Zásady ochrany soukromí
Aktualizované právní informace jsou zatím dostupné v angličtině. Údaje provozovatele jsou dočasné.
Operator and contact
Updated 12 October 2026. This is a draft with temporary operator details: TEMPORARY — operator not confirmed; country: TO BE CONFIRMED; address: TEMPORARY — address not confirmed; privacy email: privacy@example.invalid. The example.invalid address is not a working contact. Until these details are replaced, use Contact Us for privacy questions. Come to Moldova is a project name, not a verified legal entity. The operator must confirm the applicable law, legal bases and international-transfer arrangements before treating this notice as final.
Data collected without a form
Opening the website sends your IP address and technical request information to the hosting infrastructure, even if you do not submit a form. Security and service logs may contain IP addresses, request times, requested pages, browser information and response status. They are used to deliver the site, investigate failures and prevent abuse. The application does not deliberately log enquiry text, passwords or verification tokens, and does not store IP addresses with enquiries. Temporary IP-based abuse counters use a 10-minute window; expired entries are removed on subsequent checks or a server restart. The configured host is Render, with Frankfurt selected for the service; this does not establish the location of every provider log or backup. Actual hosting log and backup retention remain to be confirmed.
Enquiries, purpose and retention
Forms collect your name, email, topic, message and language; business enquiries also collect a company name. Transport requests include relevant dates, flight number, pickup/destination addresses, passenger count, car category, journey duration and waiting time. We use these details to respond and discuss the service you requested, not for advertising. Providing required fields is necessary to process the request; sending a form does not confirm a booking. Enquiries are held in a private server database, with access through the protected administrator inbox. Each enquiry has a reference number, not a reusable visitor ID. Completed enquiries are eligible for deletion 12 calendar months after being marked processed; cleanup runs on the next inbox or successful intake activity. Reopening a request cancels its completion date. Older completed records without a date start this period when migrated. Open enquiries require periodic review; backup copies have a separate, still unconfirmed retention schedule. Requested pre-contractual steps may support service enquiries; responding to general enquiries and security may rely on legitimate interests where applicable. These bases require confirmation for the operator’s circumstances. Do not send passports, card details or sensitive information.
Cookies, browser storage and your choice
Cookies and local/session storage remember information in your browser. moldova-language remembers a manual language choice for up to one year; moldova-trip stores trip preferences for the tab’s session. moldova-detected-country stores only a country code and lookup time for that session, reused for up to one hour. Session restoration by your browser can extend a session. moldova-consent-v1 remembers acceptance or rejection for 180 days. The administrator-only moldova_admin cookie lasts 30 minutes and is HttpOnly, SameSite=Strict and Secure on the production server. These functions do not depend on agreeing to analytics. Optional Google Analytics and the local click counter stay off until you accept. Reject optional is available alongside Accept all; Customise lets you choose, and Cookie settings in the footer lets you withdraw at any time. Withdrawal stops future analytics and clears accessible first-party analytics cookies and local counters; it does not erase data already received by Google. You can also clear site storage in your browser. Expired local records are cleaned when the site next accesses them, not while your browser is closed.
Optional Google Analytics and identifiers
With consent, Google Analytics 4 measures visits and interactions, using cookies such as _ga and _ga_<id> to recognise a browser across visits. This is pseudonymous information, not a guarantee of anonymity. Requests expose your IP to Google, and analytics may include browser/device information, approximate region, language, page visits and events. Our code sets analytics cookies to 180 days without renewal on each page load; Google account data-retention settings are separate and have not yet been verified. Our page-view configuration removes query strings and fragments and reduces the referring URL to its origin. Custom click events use item/category, page, language and destination domain, without enquiry text or precise coordinates. The consented local counter, moldova-click-counts-v1, holds daily counts in this browser only; entries outside the last 30 UTC calendar days are removed on load or use. The site does not set a separate persistent visitor ID or a Google User-ID. Google signals and advertising personalisation signals are disabled in the code; no Meta Pixel or advertising tracker is installed. Google’s account-level enhanced measurement, sharing and retention settings still need verification. Analytics does not send events from localhost.
Location and external services
For departure-country and language suggestions, your browser contacts IPWhois (ipwho.is), which receives your IP and returns a country code. This functional lookup can run before analytics consent; rejecting analytics does not prevent it. The primary browser language is read for language suggestions. Country detection can be inaccurate with a VPN; you can select country and airport manually. Show nearest airport requests location only when you choose it and allow your browser’s permission prompt. Coordinates are used for distances in your browser, not saved by our site or sent to a booking provider. Cloudflare Turnstile loads on enquiry forms to prevent automated abuse and processes network/device signals independently of optional analytics; our server verifies its token and does not save the token with the enquiry. Google, Cloudflare, IPWhois and hosting providers may process information outside your country under their own arrangements. The operator must confirm relevant contracts and transfer safeguards. External booking links open Kiwi.com, Booking.com or property websites; a search may pass the dates and destination you select, and affiliate identifiers may appear if enabled. These providers handle their own privacy and bookings. Our forms do not automatically forward your message to them.
Your rights and changes
Depending on applicable law, you may request access, correction, deletion, restriction or portability of your information, object to processing based on legitimate interests, withdraw consent, and complain to the relevant supervisory authority. Use Contact Us while the privacy contact remains temporary; provide only enough information to locate your enquiry. Reasonable identity verification may be needed, but do not send identity documents unless a secure and necessary method is agreed. Withdrawal does not affect processing already lawfully carried out. The site does not use automated decisions producing legal or similarly significant effects. We will date updates to this notice and seek a new choice when required for a material change to optional tracking. Unconfirmed operator, hosting, backup and Google-account details mean this draft is not a completed compliance declaration.