Privacy policy

Who we are

The data controller is socialmediamarketing.md, of Chișinău, Republic of Moldova. For any question about your data, write to us at [email protected].

In short

• You can read the whole site without telling us who you are.
• We receive data about you only when you send us the audit form or write to us.
• Statistics cookies (Google Analytics) are saved only if you agree, and you can change your choice at any time.
• We do not sell the data and we do not use it for advertising.

What data we process, why, on what basis and for how long

1. When you visit the site

The server that hosts the site automatically records, on every request: the IP address, the date and time, the page requested, the page you came from and the browser type. We use these records only to keep the site secure and working and to find the cause of errors. Legal basis: our legitimate interest in keeping the site running and secure (art. 6 para. (1) let. f) of Law no. 195/2024). Duration: 180 days, after which the records are deleted automatically.

The site is delivered through the Cloudflare network, which protects it from attacks and loads it faster. On every visit, Cloudflare receives the IP address and the technical data of the request, which it uses only to deliver the page and block abusive traffic.

Cloudflare also counts page views, without cookies and without identifying you. To do this, every page loads a Cloudflare script (static.cloudflareinsights.com) that tells Cloudflare which page was opened, which page you came from, your type of device and browser, your country, determined from your IP address, and how fast the page loaded. The script stores nothing in your browser, and we see only totals, never data about an individual visitor.

Legal basis: our legitimate interest in knowing how the site is used and whether it loads quickly (art. 6 para. (1) let. f) of Law no. 195/2024). Cloudflare keeps this data under its own privacy policy.

2. When you order an audit through the form

Through the audit form we receive: your name, phone number, email (if you leave one), the link to your social media page, the monthly budget you chose, the number of employees and your message, if you write one. The form adds on its own the page language, the page you sent it from and the source of the visit (for example, a link from Instagram), so we know which channel brought you.

With the form, we also receive the city and country estimated from your IP address. If you accepted statistics, we also receive how you reached the site (for example from Google, from Facebook or from an ad), which pages you read, how many visits you made, how long you stayed and the type of device, so we can reply knowing what interests you.

We use this data to do your audit, to call you about it, to send it to you and, if you want, to send you a written offer. We send the audit by email; if you did not leave one in the form, we ask for it on the call. The budget you chose decides only what you get right after sending: a call and the written audit, or a practical guide, which you open right on the site. If you want to talk anyway, write to us and we call you.

Legal basis: the steps prior to a possible contract, which you request when you send the form (art. 6 para. (1) let. b) of Law no. 195/2024).

After you send the form:

• a copy is kept in the site's database, through the Flamingo module of the Contact Form 7 form, together with your IP address and browser type, so the message is not lost if the email does not arrive and so we can recognize abusive submissions;
• our team receives a notification email and an automatic message in a private Telegram group, so we can call you quickly.

Before sending, the form is checked by Cloudflare Turnstile, which tells humans from automated programs by the IP address and technical data about the browser. Turnstile loads only on the form page, when you start using it. Legal basis for the IP address, browser and Turnstile: our legitimate interest in protecting the form from spam and abuse (art. 6 para. (1) let. f) of Law no. 195/2024).

Duration: if we do not end up working together, we delete the data within 2 years of the last message exchanged. If you become a client, we keep it for the duration of the collaboration and then for as long as our legal and accounting obligations require.

3. The emails we send you

If you leave us an email, we immediately send you an automatic message: the confirmation and the next steps, or the link to the guide. The emails go out through Brevo (Sendinblue SAS, France), which receives your email address and the text of the message only to deliver them. Your replies arrive in our mailbox, hosted by Google.

4. The monthly email, only if you ask for it

If you check the box in the form, once a month we send you an email with figures about the Moldovan market, one audit and one tip. Legal basis: your consent (art. 6 para. (1) let. a) of Law no. 195/2024). Every email has an unsubscribe link. After you unsubscribe, we keep only your email address on the unsubscribed list, so we do not write to you again. The monthly email also goes out through Brevo.

5. Your cookie choice

Your choice is kept for 6 months in a cookie in your browser. The site keeps no record of this choice on the server.

6. Visit statistics

Only if you accept statistics cookies do we use Google Analytics 4, loaded through Google Tag Manager, to see, in aggregate, which pages are read, from which devices and where visitors come from. We also count a few actions: sending the form and clicks on the phone number and the email, without tying them to anyone's name.

Google Tag Manager loads on every page, but saves no cookies: it only applies your choice. On loading, Google receives the IP address and the browser's technical data. Until you choose, statistics cookies stay blocked, and Google receives only cookieless signals, which it uses for aggregate estimates.

Also in your browser, and only if you accept statistics, we keep a note about your visits: where you came from, which pages you read and how long you stayed. While you are only reading, the note stays on your device. It reaches us only when you send the form, together with your message, and if you refuse statistics, we delete it from your device.

Legal basis: your consent (art. 6 para. (1) let. a) of Law no. 195/2024), which you can withdraw at any time from the “Cookie settings” link in the page footer. Duration: statistical data is kept in Google Analytics for at most 14 months after your last visit. Details about each cookie are in the Cookie policy.

7. Videos and links

The site does not load videos from Instagram, TikTok, Facebook or YouTube on its own: such a video opens only after you click its link. Your browser then connects to that network, which becomes an independent controller of that data.

The links to our social media accounts are plain links: data reaches those platforms only when you open them, under their rules. What you write to us there we use only to answer you, and we keep it for as long as the data from the form.

Who has access to the data

The data is accessible only to the people on our team who need it to answer you and to the providers below, who process it on our behalf:

• Contabo GmbH (Germany), where the site's server is located;
• Backblaze, Inc. (USA), which keeps the server's encrypted backups, in a data center in the European Union;
• Cloudflare, Inc. (USA), for delivering and protecting the site, counting page views without cookies, the anti-spam check of the form and forwarding the emails sent to [email protected];
• Sendinblue SAS (Brevo, France), for the automatic emails and the monthly email;
• Telegram Messenger Inc., for the team's internal notifications;
• Google Ireland Limited and Google LLC (USA), for our mailbox, for Google Tag Manager and for Google Analytics, which saves cookies only with your consent.

We may pass data to the authorities only if the law obliges us to. We do not sell the data and we do not rent it out.

Transfers outside the Republic of Moldova

Some of the providers above process data outside the Republic of Moldova: in the European Union, in the United States of America or, in Telegram's case, in other countries too. These transfers take place with the safeguards provided by Law no. 195/2024, such as standard contractual clauses, where the provider offers them.

Backups and security

The site uses an encrypted connection (HTTPS). Access to the site, the server and the data is limited to the people on the team who need it. Every night the server makes encrypted backups of the site and the database, kept for at most 12 months, so deleted information disappears from the backups too at the end of that period.

No system is perfect. If an incident puts your data at risk, we notify you and tell you what happened.

How long we keep the data, in short

• server logs: 180 days;
• form data, on the site, in email and Telegram: up to 2 years after the last message, if we do not work together;
• client data: for the duration of the collaboration and then for as long as legal and accounting obligations require;
• the monthly email list: until you unsubscribe;
• your cookie choice, in your browser: 6 months;
• visit statistics: at most 14 months after the last visit;
• backups: at most 12 months.

Your rights

Under Law no. 195/2024 on personal data protection (art. 15-22), you have the right:

• to find out what data we have about you and to receive a copy of it (access);
• to ask for wrong or incomplete data to be corrected (rectification);
• to ask for the data to be deleted, when we no longer have a basis to keep it;
• to ask for processing to be restricted, for example while we check an objection;
• to receive the data you gave us in a structured format and take it to another controller (portability);
• to object to processing based on our legitimate interest;
• to withdraw your consent at any time, without affecting what was done before.

We do not build visitor profiles. The only automated decision is the one in point 2: depending on the budget you chose, you get a call or a guide on the site.

To exercise your rights, write to us at [email protected]. We answer free of charge, within a month; if the situation is complicated, the deadline may be extended by two more months, and we let you know about that within the first month. So that we do not give the data to someone else, we may ask you to confirm that the email address is yours.

If you believe we have violated your rights, you can turn to the National Center for Personal Data Protection, 48 Serghei Lazo St., MD-2004, Chișinău, phone (022) 820 801, [email protected], datepersonale.md, or to the courts.

If you do not give us the data

You are not obliged to give us data. Without a phone number, though, we cannot call you or send you the audit; the email is optional. The site is addressed to companies, and we do not knowingly collect data about children.

Changes

When we change the way we process data, we update this page and the date at the top. Details about cookies are in the Cookie policy, and the site's rules in the Terms and conditions.