Privacy Policy

Last updated: 10/23/26. Version 2.0.

This policy explains what personal data we process when you visit daacdigital.com, contact us via a form, register for an event, or subscribe to our invitations: for what purposes, on what legal basis, to whom we disclose it, how long we retain it, and what rights you have. This policy complies with Law No. 195/2024 on the protection of personal data. You can find details about cookies in the Cookie Policy, and information about customer and business partner data in section 4.10.

1. Who We Are

The controller of your personal data is DAAC System Integrator S.R.L. (DAAC digital brand), IDNO 1006600054871, with its registered office at 10 Calea Ieșilor St., MD-2069, Chișinău, Republic of Moldova.

General contact: [email protected], phone +373 22 509 709 (Monday–Friday, 9:00 a.m.–6:00 p.m.). For questions and requests regarding your personal data, please contact the Data Protection Officer (Section 2).

This website presents the DAAC Digital group of companies. If your request concerns another company in the group, we will forward it to that company (see Section 5).

2. Data Protection Officer

If you have any questions or requests regarding your personal data, including the exercise of your rights (Section 8), please contact our Data Protection Officer at [email protected].

3. What Data Do We Process?

3.1. Information You Provide to Us

• contact form and request for quote: first and last name, company, job title, email, phone number, subject, and message;
• Event registration: first and last name, company, job title, email address, phone number;
• invitations and updates, if you check the consent box: your name, email address, company, and job title, along with the date and time of your consent;
• application for a job opening: contact information and resume, including the details you include in it;
• Technical information sent along with certain forms: the URL of the page from which you submitted the form and, if you came from a campaign, the source, channel, and campaign name (UTM parameters).

Please do not include in your messages or resume any information that is not necessary for the application, particularly health-related information or other special categories of data.

3.2. Automatically Collected Data

• IP address, browser and device type and settings, language;
• pages visited, duration of the visit, source of the visit, and actions taken on the site;
• online identifiers stored in cookies or similar technologies.

Statistical and marketing data are collected only if you have given your consent in the cookie banner. See our Cookie Policy for details.

4. For what purposes and on what legal basis do we process data?

The grounds listed below are those provided for in Article 6(1) of Law No. 195/2024.

4.1. Responding to Requests and Preparing Proposals

• Data: the information provided in the contact form and subsequent correspondence.
• Legal basis: pre-contractual measures taken at your request (lit. b); when you write to us on behalf of the company where you work, our legitimate interest in responding to requests and communicating with customers and business partners (lit. f).
• Retention: 24 months from the last communication, if no contract is concluded; if a contract is concluded, for the duration of the contract and 5 years after its termination.

4.2. Event Planning

• Data: the information provided on the registration form, confirmation, and attendance at the event.
• Legal basis: registration for and participation in the event you requested (lit. b) or, when you register on behalf of the company, our legitimate interest in organizing the event (lit. f). Messages strictly related to the event (confirmation, schedule, changes, post-event materials) are part of the event’s organization.
• Partners: We do not share participants’ data with our partners (IT solution providers with whom we organize events). Partners receive only general information, such as the number of participants. If a partner requests your contact information, we will only provide it with your prior consent.
• Events on the partner’s platform: When registration—for example, for a webinar—takes place on the partner’s platform, the partner collects and processes the data in accordance with its own privacy policy. We receive, at most, statistical data, such as the number of times the link in our invitation was clicked.
• Retention: 12 months after the event.

4.3. Photos and videos from events

• What we do: Photos and videos may be taken at events and published on our website, on social media, and in event-related materials. We will inform you of this when you register and upon entering the venue.
• Basis: our legitimate interest in presenting the company’s activities (lit. f); for close-up shots or interviews, your consent (lit. a) .
• Objection: You may ask us at any time not to photograph you or to remove images in which you appear, to the extent possible for materials that have already been published.

4.4. Event Invitations and News (Direct Marketing)

• Data: name, email address, company, job title, date and time of consent; when messages are sent via an email platform, as well as delivery, message opens, and link clicks.
• Legal basis: your consent (lit. a), expressed separately through checkboxes that are unchecked by default.
• Unsubscribe: You can unsubscribe at any time, just as easily as you subscribed: by clicking the “Unsubscribe” link at the bottom of any message, by replying with the text “Unsubscribe,” or by sending a message to the address listed in Section 2.
• Recipients: the provider of the platform through which we send messages, acting as an authorized representative (Section 5).
• Retention: until consent is withdrawn or, at most, 2 years after your last interaction with our messages (for example, an open, a click, or an event registration). After you withdraw your consent, we’ll only keep your email address on an opt-out list so we don’t contact you anymore.

4.5. Website Usage Statistics

• Tools: Google Analytics 4, only with your consent; Independent Analytics, installed on our server, without cookies and without sharing data with third parties.
• Legal basis: consent (lit. a) for Google Analytics; our legitimate interest in understanding website usage (lit. f) for statistics on our own server.
• Retention period: Google Analytics, 14 months; statistics on our own server, 24 months.

4.6. Advertising and Campaign Measurement

• Tools: Google Ads, Meta Pixel (Facebook, Instagram), and LinkedIn Insight Tag.
• What we do: We determine whether visits and inquiries come from our campaigns and show ads to people who have visited the site.
• Data: online identifiers, IP address, pages visited, and actions taken on the site, such as submitting a form. If you have accepted marketing cookies, when you submit a form, the contact information you entered is transmitted in an irreversibly encrypted (hashed) form: your email, phone number, and name to Meta, and your email to Google, in order to link your visit to a campaign.
• Legal basis: your consent (lit. a), as expressed in the cookie banner under the “Marketing” category.
• Joint controllers: For the collection and transmission of data via Meta Pixel, DAAC System Integrator S.R.L. and Meta Platforms Ireland Limited may act as joint controllers (Art. 26); the essence of the agreement between them is published here.
• Retention: cookies, in accordance with the Cookie Policy; data held by third-party providers, in accordance with their respective policies.

4.7. Website Security and Form Protection

• Tools: Google reCAPTCHA, server logs, strictly necessary cookies.
• Data: IP address, browser and device information, interactions with the page.
• Legal basis: our legitimate interest in protecting the website and forms from spam and abuse (lit. f).
• Retention: server logs, [to be completed in collaboration with the IT team].

4.8. Recruitment

• Information: the details provided in the application form and resume.
• Legal basis: precontractual measures at your request (subparagraph b); after the recruitment process is complete, our legitimate interest in responding to any potential complaints (lit. f); to retain your resume for future job openings, your consent (lit. a).
• Retention: 6 months after the end of the recruitment process; 24 months after consent is given, if you have agreed to have your information retained for future job openings.

4.9. Legal Obligations and the Protection of Rights

• Legal basis: the company’s legal obligations (subparagraph c) and our legitimate interest in defending our rights (subparagraph f), for example, in response to a request from the authorities or in the event of a legal dispute.
• Retention: the time periods provided by law or until the dispute is finally resolved.

4.10. Customers and Business Partners

If you are a representative or contact person for a customer or partner, the processing of your data in connection with offers, contracts, delivery, licensing, and technical support is described in the Privacy Policy for Customers and Business Partners [link].

5. Who We Share Data With

• DAAC Digital employees handling your request (sales, marketing, event planning, IT), with limited access to only what they need.
• Companies in the DAAC Digital Group, when the request concerns them: DAAC Software Systems (Republic of Moldova), DAAC Systems Integrator (Romania), DAAC System (Uzbekistan).
• Vendors that process data on our behalf (data processors, Art. 28): Cloudflare, the network through which the website is hosted and which protects it from attacks [to be confirmed with the IT team]; the provider of the platform through which we send invitations and updates, exclusively to subscribers; the email service provider, if the email service does not run on our own servers (to be confirmed with the IT team). The website, backups, and the customer relationship management (CRM) system run on the company’s own servers.
• Statistics and advertising providers, only with your consent: Google (Google Analytics, Google Ads, reCAPTCHA), Meta Platforms (Facebook, Instagram), LinkedIn. For certain processing activities, they act as independent data controllers, in accordance with their own policies.
• Event partners, only with your prior consent (section 4.2).
• Public authorities, when required by law.

We do not sell your personal data.

6. Transfers outside the Republic of Moldova

Google, Meta, LinkedIn, and Cloudflare also process data outside the Republic of Moldova, including in the European Economic Area (EEA) and the United States of America. Contracting entities: Google Ireland Limited and/or Google LLC; Meta Platforms Ireland Limited and/or Meta Platforms, Inc.; LinkedIn Ireland Unlimited Company and/or LinkedIn Corporation; Cloudflare, Inc. (to be confirmed in the service agreements). For the invitation-sending platform, the entity and server location are to be confirmed.

• Transfers to EEA countries do not require special authorization (Article 44(2) of Law No. 195/2024).
• For transfers to the U.S., as of the date of this policy, there is no decision by the CNPDCP regarding the adequate level of protection for the U.S. (to be verified); we rely on the standard data protection clauses adopted by the European Commission and included in the contractual terms of these providers (Art. 46(2)(c)).
• Information about these warranties and a copy of them can be obtained upon request at the address listed in Section 2.

7. How long do we retain the data?

The retention periods are specified for each purpose in Section 4. Upon expiration of these periods, the data is deleted or anonymized. A longer retention period applies only when required by law or to defend a legal claim in court.

8. Your Rights

Under Articles 15–22 of Law No. 195/2024, you have the right to:

• to access your data and receive a copy of it;
• to have inaccurate or incomplete data corrected;
• the right to have data erased (“the right to be forgotten”);
• to restrict processing;
• the right to data portability regarding the data you have provided to us;
• to object to processing based on our legitimate interest, for reasons related to your particular situation;
• not to be subject to a decision based solely on automated processing;
• to withdraw your consent at any time (Section 9);
• to file a complaint with the CNPDCP (Section 10).

How to exercise your rights: Write to the Data Protection Officer at the address listed in Section 2. We will respond without undue delay, no later than one month after receiving your request; for complex requests, this period may be extended by an additional two months, and we will notify you of this extension within the first month. Our response is free of charge. If we have reasonable doubts regarding your identity, we may ask you for additional information (Art. 12).

9. Withdrawal of Consent

• Cookies: the “Cookie Settings” link at the bottom of any page.
• Invitations and updates: the “Unsubscribe” link at the bottom of any message, a reply with the text “Unsubscribe,” or a message sent to the address listed in Section 2.
• Saving Your Resume for Future Job Openings: Send a message to the address listed in Section 2.

Withdrawal is just as simple as granting consent and does not affect the lawfulness of processing carried out prior to withdrawal (Art. 7, para. (3)).

10. Complaint to the supervisory authority

If you believe that the processing of your data violates the law, you may file a complaint with the National Center for Personal Data Protection: 48 Serghei Lazo St., MD-2004, Chisinau; tel. +373 22 820 801; email [email protected]; www.datepersonale.md. You may also take the matter to court. Please contact us first so that we can resolve the situation as quickly as possible.

11. Are you required to provide us with your information?

No. Providing your information is voluntary. Fields marked with * are required so that we can respond to you or register you for the event; without them, we cannot process your request. Declining statistics and marketing cookies does not restrict access to the site.

12. Automated Decisions and Profiling

We do not make decisions based solely on automated processing that produce legal effects on you or similarly affect you. If you accept marketing cookies, Google, Meta, and LinkedIn may use the data to show you more relevant ads, i.e., to create advertising profiles. You can withdraw your consent at any time.

13. Data Security

We implement technical and organizational measures appropriate to the risk: encrypted connections (HTTPS), access to data limited to those who need it, backups, system updates, and staff training. In the event of a security incident, we notify the CNPDCP without delay, typically within 72 hours of discovery, and when the risk to you is high, we will also notify you (Articles 33 and 34).

14. Children

This website is intended for companies and professionals. We do not intentionally collect data from individuals under the age of 18.

15. Links to Other Websites

This website contains links to partner websites and social media platforms. These sites have their own privacy policies, for which we are not responsible.

16. Policy Change

We update this policy when the law changes or when we change the way we process data. The date of the last update is indicated at the top of the page. We will notify you of any significant changes on our website and, when applicable, by displaying the cookie banner again.