is restricted accordingly.

12. DATA SECURITY

ART-GRANIT applies technical and organisational measures appropriate to the level of risk to protect personal data against unauthorised access, disclosure, alteration, loss, destruction or use:

• limiting access according to duties and the need to know;
• use of individual accounts and authentication mechanisms;
• protection of IT systems and devices;
• making backups, as appropriate;
• reasonable updating and maintenance of systems;
• training of persons who process data;
• confidentiality obligations;
• control of access by external providers;
• procedures for handling security incidents.

No method of electronic transmission or storage can guarantee absolute security; ART-GRANIT seeks to reduce risks to an appropriate level, given the nature of the processing.

13. RIGHTS OF THE DATA SUBJECT

Under the conditions provided by Law no. 195/2024, you may benefit, as the case may be, from the following rights:

• Right of access: to obtain confirmation as to whether ART-GRANIT processes data concerning you and, where applicable, access to the data and to the information provided by law.
• Right to rectification: to request the correction of inaccurate data and the completion of incomplete data.
• Right to erasure: to request the deletion of data in the situations provided by law. This right is not absolute.
• Right to restriction of processing: to request the temporary limitation of processing in the cases provided by law.
• Right to data portability: to receive the data provided in a structured, commonly used and machine-readable format.
• Right to object: to object to processing based on legitimate interest. For direct marketing, the objection may be exercised at any time.
• Right to withdraw consent: to withdraw consent at any time, without affecting the lawfulness of prior processing.
• Rights regarding automated individual decisions: to benefit from the safeguards provided by law, including in relation to profiling.

14. HOW TO EXERCISE YOUR RIGHTS

To exercise your rights or for questions regarding the processing of personal data you may contact us at:

S.R.L. „ART-GRANIT”
E-mail: info@artgranit.md
Showroom: bd. Grigore Vieru, 19, MD-2005, Chișinău, Republic of Moldova
Phone: +373 (79) 04-02-05

In your request it is advisable to indicate sufficient information to identify the request and the data it refers to. If there are reasonable doubts about the identity of the applicant, ART-GRANIT may request additional information strictly necessary to confirm identity. ART-GRANIT will not automatically request a full copy of the identity document if identity can be verified by a less intrusive measure.

Requests are examined and resolved under the conditions and within the deadlines provided by Law no. 195/2024.

15. RIGHT TO LODGE A COMPLAINT

If you consider that your personal data is processed in breach of the legislation, you have the right to address the National Center for Personal Data Protection of the Republic of Moldova, under the conditions provided by law. This right does not limit the possibility of using other administrative or judicial remedies provided by law.

16. DATA OF MINORS

The ART-GRANIT website and the commercial activities promoted through it are not specifically intended for minors. ART-GRANIT does not seek to collect data of minors through the website for marketing purposes.

If processing the data of a minor becomes necessary in a contractual context or in connection with a legal representative, it will be carried out only to the extent necessary and in compliance with the applicable legal requirements.

17. SOCIAL NETWORKS, PLATFORMS AND THIRD-PARTY SERVICES

The ART-GRANIT website may contain links, modules, buttons or integrations with social networks, maps, video services, advertising platforms or other third-party services. After accessing or using these services, the respective providers may act as independent controllers and may process data in accordance with their own policies.

ART-GRANIT does not determine how independent controllers process data outside the Company's instructions or contractual relationships. We recommend that you consult the privacy policies of the respective services.

18. UPDATING THE POLICY

This Policy may be updated, in particular, when: applicable legislation changes; ART-GRANIT's processing operations change; new forms, services or functionalities are introduced on the website; new providers or technologies are used; the methods of communication, marketing, analytics or cookie management change; other changes relevant to data processing occur.

The current version of the Policy is available on the website www.artgranit.md.

19. CONTACT

For questions regarding this Policy or the way ART-GRANIT processes personal data:

S.R.L. „ART-GRANIT”
Website: www.artgranit.md
E-mail: info@artgranit.md
Phone: +373 (79) 04-02-05
Showroom: bd. Grigore Vieru, 19, MD-2005, Chișinău, Republic of Moldova
Stone Gallery: str. Columna 170, MD-2004, Chișinău, Republic of Moldova