Privacy policy and personal data protection
Version 1.0, updated 2026-10-02. This policy is drawn up under Law of the Republic of Moldova No. 195/2024 on personal data protection, which is harmonised with Regulation (EU) 2016/679 (GDPR). For visitors from the European Union the GDPR also applies.
1. Data operator
- Name: «POS CONSULTING» S.R.L.
- IDNO: 1009600028707
- Registered address: MD-2028, Chișinău, 7/1 Miorița St., of. 10
- Contact for data matters: ion.onica@symbol.mobi
2. What data we process and where it comes from
- From the site forms (quote request, cart, callback, consultation, contact, data request): name, phone, e-mail, company name and IDNO (if you provide them), the message text, selected products, language and the page of submission, date and time of consent.
- Technical data: the IP address is not stored in clear text, only as a verification hash used for spam protection; web server logs.
- Cookies: see the Cookie policy.
You provide the data yourself; we do not collect it from other sources.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Answering your request and preparing a quote | Pre-contractual steps at the request of the data subject |
| Concluding and performing a contract, accounting (if a contract is concluded) | Performance of a contract; legal obligation (accounting) |
| Site security and spam protection | Legitimate interest of the operator |
| Processing that relies on consent | Consent given by ticking the box in the form; the date and policy version are recorded; it can be withdrawn at any time |
4. Recipients and processors
- Hosting: Hetzner Online GmbH — Falkenstein (DE), EU
- E-mail: the site does not send e-mails by itself; correspondence at ion.onica@symbol.mobi is handled by the own mail server of the symbol.mobi domain, hosted by Hetzner Online GmbH — Falkenstein (DE), EU
- Telegram (Telegram Messenger Inc. / Telegram FZ-LLC) — notifications about requests sent to an internal Telegram work chat for the operator's staff who process the request; they include the data from the request (name, phone, e-mail, message); active because the operator has enabled this option (transfer outside the Republic of Moldova and the EU — see section 5)
- YouTube (Google Ireland Ltd.): videos are loaded from youtube-nocookie.com only after you click a video; until then no data is transmitted. After the click YouTube/Google may process your IP address and set its own cookies; a transfer to the USA is possible (EU-US Data Privacy Framework). Google Maps is not embedded — it is only a link
- Public authorities — where required by law
The data is not sold and is not used for advertising.
5. Transfers outside the Republic of Moldova and the European Economic Area
Hosting and e-mail are located in Germany (EU). The transfer to YouTube/Google (outside the EU) takes place only after you click a video (USA, EU-US Data Privacy Framework). Notifications about requests are transmitted to Telegram (Telegram Messenger Inc. / Telegram FZ-LLC), a provider located outside the Republic of Moldova and the EU, into an internal work chat; basis: performance of your request (pre-contractual steps) and the operator's legitimate interest in replying promptly; only the staff who process the request have access. If the providers listed above are located outside the Republic of Moldova (the place of processing is stated in section 4), data is transferred only to states ensuring an adequate level of personal data protection under Law No. 195/2024, and to other states only on the grounds and with the safeguards provided by law.
6. Retention periods
- Requests: 3 years from receipt, then personal data is anonymised automatically (only the products and request status remain, without personal data).
- Server logs: 30 days.
- Technical anti-spam records (IP hash, request counter): 2 days.
- Database backups: made daily on the same server (Hetzner Online GmbH — Falkenstein (DE), EU) and kept for 14 days; erased or anonymised data disappears from backups within 14 days at the latest.
- Contract data and accounting documents: periods set by law.
7. Your rights
Under Law No. 195/2024 and the GDPR you have the right to: access your data; have it corrected; have it erased; restrict processing; object to processing; data portability; withdraw consent (withdrawal does not affect the lawfulness of processing carried out before it); lodge a complaint with a supervisory authority. We do not make automated decisions that produce legal effects for you. Send a request through the form below or to ion.onica@symbol.mobi. We reply within 30 days at the latest.
8. Complaints
If you believe your rights have been violated, you may contact the National Centre for Personal Data Protection (datepersonale.md), the supervisory authority of the Republic of Moldova. EU residents may also contact the supervisory authority of their country of residence.
9. Security, minors, changes
Data is protected by an HTTPS connection, role-based access to the admin panel, logging and anonymisation when the retention period expires. The site is not intended for persons under 16. The current version and the update date are shown at the top of the page; changes are published on this page.