Personal data processing policy

1. Who processes your data

The data controller is S.R.L. DIGITME DEV, fiscal code 1022600005877, address: Republic of Moldova, Chișinău, Munceștilor highway 29/1, office 220.

Processing is carried out in accordance with Law of the Republic of Moldova No. 195/2024 on the protection of personal data, in force since 23 August 2026, which replaced Law No. 133/2011.

For any question about your data, write to info@digitme.md or call +373 76 090 111.

2. When we receive your data

We process data in the following cases:

You fill in a form on the site

A request for a review of your situation, a call back, or any of our services.

You write or call us

By email, on Telegram or on the phone number given on the site.

You simply browse the site

In that case only technical data is processed, and only to the extent you have consented to.

We start working together

The data needed to conclude and perform a contract.

3. What data we process

We do not request and deliberately do not process special categories of data: health information, religious or political beliefs, biometrics. Please do not enter such information in the free-text fields of the form.

3.1. Contact details

Name, phone number, email address — what you enter in the form yourself. Only the phone number is required; the rest is optional.

3.2. The content of your enquiry

The text you write in the comment field: a description of the task, your website address, the size of your team and the like.

3.3. Technical data and visit information

IP address, device and browser type, pages viewed, date and time of the visit, the address of the page you came to us from, and cookie identifiers.

3.4. Data about the source of the visit

Advertising campaign tags (utm_source, utm_medium, utm_campaign, utm_content, utm_term), Google and Meta ad click identifiers, the Google Analytics identifier, the number of visits before the enquiry and the entry page. We need this in order to understand which advertising brings customers.

3.5. Data for performing a contract

Company registration details and the information needed to issue documents, if we begin working together.

4. Why we process data

4.1. To answer your enquiry

To get in touch, clarify the task, prepare and send a proposal.

4.2. To provide the services

To carry out the work under the contract, correspond with you and report on results.

4.3. To meet our legal obligations

Accounting and tax records, retention of source documents.

4.4. To understand what happens on the site

To see which pages are read, where visitors come from and which advertising brings enquiries, so as to improve the site and not waste the advertising budget.

4.5. To keep the site running and secure

To detect faults and defend against spam and abuse.

4.6. To send useful material

Only if you have separately consented to it. You can opt out at any moment, and that will not affect anything else.

5. On what grounds we do this

Your consent

Non-essential cookies, analytics, advertising tools and mailings. Consent is given through the banner on entering the site and through the checkbox in the form, and it can be withdrawn.

A contract and steps prior to it

When you leave an enquiry, we process the data in order to reply and prepare a proposal at your request.

A legal obligation

Retention of accounting and tax documents for the statutory periods.

Our legitimate interest

Protecting the site from abuse, keeping an internal record of enquiries and defending our rights in the event of a dispute. We weigh that interest against your rights and do not use it for anything that may only be done with consent.

6. Cookies and analytics

Strictly necessary cookies keep the site working and are used without consent. Analytics and advertising cookies only after you have consented in the banner.

Analytics on this site is collected in our own name through our own server-side container on the sgtm.digitme.md domain, not by third-party scripts. That means the data reaches us first, and we control what is passed on.

Consent can be withdrawn or changed at any moment through the banner settings, and also by clearing cookies in your browser.

7. Who we pass data to

We do not sell your data and do not pass it to third parties for their own purposes. Access is granted only to those without whom the service is impossible:

Our own staff

Only those who need it to work on your enquiry.

The Bitrix24 CRM

Enquiries from the site land in our CRM, where they are worked on.

Telegram

An internal notification about a new enquiry, so that we do not miss it.

Google and Meta

Conversion information and anonymised metrics for measuring advertising performance — to the extent you have consented to.

Public authorities

Only on a lawful basis and to the extent provided for by law.

8. Transferring data outside the Republic of Moldova

Some of the services we use are located outside the country. Data is transferred abroad only where there is a lawful basis: an adequacy decision, appropriate safeguards (including standard contractual clauses), or your explicit consent.

The site and the server-side analytics container are hosted on our own server.

9. How long we keep data

Once the period expires, the data is deleted or anonymised.

Enquiries that did not become a working relationship

No longer than three years from the last contact — for keeping a record of enquiries and defending our rights.

Client data under a contract

For the term of the contract and thereafter for the periods set by law for accounting and tax documents.

Data for mailings

Until consent is withdrawn.

Technical data and analytics

For the retention periods set in the analytics systems used, after which it is deleted or anonymised.

10. How we protect data

We apply technical and organisational measures proportionate to the risks: access to data is segregated and granted only where needed, the connection to the site is encrypted, system credentials are protected and reviewed regularly, and backups are made.

If a breach occurs that could create a risk to your rights, we will notify the supervisory authority and, where the law requires it, you.

11. Your rights

To exercise your rights, write to info@digitme.md. We will reply within the period set by law. We may ask you to confirm your identity — so as not to hand your data to someone else.

To be informed and to have access

To find out what data of yours we hold and what we do with it.

To rectify inaccurate data

And to complete incomplete data.

To erase data

Where there is no lawful basis for continuing to process it.

To restrict processing

In the cases provided for by law.

To object to processing

Including to direct marketing — in which case we stop it unconditionally.

To receive data in a portable form

And to transfer it to another controller.

To withdraw consent

At any moment. This does not make processing carried out before the withdrawal unlawful.

To lodge a complaint

With the supervisory authority or in court.

12. Where to complain

If you believe we have infringed your rights, write to us first — we will try to sort it out. That does not deprive you of the right to approach the supervisory authority directly:

The National Centre for Personal Data Protection of the Republic of Moldova (Centrul Național pentru Protecția Datelor cu Caracter Personal). Email: centru@datepersonale.md, phone: 022 820 801, website: datepersonale.md.

13. Changes to this policy

We may update this policy: our tools, our services and the requirements of the law change. The current version is always published on this page, and the date of the last update is shown next to the heading.

If the changes are material, we will announce them in a visible way.