Privacy Policy

This page explains what happens to personal data when you use min-code.com. It is written to be read, not to be survived: if something here is unclear, write to us and we will explain it and fix the wording.

Who is responsible for your data

The controller is MinCode Group, based in Chișinău, Republic of Moldova. We decide what is collected through this website and why. You can reach us at contact@min-code.com.

We process personal data under Law no. 195/2024 on the protection of personal data, which has applied in the Republic of Moldova since 23 August 2026 and replaced Law no. 133/2011. That law transposes the EU General Data Protection Regulation (EU) 2016/679, which also applies directly where a visitor or client is in the European Union.

Data protection officer

We have not designated one. Under Law no. 195/2024 that appointment is required of public authorities, and of organisations whose core activity is large-scale systematic monitoring of people or large-scale processing of special categories of data such as health or biometric data. None of those describes what this website does. Data protection questions go to contact@min-code.com and are answered by the people who run the company.

What this website collects

Only what you type, plus the minimum needed to stop the forms being abused — and, only if you allow it in the cookie banner, analytics and advertising measurement, described under Cookies below. There is no chat widget and no third-party embed on this site.

The contact form

• What: your name, company name, email address and the message itself, and — if you give them — your phone number and a budget range. We also record that you accepted the Terms & Conditions and read this policy.
• Why: to answer you. Nothing more.
• Legal basis: steps taken at your request before entering a contract, and our legitimate interest in replying to enquiries.
• Where it goes: to contact@min-code.com as an email, and to a log file on our server so a message is never lost if the mail fails. Your name, company and email address — not the message itself — also go to a Telegram notification so we see that you wrote.
• How long: up to 24 months from the last exchange, then deleted. If the enquiry becomes a project, the data moves under the contract and is kept as long as the law on accounting records requires.

The newsletter form

• What: your email address, the date, the page you subscribed from, and your IP address.
• Why: to send you the guides you asked for, and to be able to prove when and from where consent was given.
• Legal basis: your consent, which you can withdraw at any time by writing to us.
• How long: until you unsubscribe.

Abuse prevention

• What: your IP address and the time of submission.
• Why: both forms allow five submissions per hour per IP address. Without this the forms become a spam relay within days.
• Legal basis: our legitimate interest in keeping the service working.
• How long: the rate-limit record is discarded after one hour.

Server logs

Our web server keeps standard access logs — IP address, time, the page requested, browser type. These exist for security and troubleshooting, are not linked to anything else, and are rotated and deleted after 12 months.

Cookies and similar technologies

Nothing optional runs until you choose. On your first visit a banner offers three equal choices — accept all, reject all, or choose by category. Until you decide, and if you reject, this website sets no cookies and sends nothing to Google or Meta: Google Tag Manager, which carries the tools below, is not loaded at all.

Always on

Kept in your browser's local storage, on your device only. Neither is a cookie and neither identifies you.

• template.theme — your light or dark choice, written only when you click the theme switch.
• mincode.consent — the choice you made in the cookie banner, so we do not ask on every page.

Both are strictly necessary to do what you asked for, so they need no consent.

Only with your consent

The legal basis is your consent. Refusing costs you nothing: every page and both contact forms work exactly the same either way.

Changing your mind

Use “Cookie settings” at the bottom of any page. Withdrawing consent stops collection from that moment: we delete the analytics and advertising cookies this site set and reload the page so the tools stop running. It does not affect what was collected lawfully before. Cookies Meta sets on facebook.com are managed in your Facebook settings.

Who else sees your data

Without your consent, only the three below are involved. With it, Google and Meta join them, as described after the list.

• our hosting provider, which operates the server the site runs on;
• our email provider, which delivers the messages the contact form sends;
• Telegram, which alerts us that an enquiry has arrived. It receives only your name, your company and your email address — never your message, your phone number or your IP. We use it so nobody waits a day for a reply because an email went unnoticed.

All three act on our instructions as processors. Fonts and all other assets are served from our own server, so unless you allow analytics or marketing, no external provider receives your IP address by loading this page.

If you allow analytics, Google Ireland Limited processes the analytics data on our behalf, as our processor, under Google's data processing terms.

If you allow marketing, Meta Platforms Ireland Limitedreceives data about your visit through the Meta Pixel. For collecting and sending that data, we and Meta are joint controllers; what Meta then does with it is governed by Meta's own privacy policy.

Where your data is processed

The server that runs this website is located in TO BE CONFIRMED, and our email provider operates in TO BE CONFIRMED. Where a provider is outside the Republic of Moldova, the transfer takes place under the safeguards Law no. 195/2024 requires — an adequacy decision, or standard contractual clauses in the contract with that provider. If you allow analytics or marketing, Google and Meta may process that data in the United States — for visitors in the EU on the basis of the EU–US Data Privacy Framework, and otherwise under the standard contractual clauses in their terms. We do not transfer your data anywhere else, and we do not sell or rent it to anyone.

Automated decisions

None that produce legal or similarly significant effects. A person reads every message that arrives and a person answers it. If you allow marketing cookies, Meta may use data from the Pixel to decide which adverts to show you on Facebook and Instagram — that is profiling for advertising, which is why it happens only with your consent and stops when you withdraw it.

Whether you have to give us anything

No. There is no legal or contractual obligation to fill in either form. Giving us an email address is simply the only way we can reply — without it there is nothing we can do with your message.

Your rights

You can ask us to:

• tell you what data we hold about you, and give you a copy;
• correct anything that is wrong;
• delete it;
• restrict or object to how we use it;
• hand it to you or another provider in a portable format;
• withdraw a consent you gave, which does not affect what was lawful before.

Write to contact@min-code.com. We answer within 30 days. We do not charge for this and we do not require a particular form of words.

If you think we have handled your data badly, you can complain to the National Center for Personal Data Protection of the Republic of Moldova — datepersonale.md, centru@datepersonale.md, (022) 820 801. If you are in the EU, you can also complain to the supervisory authority where you live. You do not have to raise it with us first, though we would rather you did.

Security

The site is served over HTTPS. Form submissions are rate-limited and checked for the common injection patterns. Message logs and the subscriber list are stored outside the public web directory, so they cannot be requested over the web. Access is limited to the people who need it.

No system is perfect. If you find a security problem with this site, write to contact@min-code.com and we will treat it seriously.

If personal data are ever breached, we notify the National Center for Personal Data Protection without undue delay and within 72 hours of becoming aware of it, as article 36 of Law no. 195/2024 requires. Where the breach is likely to put your rights at serious risk, article 37 requires us to tell you as well, in plain language — and we will.

Children

This site is aimed at businesses. We do not knowingly collect data from children. If you believe a child has sent us personal data, write to us and we will delete it.

Changes

When this policy changes, the date at the top changes with it. Material changes are announced on this page before they take effect.

Who to contact

MinCode Group, Chișinău, Republic of Moldova. Email contact@min-code.com, phone +373 78 787 772.