Privacy and cookie policy
MEGA TREND SRL processes your personal data in accordance with Law no. 133/2011 and Law no. 195/2024 on the protection of personal data — which fully transposes Regulation (EU) 2016/679 (GDPR) and enters into force on 23 August 2026 — as well as directly with the GDPR, where it applies to visitors from the European Economic Area.
1. Who we are
The controller that decides why and how the data collected through this site is processed is:
- Name: MEGA TREND SRL
- IDNO: 1024600001138
- Address: str. București 23a, Chișinău, Republic of Moldova
- E-mail: megatrend@gmail.com
- Phone: +373 78 345 345
- Website: megatrend.md
For any question about your data, or to exercise the rights described below, write to us at the e-mail address above. We reply within 30 days at the latest.
2. What data we collect
We collect strictly the data we need in order to answer your requests and to understand how the site is used. We never ask for payment details on the site.
- Data you give us — the name and phone number filled into the free consultation form. These are the only required fields and the only data that reaches the sales team.
- Data about where your visit came from — the campaign parameters
utm_source,utm_medium,utm_campaign,utm_content,utm_term, the click identifiersgclidandfbclid, the first page you opened and the site you arrived from. They tell us which ad or channel brought you to us. - Technical data collected automatically — IP address, browser type and version, operating system, device type, language, date and time of access, pages visited.
- Data about how you interact with the pages — clicks, scrolling, cursor movement and a recording of the browsing session, collected by Yandex Metrica through the Webvisor feature, only if you accept analytics cookies. The contents of form fields are masked by the provider and never reach us.
- Data kept in your browser — your language preference, your cookie choice and the data about where your visit came from, saved in
localStorageandsessionStorage.
We do not intentionally collect special categories of data — concerning health, ethnic origin, political or religious beliefs, sexual life or biometric data — and we ask you not to send us such information through the form.
3. For what purposes and on what legal basis
Every processing operation has a stated purpose and a legal basis. Here they all are:
| Purpose | Data used | Legal basis |
|---|---|---|
| We contact you after you submit the form and prepare an offer for you | Name, phone | Your consent and steps taken at your request before a possible contract |
| We keep a record of requests in our CRM system | Name, phone, data about where the visit came from | Our legitimate interest in managing incoming commercial requests |
| We measure traffic and improve the site | Technical data, interaction data, analytics identifiers | Your consent |
| We measure advertising effectiveness and run remarketing | Advertising identifiers, data about where the visit came from, the name and phone irreversibly turned into hashes | Your consent |
| We keep the site secure and avoid recording the same request twice | IP address, phone number | Our legitimate interest in keeping the service working |
| We meet accounting and tax obligations and respond to requests from the authorities | The data relevant to each obligation | Legal obligation |
Where the basis is consent, you can withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out beforehand.
5. Who we share data with
We do not sell your data and we do not make it available to anyone for their own marketing. We share it only with the providers we need in order to work, each under a contract and only for the purpose in the table:
| Recipient | What it receives | Where it is processed |
|---|---|---|
| Bitrix24 — our CRM system | Your name, phone and the data about where the visit came from, as a client record | The European Union or the United States, depending on the account region |
| Telegram — the internal notification to the sales team | Your name, phone and the campaign you came from | The provider's servers, outside the Republic of Moldova |
| Meta Platforms Ireland Ltd. | The conversion event, together with the name, phone, IP address and user agent irreversibly turned into hashes — only if you accepted marketing cookies | Ireland and the United States |
| Google Ireland Ltd. | Pseudonymised usage data, for Analytics, Tag Manager and Ads | Ireland and the United States |
| Yandex | Pseudonymised usage data and browsing session recordings | The Russian Federation and Finland |
| The hosting and site delivery provider | The server's technical logs, including the IP address | The European Union and the United States |
We may also disclose data to public authorities where the law requires it, and to our accounting or legal advisers, who are bound by confidentiality.
6. Transfers outside the Republic of Moldova
Some of the providers above process data outside the Republic of Moldova and the European Economic Area. These transfers are made on the basis of the standard contractual clauses adopted by the European Commission, of the applicable adequacy decisions, or — for the analytics and marketing services — on the basis of your explicit consent, given through the cookie banner.
We draw your attention in particular to the fact that Yandex Metrica processes data on servers located in the Russian Federation, a state that does not benefit from an adequacy decision from the European Commission. If you do not want this transfer, decline analytics cookies — the service will not be loaded at all.
7. How long we keep data
- Form requests and CRM records — 3 years from the last contact, if you do not become a client. If you do become a client, for the duration of the collaboration plus the statutory accounting and tax archiving periods.
- Internal notifications sent over Telegram — 12 months at most.
- Analytics and marketing data — the durations in the cookie table, 2 years at most.
- The server's technical logs — 12 months at most.
- The record of your cookie choice — 12 months, after which we ask for your consent again.
Once these periods expire the data is deleted or irreversibly anonymised.
8. Your rights
In relation to your data you have the following rights, which you can exercise free of charge:
- The right of access — to find out whether we process data about you and to receive a copy of it.
- The right to rectification — to have inaccurate data corrected and incomplete data completed.
- The right to erasure — to have the data deleted when it is no longer needed or when you withdraw your consent.
- The right to restriction of processing — to have the use of the data paused while we check a complaint of yours.
- The right to portability — to receive the data you provided to us in a structured, machine-readable format.
- The right to object — to object to processing based on our legitimate interest, including profiling for marketing purposes.
- The right to withdraw your consent — at any time, without affecting the lawfulness of earlier processing.
- The right not to be subject to an automated decision with significant effects on you. We take no such decisions on this site.
Write to us at megatrend@gmail.com with the subject “Personal data”. We reply within 30 days at the latest and may ask you for reasonable proof of identity, so that we do not disclose someone else's data.
If our answer does not satisfy you, you can lodge a complaint with the National Centre for Personal Data Protection: str. Serghei Lazo 48, MD-2004, Chișinău · +373 22 820 801 · centru@datepersonale.md · datepersonale.md. Visitors from the European Economic Area may also contact the supervisory authority in their own country.
9. Data security
The site is served exclusively over HTTPS, and the form transmits data encrypted. Access to the CRM records is limited, through individual accounts, to the team members who need them. The data sent to Meta for ad measurement is irreversibly turned into hashes before it leaves our server — neither the name nor the phone number goes out in the clear.
If a security breach does occur that could affect your rights, we notify the National Centre for Personal Data Protection within 72 hours and inform you directly where the risk is high.
10. Children's data
Our services are addressed to companies and to adults. We do not knowingly collect data from children under 16. If you find out that a child has sent us data, write to us and we will delete it immediately.
11. Changes to this policy
We may update this policy when our services, our providers or the law change. The version in force is always the one published here, and the date of the last update appears at the top of the page. If the change concerns the purposes you gave your consent for, we will ask for it again.
Your cookie settings
You can change your choice at any time. Strictly necessary cookies stay active, because without them the site does not work.