Updated 25 September 2026
Information about the contact form, client accounts, data retention and exercising your rights.
Note. This text describes the current technical operation of the website and identifies the operator; it should be reviewed by an adviser before use as a legal document.
The controller is MOLDOVAN LUX S.R.L., based in Iași, tax identification number 30342978, registered with the Trade Register under no. J22/1026/21.06.2012.
For any questions about your data, you can contact us at moldovanlux@gmail.com.
The contact form asks for your name, email address, optional organisation, selected subject and message. We do not request other data or use hidden profiling fields.
There is one hidden field: an anti-bot trap that must remain empty. Its contents are not stored or sent anywhere.
Your message is sent to our server and saved in a database hosted on that server. A notification containing the name, email address, organisation, subject and message you entered is sent through Google's Gmail service to moldovanlux@gmail.com so we can respond to your enquiry.
We also send an automatic receipt through Gmail to the email address entered in the form. The confirmation does not include the message text or organisation details.
Access to saved messages is restricted: only the administrator account can view them. They are not public and do not appear anywhere on the website.
We do not store your IP address alongside your message. IP addresses are used temporarily, only in server memory, to limit repeated submissions and block bots.
Creating an account is optional. If you create one, we store your name, email address and an irreversible password hash (scrypt). We cannot read or recover your password.
We verify your email address using a link sent through Gmail, valid for 24 hours. Password recovery uses a separate single-use link valid for 30 minutes. Resetting the password ends existing sessions. Your account only displays requests sent while signed in; earlier requests are not linked automatically.
Sign-in uses a strictly necessary session cookie valid for 30 days, which is deleted when you sign out.
We process your message to respond and, where appropriate, prepare a proposal. The basis is our legitimate interest in responding to a business enquiry from you, or taking pre-contractual steps.
We keep the message for as long as needed for our discussion and subsequent legal obligations. You can request deletion at any time. Individual records can be deleted, and we will do so where there is no legal retention obligation.
Browsing without signing in does not require cookies. Customer accounts and administration use a cookie strictly necessary for authentication, valid for 30 days for customers and 12 hours for administrators. We do not use traffic analytics or load third-party fonts, maps or scripts.
Your theme preference is saved locally in your browser using localStorage, under dan-enache-theme. It is not sent to us and is removed when you clear the website’s data. The language is determined by the page address: English pages use the /en/ prefix.
Like any web server, the server hosting this website records IP addresses and accessed pages in technical logs used for operation and security.
You have the rights of access, rectification, erasure, restriction, objection and portability under Regulation (EU) 2016/679. You can contact us using the email address on the contact page to exercise any of these rights.
If you are not satisfied with our response, you have the right to lodge a complaint with Romania's National Supervisory Authority for Personal Data Processing.