Privacy Policy

1. Who the controller is

The controller of your personal data is Keywords SRL, a legal entity registered in the Republic of Moldova, IDNO 1022600016037, which operates the powermedia.md website under the Powermedia brand.

• ●Registered address: MD-6526, r-l Anenii Noi, s. Mereni, str. Dumbravelor 88
• ●Correspondence address: bd. Iuri Gagarin 10, Chișinău, MD-2001
• ●Email: vlad@keywords.md
• ●Phone: +373 68 996 315

For any question about your data, or to exercise the rights described below, write to vlad@keywords.md. We respond within 30 days at the latest.

2. Applicable legal framework

We process personal data in accordance with Law no. 133/2011 on the protection of personal data and, from 23 August 2026, in accordance with Law no. 195 of 25 July 2024 on the protection of personal data, which fully transposes Regulation (EU) 2016/679 (GDPR).

This policy is written to meet the requirements of Law no. 195/2024 from the moment of publication, even though some of them only become binding on 23 August 2026.

3. What data we collect and why

We collect only the data we actually need. We do not buy databases and we do not gather information about you from other sources.

Contact form. When you write to us through the form on the site, we collect:

• ●the name you provide — so we know who we are replying to;
• ●your phone number — a required field, because most enquiries are resolved faster by a call;
• ●your email address — optional, used only if you prefer a written reply;
• ●the content of your message and the language you wrote in.

This data is sent to us by email and lands in our mailbox. We do not store it in a separate database and we do not use it to send you unsolicited commercial messages.

Usage statistics (only with your consent). If you accept analytics cookies, Google Analytics collects data about how the site is used: pages visited, visit duration, device type and IP address. If you decline, Google Tag Manager is not loaded at all and this data is not collected. Details are in the Cookie Policy.

Server technical logs. Our hosting provider automatically records the IP address, request time and browser type, for the operation and security of the site. These logs are necessary to deliver the site and to detect abuse.

4. Legal basis for processing

Each processing activity has its own legal basis:

• ●Contact form messages — your consent, given by ticking the box at the form. You can withdraw it at any time by writing to the address above; withdrawal does not affect the lawfulness of processing before withdrawal.
• ●Analytics cookies — your consent, given through the cookie banner. You can withdraw it at any time from the Cookie Policy.
• ●Strictly necessary cookies and server logs — our legitimate interest in delivering a working and secure website. Without them the site cannot be provided.

5. Who we share data with

We do not sell your data. We do not pass it to anyone for marketing purposes. We share it only with the providers that help us run the site, each processing it exclusively on our instructions:

• ●Vercel Inc. (USA) — website hosting. Processes technical logs and, in transit, the form content.
• ●Resend (Resend, Inc., USA) — delivery of emails sent from the contact form.
• ●Google LLC (USA / Ireland) — Google Analytics and Google Tag Manager, only if you accepted analytics cookies.
• ●Google LLC — the email service through which we receive messages, used as a technical alternative to Resend.

We may also disclose data to public authorities where the law requires it and within the limits of that obligation.

6. Transfers outside the Republic of Moldova

The providers listed above are established in the United States of America and the European Union, which means your data is transferred outside the Republic of Moldova.

These transfers take place on the basis of standard contractual clauses concluded with each provider and the safeguards they offer. You may request information about the applicable safeguards by writing to our contact address.

7. How long we keep data

• ●Contact form messages — at most 24 months from our last communication with you, after which they are deleted. If you become a client, the relevant data is kept for the duration of the contractual relationship and afterwards according to statutory archiving periods.
• ●Analytics data — according to the retention periods configured in Google Analytics, at most 14 months.
• ●Server technical logs — short periods set by the hosting provider, typically under 30 days.
• ●Your cookie choice — 12 months, after which we ask again.

8. Your rights

In relation to your personal data you have the following rights:

• ●the right of access — to find out whether we process data about you and to receive a copy of it;
• ●the right to rectification — to have inaccurate data corrected or incomplete data completed;
• ●the right to erasure — to have your data deleted when we no longer have a legitimate reason to keep it;
• ●the right to restriction of processing — to have processing suspended in certain situations;
• ●the right to data portability — to receive your data in a structured, commonly used and machine-readable format;
• ●the right to object — to object to processing based on our legitimate interest;
• ●the right to withdraw your consent at any time, as easily as you gave it;
• ●the right not to be subject to a decision based solely on automated processing — we make no such decisions on this site.

To exercise any of these rights, write to us at vlad@keywords.md. We reply within 30 days at the latest. Exercising your rights is free of charge. We may ask you to confirm your identity, so that we do not disclose your data to someone else.

9. Right to lodge a complaint

If you believe we are infringing your rights, please write to us first — most of the time we can resolve the matter directly. You are, however, always entitled to contact the supervisory authority:

• ●National Center for Personal Data Protection (CNPDCP)
• ●str. Serghei Lazo 48, MD-2004, Chișinău
• ●datepersonale.md

You also have the right to bring the matter before a court.

10. Data security

The site is served exclusively over an encrypted connection (HTTPS). Access to messages received through the form is limited to the people who need them in order to reply to you. Our providers are chosen from among those offering guarantees regarding the security of processing.

No system is perfectly secure. If a security breach occurs that may affect your rights, we will inform you and notify the authority, as required by law.

11. Children

Our site and services are aimed at companies and adults. We do not knowingly collect data from children. If you learn that a child has sent us data, write to us and we will delete it.

12. Changes to this policy

We may update this policy when the way we work or legal requirements change. The version in force is always the one published on this page, and the date of the last update is shown at the top.

If a change is significant we will notify you visibly on the site, and if it concerns cookies we will ask for your consent again.