Privacy Policy

Last updated: 01.08.2026

This Policy explains how the personal data of visitors to the ecolux.md
website is collected, used and protected, in accordance with Law No. 195/2024 on the
protection of personal data (applicable from 23 August 2026) and Regulation (EU) 2016/679 (GDPR).

1. Who processes the data (the controller)

The controller of personal data is:
S.C. „Ecolux” S.R.L.
Registered office: R. Moldova, Chișinău, str. Sfântul Gheorghe 3
IDNO: 1004600018022
E-mail for personal data matters: gdpr@ecolux.md
Phone: +373 22 500 963

2. What data we collect and why

The ecolux.md website is a presentation site (catalogue, projects, news, contacts)
and does not allow online orders, account registration or form submissions.
Therefore, we collect a minimal amount of data:

Technical and statistical data (collected automatically)
When you visit the site, data is collected automatically, through cookies and the Google
Analytics tool, such as: IP address (in anonymised form), browser type and version,
operating system, pages visited, visit duration and traffic source.
Purpose: correct functioning of the site, statistical analysis and improvement
of the browsing experience.
Legal basis: your consent, expressed through the cookie banner (for analytics
cookies), or the controller’s legitimate interest (for strictly necessary cookies).

If you contact us directly by e-mail or phone (contact details being published on the
Contacts page), we will process the data you voluntarily provide, solely to respond to
your request.

We do not collect sensitive data and do not intentionally process data of minors.

3. Third-party tools and data transfer

For traffic analysis we use Google Analytics, a service provided by
Google, which may process data on servers outside the Republic of Moldova. Google acts as
an independent controller and applies its own data protection safeguards.
Google’s policy: policies.google.com/privacy.

We do not sell or transfer your data to third parties for marketing purposes.

4. How long we keep the data

• Statistical data collected through Google Analytics: for the period configured in the
  account (usually up to 14 months) and in accordance with Google’s policy.
• Cookies: for the validity period indicated in the
  Cookie Policy.
• E-mail correspondence: for the period necessary to resolve the request.

5. Your rights

As a data subject, you have the right to:

• information about and access to your data;
• rectification of inaccurate data;
• erasure of data (the “right to be forgotten”);
• restriction of processing;
• objection to processing;
• data portability;
• withdrawal of consent at any time, without affecting the lawfulness of prior processing;
• lodging a complaint with the National Center for Personal Data Protection (NCPDP) —
  datepersonale.md.

To exercise these rights, you can write to us at gdpr@ecolux.md.
We will respond within the timeframes provided by law.

6. Data security

We apply reasonable technical and organisational measures (secure HTTPS connection,
restricted access, infrastructure protection) to prevent unauthorised access, loss or
disclosure of data.

7. Changes to this policy

We reserve the right to update this Policy. The version in force is always the one
published on this page, with the update date indicated at the top.