Privacy Policy
Last updated: October 202601Data controller
The DeschideCompanie.md website and the services described on it belong to the company that decides how and why your data is processed, acting as the controller:
- Name: S.R.L. "RIGHT CONSULT COMPANY" (limited liability company)
- IDNO: 1022600002005
- Registered office: Office 57, 259/6 Grenoble Street, Botanica, Chișinău, MD-2072, Republic of Moldova
- Office address: 51/A Alexandru cel Bun Street, Chișinău, MD-2012, Republic of Moldova
- Phone: +373 78 78 17 23
- Email: contact@deschidecompanie.md
For any question or request about your data, write to our dedicated data protection address: dpo@deschidecompanie.md.
We process data in accordance with Law No. 195/2024 on the protection of personal data and, for individuals in the European Union, with Regulation (EU) 2016/679 (GDPR). The articles cited below are numbered the same way in both acts.
02What data we process and where it comes from
- From the contact form and requests sent through AI assistants: your name, email, phone number and message.
- From the online registration form: the names and citizenship of the founders and the administrator, details of the company you are setting up (name, activity, share capital) and a contact email or phone number.
- When the contract is signed: a copy of the identity card or passport of each founder and administrator, with the details it contains — name, IDNP, date of birth, citizenship, home address, photograph and signature. These documents are not requested on the website.
- While you browse: your IP address, browser type and the pages you visit; with your consent, also the identifiers stored in analytics cookies.
- From the public state register: the names of administrators and founders shown on the Companies page, taken from the open data published by the Public Services Agency.
When you send us the details of other founders or of the administrator, we receive them from you, not from them. Please show them this policy; we inform them directly when the documents are signed.
03Purpose, legal basis and how long we keep data
Each processing activity has a single purpose, a legal basis and a period after which the data is deleted.
| Purpose | Legal basis | Retention |
|---|---|---|
| Replying to a message sent through the contact form, or to a confirmed request sent through an AI assistant | Steps taken at your request before entering into a contract (Art. 6(1)(b)) | 24 months from the last interaction |
| Preparing an online registration application, where no contract follows | Steps taken at your request before entering into a contract (Art. 6(1)(b)) | 24 months from the last interaction |
| Performing the contract: incorporation documents, filing with the Public Services Agency (ASP), opening the bank account | Performance of the contract (Art. 6(1)(b)) and customer identification required by Law No. 308/2017 on preventing and combating money laundering (Art. 6(1)(c)) | 5 years from the end of the service, the period set by Law No. 308/2017 |
| Invoicing and accounting records | Legal obligation under Accounting Law No. 287/2017 (Art. 6(1)(c)) | 6 years, the statutory period for accounting documents |
| Tips and offers by email | Your consent (Art. 6(1)(a)) | Until you withdraw your consent |
| Running and protecting the website (IP address, browser) | Our legitimate interest in delivering the website and protecting it from abuse (Art. 6(1)(f)) | We keep no access logs of our own; hosting providers keep them for a short time |
| Traffic statistics | Your consent, given in the cookie banner (Art. 6(1)(a)) | The periods set out in the Cookie Policy |
| Showing administrators and founders on the Companies page | The public's legitimate interest in checking business partners, based on data that is already public (Art. 6(1)(f)) | For as long as the data is public in the state register; we update it each time we retrieve it |
A request sent through an AI assistant that is not confirmed on the website is deleted after 24 hours.
We do not make automated decisions or create profiles that produce legal effects concerning you.
04Who receives the data
We do not sell your data or pass it to other companies for their own purposes. Only the following receive it:
State institutions
- The Public Services Agency, the State Tax Service and the other institutions where we file the company's documents, to the extent registration requires it
- The bank where you open your account, only at your request
Technical providers, which process data only on our instructions
- Supabase — the database behind our forms, hosted in the European Union
- Zoho — email and internal notifications about new requests, hosted in the European Union
- Cloudflare — website hosting, the network that delivers it, and the server through which AI assistants can send a request
Analytics tools, only with your consent
If you accept the categories in the cookie banner, browsing data also reaches the recipients below. If you decline, their scripts do not load at all.
- Google LLC (Google Analytics 4 and Google Tag Manager), for traffic statistics: how many people visit the site and which pages they read. Google Privacy Policy.
Messaging apps
If you write to us on WhatsApp, Telegram or Viber, your messages pass through Meta, Telegram or Rakuten Viber, which process them as independent controllers under their own policies. We use these channels for communication only: do not send us copies of identity documents through them — we will tell you how to send them to us securely.
05Transfers outside the Republic of Moldova
Supabase and Zoho store data in member states of the European Union. Google and Cloudflare are US companies and may process data there. For these, transfers rely on the standard contractual clauses included in their data processing terms; for individuals in the European Union, the EU–US Data Privacy Framework, under which both companies are certified, also applies. The safeguards are publicly available in each provider's data processing agreement:
Certification under the EU–US framework can be checked on the official list. For any question about transfers, write to dpo@deschidecompanie.md.
06Your rights
You have the right:
- of access — to find out what data we hold about you and receive a copy (Art. 15)
- to rectification — to have incorrect or incomplete data corrected (Art. 16)
- to erasure — to have us delete data that we no longer need or can no longer lawfully process (Art. 17)
- to restriction — to have us stop using the data while we look into something you have disputed (Art. 18)
- to portability — to receive the data you provided in a common electronic format (Art. 20)
- to object — to processing based on legitimate interest, including the display of your name on the Companies page (Art. 21)
- to withdraw your consent at any time, without affecting processing carried out before the withdrawal
These rights apply to the data we can link to you personally: messages, requests, contracts and correspondence, which we can look up by name, email or phone number. Browsing data in the analytics tools is pseudonymous — we see neither names nor IP addresses in it — so we cannot attribute it to a specific person (Art. 11). You can delete it at any time by clearing the cookies in your browser.
You can object to marketing emails at any time. Use the unsubscribe link in any email or write to us, and we will stop sending them, no questions asked.
How to exercise your rights
Write to dpo@deschidecompanie.md or send a letter to the registered office above. We reply free of charge within one month of receipt; if the request is complex, this period may be extended by two further months, and we will let you know within the first month. If we cannot confirm that the request comes from you, we may ask you for additional identifying information.
If you believe we have processed your data in breach of the law, you can lodge a complaint with the National Centre for Personal Data Protection (datepersonale.md). If you live in the European Union, you can also contact the supervisory authority in your country.
07Are you required to give us your data?
- Contact form: an email address or phone number is needed so that we can reply; everything else is optional.
- Company registration: the identity documents of the founders and the administrator are required by law for registration with the Public Services Agency. Without them we cannot file the application.
- Marketing emails and analytics cookies: entirely optional. If you decline them, the service stays the same.
08Data security
We implement technical and organisational measures to protect your data, including:
- SSL encryption for data transmission
- Restricted access to data
- Regular backups
- Staff training
09Cookies
We use cookies to run the website and, with your consent, to analyse traffic. For details, see our Cookie Policy.
10Changes
When we change this policy, we update the date at the top of the page. If a change concerns the purposes or recipients of our clients' data, we also inform them by email before it takes effect.