Privacy policy

Last updated: September 2026

We respect your privacy and are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR – EU Regulation 2016/679) and Law No. 133/2011 on the protection of personal data of the Republic of Moldova. This Privacy Policy explains how we collect, use, store, and protect your data when you visit and use our website.

1. Who collects your data?

The personal data controller is: SC Creator – Iu. Bors SRL

Registered office / Address: com. Trușeni, str. Calea Trușenilor, 91

Registration number / IDNO: 1002600038422

Contact E-mail: office@creator.md

2. What data do we collect and for what purpose?

We collect only the data strictly necessary to provide you with a safe and optimal experience:

Data provided voluntarily through forms (Name, E-mail, Phone, Message):

  • Purpose: To respond to your requests, messages, or questions.
  • Legal basis: Your explicit consent (checked before submitting the form) and our legitimate interest in communicating with our clients.

Automatically collected technical data (IP address, browser type, visited pages):

  • - Purpose: For statistical analysis, website optimization, and security against cyberattacks (spam).
  • Legal basis: Consent granted through the cookie banner for statistical trackers and legitimate interest for strictly necessary cookies (security).

3. How long do we keep the data? (Retention period and criteria)

We retain your personal data only as long as necessary to fulfill the purposes mentioned above (for example, to answer your requests or provide you with technical/commercial assistance), with a standard retention period of 24 months from the last interaction. The criteria used to determine our retention periods include: the duration required to provide the requested services, the existence of specific legal, fiscal, or accounting obligations (which may require a longer storage period under applicable laws), and the statutory limitation periods for defense against potential legal claims.

4. International data transfers (Moldova and USA)

Certain data may be processed outside the EEA (such as the USA via Google Analytics, reCAPTCHA, and Microsoft) using Standard Contractual Clauses, or stored locally in the Republic of Moldova in compliance with equivalent security norms.

  • United States of America (USA): Services like Google Analytics, Google reCAPTCHA, and Microsoft are used under standard contractual clauses.
  • Republic of Moldova: Data may be processed locally under equivalent security standards. These transfers require consent or strict necessity.

5. Your rights under the law

As a user, you benefit from all the rights provided by data protection regulations (including GDPR for EU residents). These include:
- Right of access: The right to obtain confirmation as to whether or not your data is being processed.
- Right to rectification: The right to obtain the correction of inaccurate personal data.
- Right to erasure („the right to be forgotten”): The right to request the deletion of your data from our database.
- Right to restriction of processing: The right to request that we limit the way we use your data.
- Right to object: The right to object to the processing of your personal data at any time.
- Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit those data to another controller.
- Right to withdraw consent: The right to withdraw your consent for processing at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
To exercise any of these rights, you can send a simple request by e-mail to: office@creator.md.
Right to lodge a complaint: If you believe that our processing of your personal data infringes data protection laws, you have the legal right to lodge a complaint with a competent supervisory authority. You may address the National Center for Personal Data Protection of the Republic of Moldova (CNPDCP) or, if you are a resident of the European Union, the data protection supervisory authority in the EU Member State of your habitual residence, place of work, or place of the alleged infringement.

6. Data security

Rigorous technical and organizational measures, including HTTPS/SSL encryption, are implemented to prevent unauthorized access or loss of personal data.