Last updated: 22.10.2026
Effective date: 22.10.2026
Version history: v1.0 — first published version.
This text is a translation. The Romanian version is the reference version and prevails in case of discrepancies.
- IDNO (tax code): 1025600034254
- Address: Chișinău, 65 Mitropolit Varlaam Street, office 232
- E-mail for personal data requests: office@mastech.com
We process data in accordance with Law No. 195/2024 on the protection of personal data, in force since 23 August 2026. Processing before that date was governed by Law No. 133/2011, repealed on the same date.
This policy applies to data processed through the mastech.md website and its language versions, the contact form and the contact channels indicated on the website. Data processing within projects carried out for clients is governed by the contract concluded with each client.
What we do | Data processed | Legal basis |
Receive a request sent through the contact form, reply to you and prepare an offer | name, company name, phone, e-mail address, message | Article 6(1)(b) of Law No. 195/2024 — pre-contractual steps taken at your request, when you request services in your own name; Article 6(1)(f) — our legitimate interest in communicating with the representative of a potential client, when you act on behalf of a company |
Keep a record of requests and correspondence | the same data, date and channel of the request | Article 6(1)(f) — legitimate interest in ensuring continuity of communication and replying consistently to repeated requests |
Ensure the operation and security of the website | IP address, device and browser type, pages accessed, date and time | Article 6(1)(f) — legitimate interest in keeping the website operational and preventing attacks and abuse |
Measure website traffic | identifiers stored in cookies, browsing data and visit source | Article 6(1)(a) — consent, given through the cookie banner |
Assess the effectiveness of advertising campaigns and show ads to website visitors (remarketing) | advertising identifiers from cookies, page view and request submission events | Article 6(1)(a) — consent, given through the cookie banner |
Determine whether a request came from an ad (only with consent to marketing cookies) | to Google Ads — the e-mail address and phone number from the form; to Meta — the e-mail address, phone number and name; in hashed form (SHA-256) | Article 6(1)(a) — consent, given through the cookie banner |
Manage the company's social media pages | data you communicate directly on those platforms: comments, messages | Article 6(1)(f) — legitimate interest in communicating with the public |
Form data and advertising platforms. If you have accepted marketing cookies, when you submit the form some of your contact details are converted in the browser into an encrypted code (SHA-256 hash) and sent to advertising platforms: to Google Ads — the e-mail address and phone number; to Meta — the e-mail address, phone number and name. The platforms use these codes to determine whether the request was preceded by a click on one of our ads and to assess the effectiveness of campaigns. The message, the company name and the content of the request are never transmitted. Without consent to marketing cookies, form data is not transmitted to advertising platforms. You can withdraw consent at any time via the „Cookie settings" button.
We do not make automated decisions that produce legal effects concerning you or similarly significantly affect you, within the meaning of Article 22 of Law No. 195/2024.
Special categories of data. We do not request health data or other special categories of data through the website. Please do not include them in your message.
Client projects. When, under a contract, we run campaigns, websites, applications or information systems for a client and process the data of its customers or users in that context, we act as a processor on behalf of and on the instructions of the client (Article 28 of Law No. 195/2024). In such cases the client is the controller, and the conditions of processing are set out in the contract.
Minors. The website is intended for companies and adults and is not directed at children.
- the provider of the website platform, the forms and the request management system, as a processor;
- the provider of the service protecting the website against automated attacks, in respect of technical access data;
- the e-mail service provider, through which we receive and handle requests;
- providers of web analytics and online advertising tools — only on the basis of consent given through the cookie banner; they receive browsing data, and Google Ads and Meta also receive contact details from the form in hashed form, as described in clause 2;
- social network operators, in respect of data you communicate directly on those platforms;
- public authorities, courts and criminal investigation bodies, at their request, in the cases provided by law;
- legal advisers, in the event of a dispute.
- the website platform is managed by a company in the United Arab Emirates, with data stored on servers in European Union member states and technical support from the Republic of Kazakhstan;
- the attack protection service processes technical access data on servers outside the Republic of Moldova;
- analytics and advertising tools (Google, Meta) process data in the United States of America and the European Union.
Category | Period |
Requests sent through the form that did not lead to a contract, together with correspondence | 12 months from the last contact |
Requests that led to a contract | for the duration of the contract and thereafter for the periods required by accounting, tax and civil legislation |
Data collected through cookies | according to the lifetime of each cookie, shown in the settings panel — see the Cookie Policy |
Statistical data in the web analytics tool | no more than 14 months |
Remarketing lists | no more than 180 days from the last visit |
Requests to exercise rights and our replies | 3 years from resolution, to demonstrate compliance (Article 5(2) of Law No. 195/2024) |
Right to object to legitimate interest. Where we process data under Article 6(1)(f), you may object on grounds relating to your particular situation (Article 21(1)).
Right to object to direct marketing. You may object at any time to the processing of your data for direct marketing; we then stop processing it for that purpose (Article 21(2) and (3)).
Limitations. The right to erasure does not apply to data we are required to keep by law or that we need to establish, exercise or defend legal claims (Article 17(3)).
Send requests to office@mastech.com; we handle them within one month of receipt (Article 12(3)); this period may be extended by two months for complex requests, in which case we will inform you within the first month.
If you believe the processing infringes your rights, you may lodge a complaint with the National Center for Personal Data Protection, MD-2004, Chișinău, 48 Serghei Lazo Street, datepersonale.md, or apply to a court.
In the event of a personal data breach, we notify the National Center for Personal Data Protection within 72 hours (Article 33), and if the breach poses a high risk to your rights, we also inform you (Article 34).
Related documents: Cookie Policy, Terms of Use.
