Privacy policy

1. Controller

The controller is the company below. For any question about your data, write to us at the email address shown.

2. What we process and why

We process only the data you give us or that the website needs to work:

• The contact form and dealer applications: your name, email, phone (optional) and message, to answer you and, at your request, to prepare an offer. Legal basis: steps taken at your request before entering into a contract, and our legitimate interest in answering enquiries.
• The website chat: the messages and, if you leave them, your name and contact details, so that a manager can talk with you. Legal basis: our legitimate interest in answering questions.
• Document downloads: your email, name and company (the last two optional) and the requested document, to record the request and to be able to answer questions about the document. Legal basis: our legitimate interest. Declining the marketing agreement never blocks the download.
• The marketing agreement, only if you tick its separate box: your email, to send you news about Moduline products and offers. Legal basis: consent. We keep the evidence: the accepted wording, its version, the date and the language.
• Technical data: the IP address and request data, used only for security and to limit automated submissions.

3. How long we keep data

• Contact form and chat enquiries: as long as needed to answer you and for the business relationship that follows, then deleted.
• Document requests without a marketing agreement: 2 years after the last request, then deleted automatically.
• Marketing data: until you withdraw your consent; afterwards we keep only the evidence of the consent and its withdrawal, as long as needed to be able to prove it.

4. Who receives the data

We do not sell personal data. Only as far as necessary, it may reach:

• ViTRA, MODULINE's sales partner, and authorised dealers, when your request concerns an offer or a delivery;
• the providers that host and protect the website (DigitalOcean servers, the Cloudflare delivery and security network);
• Telegram, through which our team receives notifications of new requests.

5. Transfers abroad

Some of the providers above process data on servers in the European Union or in other countries. We only use providers that offer appropriate data protection safeguards under the applicable law.

6. Your rights

You have the right to access your data, to have it rectified or erased, to restrict its processing, to data portability and to object to processing — including, at any time, to processing for marketing. You can withdraw the marketing agreement at any time through the unsubscribe link in every message or by writing to us; withdrawal does not affect processing carried out before it. We answer within 30 days.

You also have the right to lodge a complaint with the National Center for Personal Data Protection of the Republic of Moldova or, where the GDPR applies to you, with the supervisory authority of your country.

7. Security

The website works over HTTPS only. Data is validated on the server, automated submissions are limited, access to the admin panel is restricted to authorised staff by role, and views and exports of contacts are logged.

8. Cookies

How we use cookies and similar technologies is set out in the Cookie policy, where you can also change your preferences.