Privacy policy

Last updated: 8 September 2026. This policy explains which personal data we process, why, for how long and what your rights are, in line with Law no. 195/2024 on personal data protection of the Republic of Moldova (in force since 23 August 2026) and Convention 108+.

1. Data controller

BARRISOL SRL (ECOMOTION brand), Sfatul Țării 4, Chișinău, MD-2009, Republic of Moldova. Data-protection contact: info@ecomotion.md, phone +373 22 00-00-08. We are not required to appoint a data protection officer; requests are handled by the administrator.

2. What we process and why

• Enquiries and communication (phone, WhatsApp, e-mail, chat widget): name, phone number, e-mail address, message content and the model you are interested in. Purpose: to answer, prepare an offer and, if you wish, arrange a viewing or purchase. Basis: pre-contractual steps at your request and our legitimate interest in answering enquiries.
• Customer records (CRM): contact details and the history of our conversations are kept in our CRM system, hosted on our own server in the Republic of Moldova. Basis: performance of the contract and legal obligations (accounting, warranty).
• Usage statistics (Google Analytics 4, only with your consent): pages viewed, device type, clicks on contact buttons, with the IP address anonymised. We do not build individual profiles. Basis: consent (art. 7).
• Marketing (Meta Pixel — Facebook/Instagram, only when active and only with your consent): measuring our campaigns and showing our ads again. Basis: consent.
• Technical data: server logs (IP address, time, requested page) are kept for security for at most 30 days. Basis: legitimate interest (system security).

The website does not create user accounts, does not sell online and never asks for payment details. We do not process special categories of data.

3. Cookies and consent

We use only strictly necessary cookies (your language, your cookie decision, staff login). The contact widget, statistics and marketing are enabled only after you click “Accept all” or tick the categories you want in the consent window. Consent is separate for each category, valid for 12 months and can be withdrawn at any time via “Cookie settings” in the footer. Details: Cookie policy.

4. Who receives the data

• Our employees who answer enquiries, within their duties.
• Our CRM system (hosted on the company server in the Republic of Moldova) — not a third party; the data never leaves our control.
• Google Ireland Ltd. (Google Analytics 4) — only if you accepted statistics; data may be processed in the USA under Google’s standard contractual clauses. The IP address is anonymised before storage.
• Meta Platforms Ireland Ltd. — only if you accepted marketing and only while the pixel is active.
• Public authorities, where the law requires it.

Communication via WhatsApp is additionally governed by WhatsApp’s (Meta) privacy policy. We never sell or rent personal data.

5. Retention

• Enquiries without a purchase: up to 12 months after the last contact, then deleted.
• Customers: for the duration of the contractual relationship plus the statutory archiving periods (accounting — 6 years).
• GA4 statistics: 14 months (Google Analytics setting), aggregated.
• Consent and language cookies: 12 months. Server logs: 30 days.

6. Your rights

Under Law no. 195/2024 you have the right of access, rectification, erasure, restriction of processing, data portability, objection and to withdraw consent at any time (without affecting earlier processing). Write to info@ecomotion.md — we answer within 30 days at the latest. You may also lodge a complaint with the National Center for Personal Data Protection (CNPDCP), 48 Serghei Lazo St., Chișinău, datepersonale.md.

7. Security

Data is stored on the company server in the Republic of Moldova with access limited to authorised staff, encrypted connections (HTTPS), backups and internal procedures. Any security incident that poses a risk to you is notified to the CNPDCP within 72 hours and, where required, to the people affected.

8. Changes

We update this policy when our services or the law change; the current version is the one published on this page, dated at the top.