Legal
Privacy policy
What personal data DOMORA S.R.L. collects, why, who receives it, and the rights you have over it.
This is the notice required by Articles 13 and 14 of the GDPR. It covers this website and the enquiry form on it. Personal data reaches us in one way: what you choose to type into that form.
If you are a client, the personal data we process under your contract is covered by the information notice annexed to that contract, which you receive and sign with it. This page is not that notice and does not restate it.
Throughout, “you” means the person whose data this is, and “we”, “us” and “Domora” mean the company named in the first section.
Who controls your data
The controller — the company that decides why your data is processed and how — is Societatea cu Răspundere Limitată DOMORA, which trades as DOMORA S.R.L. and is registered in the Republic of Moldova under IDNO 1026023132130. Its administrator is Cristina Istrati.
Write to us at miron.cristina91@gmail.com. That is the address for every question about this notice and for every request under the rights set out below.
Our registered seat is recorded in the state register of legal entities of the Republic of Moldova, which is public and can be searched against the IDNO above, and we give it to you in writing if you ask. We do not print it here for the same reason we do not print the address we register clients at: they may be the same address, and an address a client is registered at is never published by us.
Domora is established in Moldova, which is outside the European Economic Area. The GDPR applies to us anyway, under Article 3(2)(a), because we offer our services to people in the European Union. Because we also address the United Kingdom, the UK GDPR applies in parallel, and Moldova’s own data protection law, Law 195/2024, applies to us domestically.
We have not appointed a Data Protection Officer, and one is not required here: we carry out no large-scale systematic monitoring and process no special categories of data at scale.
What we collect
The only thing on this site that asks you to type anything is the enquiry form, and this is its list of fields.
You must give us three things, because without them there is no enquiry we can answer:
- Name
- Email address
- Message — whatever you choose to write in it
You may also give us, and may leave blank:
- Phone number
- Company name
- Country
- Plan — which of our four plans you are asking about
The form also sends the language of the page you were on, so that we reply in the language you were reading. Leaving an optional field blank costs you nothing: we answer enquiries that carry only the three required fields exactly as we answer the rest.
That is the whole list. We operate no accounts, no logins and no online payment, so there is no password and no card or bank detail collected anywhere on this site; the service is invoiced and paid by bank transfer outside it. We ask for no special categories of data — health, beliefs, biometrics and the rest — and you should not put any into the message field, because a free-text box is not a safe place for them. The site is not directed at children.
Everything we hold about your enquiry came from you, typed into that form. We do not buy contact lists, and we do not enrich an enquiry with data from third-party sources. We make no automated decision about you — nothing here decides anything with a legal or similarly significant effect — so the Article 22 protections have nothing to bite on.
Why, and on what legal basis
| What we do | Why | Legal basis |
|---|---|---|
| Read and answer your enquiry | To reply to you, and to take the steps you have asked for before a contract exists | Article 6(1)(b) — steps taken at your request prior to entering a contract |
| Serve this website and keep it available | To deliver the pages you ask for, and to protect a public site from abuse | Article 6(1)(f) — our legitimate interest in running a site that works and is not misused |
No marketing consent is collected. We reply to enquiries. We do not send newsletters or offers, there is no opt-in box on the form, and none is implied by its absence. An enquiry is never treated as consent to be marketed to. If that ever changes, we will ask for consent first, prospectively — we will not read it backwards into enquiries already sent.
Where we rely on legitimate interest, you may object under Article 21 and we will consider the objection on its merits.
Who receives your data
We do not sell your data. We buy no advertising, we run no ad network tag, and we hand nothing to a data broker.
To publish this site and to answer you, we use a small number of service providers, each acting on our instructions and none of them free to use your data for its own purposes. Article 13(1)(e) allows a notice to give the categories of recipient rather than name each company, and that is what the table does: the providers behind these categories are expected to change over time, and a name printed here would go out of date faster than this notice is republished. If you want to know which providers we are using at any given moment, ask at the address above and we will tell you.
| Who | What they receive | Why |
|---|---|---|
| A website hosting provider | Your IP address, in access logs, when you load a page | Serving the pages of this site |
| A hosted application platform in the European Union | The enquiry fields, for the length of the one request that carries them | Receiving what the form sends |
| A messaging platform | Your enquiry | Notifying us that an enquiry has arrived |
| An email service provider | Correspondence between you and us, once we reply | Providing the mailbox we answer you from |
Beyond that table, and any authority or court that can lawfully compel us, nobody receives your data.
The fonts this site uses are served from our own domain rather than from a font provider’s network, so loading a page does not hand your IP address to a third party for the sake of a typeface.
Transfers outside the European Economic Area
Domora is established in Moldova, and some of the providers in the table above are established outside the European Economic Area. Your data is therefore transferred outside it.
Chapter V of the GDPR governs those transfers and requires an appropriate safeguard for each one. We are putting those safeguards in place, and each will be named here, with the date it was checked, as it is completed. If you want the position on a particular transfer before then, ask at the address above and we will set it out for you in writing.
How long we keep it
We keep an enquiry for one year, counted from the day it reaches us, after which it is deleted. That period is enforced automatically rather than by anyone remembering to do it.
We run no customer database on this site, so once that period has passed there is nothing else of yours to purge: no second store and no archive.
Your rights
You have the following rights over your data, and exercising any of them is free:
- Access (Article 15) — a copy of what we hold about you, and the information in this notice applied to your own case.
- Rectification (Article 16) — correction of anything inaccurate, and completion of anything incomplete.
- Erasure (Article 17) — deletion of what we hold.
- Restriction (Article 18) — a pause on our use of your data while a dispute about it is resolved.
- Portability (Article 20) — what you gave us, back in a machine-readable form.
- Objection (Article 21) — to processing we base on legitimate interest.
- Not to be subject to a solely automated decision (Article 22) — we make none, so there is nothing to contest.
Send a request to miron.cristina91@gmail.com. Begin the subject line with “GDPR” — for example, “GDPR — erasure request”. That is not a formality. It is a shared inbox, and the convention is what lifts your request above a week of sales enquiries so that it is answered inside the statutory deadline rather than found after it.
We answer within one month of receiving the request, as Article 12(3) requires. For a genuinely complex request we may take up to two further months, and if we do, we will tell you inside that first month that we are taking them and why. Silence for a month is not something this notice permits us.
We may need to ask you for enough information to find your enquiry — in practice, the email address you sent it from. We ask for that to avoid handing your data to somebody else, not to slow you down, and we will not use it for anything other than answering the request.
Complaints
If you think we have handled your data wrongly, tell us first if you would like to — we would rather fix it — but you are under no obligation to come to us before going to a regulator.
You have the right to complain to a supervisory authority. If you are in the European Union, that is the authority of the country where you live, where you work, or where the problem happened. If you are in the United Kingdom, it is the Information Commissioner’s Office. In Moldova it is the National Centre for Personal Data Protection.
None of this affects your right to go to court, or to seek compensation for damage caused by unlawful processing.
Cookies and analytics
What is stored on your device when you visit this site, and how to change your choice, is set out in the cookie policy. It is a separate document so that the two cannot drift apart, and this notice does not restate it.
Nothing on this site measures you today. No analytics runs on it, nothing counts your visit, nothing records it and nothing builds a profile of you. If that changes, it will happen only behind a consent you have given first, and a new version of this notice will describe it — what is collected, who receives it, on what basis and for how long — before any of it is collected.
Changes to this notice
This document carries a version number and an effective date, both printed at the top of this page. They are how you know which text describes what we are currently doing.
When our processing changes, we publish a new version with a new number and a new effective date. We do not silently edit the version that is in force, and superseded versions stay available so you can see what was true when you wrote to us. Where a change adds a purpose you previously consented to something narrower for, your old consent does not carry over: you are asked again.
Questions about this document? Get in touch