Privacy Policy

1. Who We Are

This website, www.optimum-web.com, is operated by DOSARINFO SRL, trading as Optimum Web (IDNO 1003600101006), Calea Iesilor 8, office 3, MD-2069 Chisinau, Republic of Moldova. DOSARINFO SRL is the controller of the personal data described in this policy. Contact for any privacy matter: info@optimum-web.com, +373 22 843569.

2. Which Laws Apply

We are established in the Republic of Moldova, so all our processing is governed by Law No. 195/2024 on personal data protection, which aligns Moldovan law with the EU General Data Protection Regulation. Where we process data of people in the European Union or the United Kingdom — for example when they visit this website or send us an enquiry — the GDPR and the UK GDPR also apply. We apply the same rules to every visitor, wherever they are.

3. What We Collect, Why, and For How Long

We collect the following categories of personal data, for the purposes and retention periods below:

• Answering enquiries (contact form, quote requests, calculator results you submit, e-mail, phone) — name, e-mail, phone, company, website, message content. Legal basis: steps at your request before a contract, and our legitimate interest in replying to business enquiries. Retention: 24 months after the last contact if no contract follows.
• Delivering services you order — contact details, project communications, deliverables. Legal basis: performance of a contract. Retention: duration of the contract, then 5 years for legal and tax purposes.
• Temporary access credentials for Fixed Price Services — server or account credentials you provide. Legal basis: performance of a contract. Retention: stored in an encrypted vault (Bitwarden Teams or HashiCorp Vault) and deleted as soon as the task is completed.
• Payments — payer name, e-mail, transaction data (card data is handled by the payment provider, never by us). Legal basis: performance of a contract; legal obligation (accounting). Retention: 5 years.
• Website security and delivery — IP address, browser data, request logs. Legal basis: legitimate interest in keeping the site secure and available. Retention: server logs kept 30 days.
• Website analytics — only with your consent — pages visited, device and browser data, approximate location, cookie identifiers. Retention: Google Analytics 4 — 14 months; Yandex Metrica and Zoho SalesIQ — as configured in those services (cookie lifetimes are listed in the Cookie Policy).
• Advertising measurement on Facebook and Instagram — only with your consent — pages visited, cookie identifiers (_fbp, _fbc), and, if you submit a form, your e-mail and phone number in hashed form. Retention: cookies 90 days; data held by Meta under Meta's own policy.
• Proof of your cookie choice — consent id, date, choices made, policy version (no IP address). Legal basis: legal obligation to demonstrate consent. Retention: 3 years.

4. Cookies

Optional cookies are set only after you choose to allow them in our cookie banner. You can change your choice at any time via "Cookie settings" in the footer of every page. Details of every cookie are in our Cookie Policy.

5. Who Receives Your Data

We use the following providers. Each processes data on our instructions (processor) unless stated otherwise:

• Google LLC / Google Ireland Ltd — Workspace (e-mail, documents), Analytics 4 — processed in the EU and USA
• Meta Platforms Ireland Ltd — Meta Pixel and Conversions API (not yet active — planned) — joint controller with us for the collection and transmission of data from our website; Meta then decides independently how it uses the data — processed in the EU and USA
• Zoho — SalesIQ website chat and visitor tracking — EU data centre
• Yandex — Yandex Metrica web analytics — processed in the UAE and affiliated data centres outside the EEA (incl. Russia), under EU SCCs
• Cloudflare, Inc. — content delivery, security, DDoS protection — global network
• Hetzner Online GmbH — hosting and infrastructure — Nuremberg / Falkenstein, Germany (EU)
• n8n — processing of website form submissions — self-hosted on our own server infrastructure, same EU hosting region as the website
• PayPal, Inc. — payment processing — USA
• GitHub / GitLab — code repositories for client projects — USA

6. International Transfers

Some providers process data outside Moldova and the European Economic Area. For providers in the USA, transfers rely on the provider's certification under the EU–US Data Privacy Framework or on the European Commission's Standard Contractual Clauses included in the provider's data processing terms.

• Yandex Metrica processes data in the UAE and affiliated data centres outside the EEA, including Russia. Transfers rely on Standard Contractual Clauses included in Yandex's data processing terms. Data is sent to Yandex Metrica only if you give your consent to analytics cookies.
• You can request details of the safeguards used for any provider at info@optimum-web.com.

7. Your Rights

You have the right to access your data, to have it corrected or erased, to restrict or object to its processing, and to data portability. Where we rely on consent, you can withdraw it at any time — for cookies via "Cookie settings" in the footer, for anything else by e-mail. Withdrawal does not affect processing that took place before it. To exercise a right, write to info@optimum-web.com. We reply within one month; if a request is complex we may extend this by up to two further months and will tell you why.

• You also have the right to lodge a complaint with a supervisory authority:
• In Moldova — the National Center for Personal Data Protection (datepersonale.md)
• If you are in the EU or the UK — the data protection authority of the country where you live or work, or where the alleged infringement took place

8. Security

All traffic between your browser and our servers is encrypted with HTTPS/TLS. Access to personal data is limited to staff who need it to deliver our services. Credentials entrusted to us for Fixed Price Services are kept in encrypted vaults and deleted on completion.

9. Children

Our services are intended for businesses. We do not knowingly collect data from children.

10. Changes

We update this policy when our practices or the law change. The date at the top shows the latest revision; material changes are announced to active clients by e-mail.

11. Contact

For any questions about this privacy policy or your personal data, contact us at info@optimum-web.com. We aim to respond to privacy-related inquiries within 5 business days.