Privacy Policy

1 Who is responsible for your data

The controller is VEV Group S.R.L., a company registered in the Republic of Moldova, fiscal code 1021600019824, with its registered office at MD-2064, 47 Ion Neculce Street, Chișinău.

For anything in this policy, write to contact@vevdev.com or call +373 (79) 02-65-52.

2 What we collect, and why

2.1 When you send us a project request

The request form on this site collects your full name, phone number, email address, company or product name, the service and budget range you select, your message, and a file if you choose to attach one.

We use this only to read your request, reply to you and prepare an offer. The legal basis is the taking of steps at your request before entering into a contract — Article 6(1)(b) GDPR, and Article 6(1)(b) of Law No. 195/2024. Providing the data is voluntary, but without it we cannot answer you.

2.2 When you simply visit

Our server records the usual technical data every web server records: your IP address, the time of the request, the page requested, and the browser and operating system you use. This is kept to run the site and to detect abuse, on the basis of our legitimate interest — Article 6(1)(f) GDPR.

3 Cookies

This site sets one cookie, csrftoken, which exists solely to stop a third-party site from submitting the request form on your behalf. A second cookie, messages, is set when you send a request, to carry the confirmation message from one page to the next. Both are strictly necessary for the site to work safely, so no consent banner is required for them.

This site uses Google Analytics 4, but only if you consent. Google Analytics sets two cookies, _ga (kept for two years) and _ga_EZWXZQTJ8N (kept for one year), to measure how often pages are visited and how visitors move around the site. These cookies are set only if you have given consent in the consent banner; if you refuse, the tracking script does not run at all, and no Google cookies are placed.

You can change your choice at any time using the consent banner that appears when you visit. If the banner has disappeared, you can bring it back. How to do this will be shown on the page that manages consent.

Google Analytics data is transferred to the United States. The transfer is based on Standard Contractual Clauses included in Google's data processing agreement with our firm, under Article 46(2)(c) of Law No. 195/2024, without requiring authorization. You can obtain a copy of these clauses by writing to us at contact@vevdev.com.

4 Who else sees your data

We do not sell your data and we do not share it for marketing. Your request is read by our own team and stored on our server.

To make sure a request is not missed, the site also notifies us the moment one arrives, and those notifications pass through two services:

• Email. Your request is emailed to our team, and a short confirmation is emailed back to you. Our mailboxes are hosted by Namecheap Private Email.
• Telegram. A copy of the request is sent to our internal team channel on Telegram. If you attached a file, the file is sent there too.

Both are used only so that your request reaches a person quickly. Neither is used for marketing, and we do not give either service permission to use your data for its own purposes.

One thing happens automatically when the home page loads, and you should know about it because it involves your IP address:

• The rotating globe on the home page loads its code from esm.sh. That server receives your IP address.

We may also disclose data where the law of the Republic of Moldova requires it.

5 How long we keep it

Project requests are kept for three years from the date of your request, so that we can pick up a conversation that pauses and so we can prove what was agreed. After that, the request and any file you attached are deleted from our server.

The notification copies described in section 4 — the emails in our mailboxes and the message in our Telegram channel — are not part of that deletion. If you ask us to remove them, we do it by hand. Server logs are kept for a short operational period and then overwritten.

6 Where your data is stored

The request itself is stored on our server, in the European Union — specifically in Germany — with a hosting provider under a signed data processing agreement. Under the law of the Republic of Moldova, moving data within the European Economic Area is free — Article 44(2) of Law No. 195/2024 — so this is not a transfer.

Copies also leave the country, and you should know where. The notifications described in section 4 travel through our email provider, Namecheap Private Email, and this site is also served through Cloudflare, which sits in front of it and therefore handles your request on its way to us; both are based in the United States, so both count as a transfer outside the European Economic Area. A copy also reaches Telegram, as part of the same notifications, but Telegram does not publish where its servers are, so we cannot say whether that copy counts as a transfer too.

If you consent to Google Analytics, those measurements are sent to Google's servers in the United States. The transfer is based on Standard Contractual Clauses included in Google's data processing agreement, under Article 46(2)(c) of Law No. 195/2024, without requiring authorization. You can obtain a copy of these clauses by contacting us.

7 Your rights

You may ask us at any time to:

• tell you what data we hold about you, and give you a copy;
• correct anything that is wrong or incomplete;
• delete your data;
• restrict what we do with it, or object to us using it;
• send it to you, or to someone else, in a machine-readable form;
• stop processing based on consent, where consent was the basis.

Write to contact@vevdev.com. We answer within one month. There is no charge.

For what happens if we need more time, or if we refuse a request, see our Data Subject Requests page.

If you think we have handled your data badly, you can complain to the National Centre for Personal Data Protection of the Republic of Moldova. If you are in the European Union, you may complain instead to the supervisory authority of the country you live or work in.

8 Security

The site is served over an encrypted connection. Access to stored requests is limited to the people who need it. Attached files are never published: they are kept outside the public part of the site and can only be downloaded by a signed-in member of our team.

9 Children

This site is aimed at businesses. We do not knowingly collect data from anyone under 16. If you believe a child has sent us data, write to us and we will delete it.

10 Changes to this policy

If we change how we handle data, we change this page and update the date at the top. The version published here is always the one that applies.