GeoMetric Design · version 2026-09-25.1
Privacy policy
Clear information about GeoMetric Design's processing of personal data under Law no. 195/2024.
This translation is provided for convenience. If wording differs, the Romanian version prevails.
1. Controller and contact
The controller is GeoMetric Design — Gheorghe Ciolac, independent entrepreneur.
Privacy requests: proiectebazis@gmail.com, +37360027449. The personal registered address is not published here and is provided only where the law requires it.
2. Data collected
An individual's initial request asks for name, phone, email, contact preference, project details, and necessary files. IDNP is not requested in the initial form.
For a legal entity, company name, IDNO/CUI, staff count, and necessary commercial details may be requested. During the collaboration, account, project, communication, stage, payment, document, access, and security data may be processed.
3. Photos, plans, and files
Uploads may contain home photos, plans, measurements, addresses, documents, technical files, and property information. They are private and used only to review, perform, verify, and deliver the project and protect the parties' rights.
Remove unrelated information and do not provide third-party data without a lawful basis.
4. Purposes and legal bases
Request review relies on pre-contractual steps taken at your request. Accounts, project management, communications, file delivery, and payments are necessary to perform the requested collaboration.
Accounting and authority disclosures rely on legal duties. Security and legal claims rely on legitimate interests where applicable. Marketing would require separate, optional, withdrawable consent.
5. Required and optional data
Required fields are needed to process the request. Optional fields may be left blank without losing the service.
Further information is requested later only for a specific legal, tax, or contractual need.
6. Recipients and providers
Access is restricted to authorised persons. OpenAI Sites and Cloudflare provide hosting, database, storage, and delivery infrastructure; Resend sends transactional email; OpenAI authentication protects ADMIN access.
Data is not sold. Payment providers or authorities receive necessary data only when the feature is used or the law requires it.
7. International transfers
Some providers may process data outside Moldova. Transfers must use mechanisms permitted by Law no. 195/2024 and applicable contractual safeguards.
Countries, roles, and safeguards are periodically verified against current provider documentation and contracts.
8. Retention
Archiving does not mean indefinite retention. Rejected and cancelled requests are reviewed; Recycle Bin content is permanently deleted after 90 days. Completed and archived projects are kept only for delivery, support, contractual duties, and legal claims.
Tax and contract records follow statutory periods; expired tokens, revoked sessions, and technical logs have short security periods. Backup and statutory periods are confirmed in the internal register.
9. Your rights
Subject to Law no. 195/2024, you may request access, correction, deletion, restriction, portability where applicable, and object to processing based on legitimate interests.
Consent may be withdrawn for the future. You may complain to the CNPDCP.
10. Making a request
Use the contact details in section 1. Reasonable identity verification may be required.
A deletion request is reviewed: unnecessary data may be erased or anonymised, while records needed for legal, tax, contractual, or legal-claims purposes are not deleted automatically.
11. Cookies
The site currently has no analytics, advertising, or marketing services or cookies, so it does not display a false consent banner.
Only strictly necessary, secure cookies support client and ADMIN authentication. Future analytics or marketing will not run before consent where required.
12. Security
Safeguards include server-side access control, expiring sessions and tokens, cryptographically derived passwords, attempt limits, file validation, private storage, and limited security logs.
Incidents are assessed and documented; CNPDCP and affected people are notified where legally required.
13. Updates
This policy may change with services, providers, or law. Its version and date appear on this page.