Privacy and cookie policy

Version 1.1 of 02.10.2026

1. Who we are

The personal data controller is “Ecosanteh” SRL, IDNO 1003600037640, MD-2023, Chișinău municipality, N. Zelinski str. 12 (hereinafter — the “Controller”). This policy applies to the website pacsengineering.com.

For any questions about your data, to exercise your rights or to withdraw consent, write to [email protected].

2. What data we receive and why

• Orders on the website and your account: first name, last name, phone, e-mail, delivery address (city, district, postal code), for companies — name, IDNO and legal address; contents and amount of the order. Purpose — to place, fulfil and support the order and to maintain your account. Legal basis — the contract with you and steps taken at your request before entering into it (art. 6 para. (1) lit. b) of Law no. 195/2024), as well as our accounting and tax obligations (art. 6 para. (1) lit. c).
• Callback requests and request forms on the website: name, phone, e-mail, company name, site address, text of the request and attached files. Purpose — to answer the request and prepare an offer. Legal basis — steps taken at your request (art. 6 para. (1) lit. b).
• Product reviews: the name, review text and rating are published on the website. Legal basis — your consent (art. 6 para. (1) lit. a).
• Newsletters: e-mail — only if you subscribed yourself. Legal basis — consent. You can unsubscribe via the link in the e-mail.
• Visiting the website: IP address, page address, browser and device data, time of the request — in server logs and at the website protection service. Purpose — operation and security of the website, protection against bots. Legal basis — our legitimate interest (art. 6 para. (1) lit. f).
• Cookies and similar technologies — see section 5.

Without the data marked as required in the forms we will not be able to fulfil the order or answer the request. We do not make automated decisions that have legal effects for you.

3. Who we share data with

The data is accessed by our employees who need it for their work. In addition, the data is processed by providers that render services to us:

• Hetzner Online GmbH — website hosting (server in Finland);
• Cloudflare, Inc. — website delivery and protection;
• Meta Platforms (Meta Pixel).

We also disclose data to public authorities where the law requires it.

Payment. We do not receive or store bank card data. Payment by invoice is made by transfer through your bank. If online payment is available on the website, it takes place on the bank's secure page: card data is entered only on the bank's side, over an encrypted connection (HTTPS), and the bank verifies the payment itself. We do not influence this process and have no access to card data.

4. How long we keep data

• Orders and related documents — while the order is being fulfilled, and then for the periods set by accounting and tax legislation.
• Requests and enquiries without an order — as long as needed to answer and complete communication on the request; then we delete them, unless the law requires keeping them longer.
• Server logs — up to 52 days.
• The record of your cookie choice and other consents — while the consent is valid and up to 3 years after its withdrawal, so that we can demonstrate that consent was given (art. 7 para. (1), art. 72 para. (2) of Law no. 195/2024).
• Cookies — the periods are given in section 5.

5. Cookies

Cookies are small files that the website saves in your browser. We use:

• Strictly necessary (always on): session, login and cart. Legal basis — art. 116 para. (6) of Law no. 72/2025: the website cannot work without them.
• Advertising (Meta Pixel; cookie _fbp, up to 90 days) — to measure advertising and show it to those who have already visited the website.

On your first visit we ask for your choice: “Accept all”, “Reject optional” or “Customize”. You can change your choice or withdraw consent at any time via the “Cookie settings” link at the bottom of every page. Analytics and advertising cookies are used only with your consent; if you rejected them or withdrew consent, they are not used.

Cookies can also be deleted or blocked in your browser settings.

6. Your rights

You may: access your data and obtain a copy; have it corrected; request its erasure; restrict processing; receive the data in a machine-readable format (portability); object to processing, including direct marketing; withdraw consent at any time — as easily as you gave it; withdrawal does not affect the lawfulness of processing before it.

How: write to [email protected]. We reply free of charge within one month. If the request is complex or there are many requests, the period may be extended by two more months — we will inform you about this within the first month (art. 12 para. (3) of Law no. 195/2024). To protect your data, we may ask you to confirm your identity.

7. Complaint

If you believe that we infringe your rights, you may lodge a complaint with the National Center for Personal Data Protection or go to court.

8. Changes

We update this policy when the processing of data changes. The version number and date are given at the beginning of the document.