Privacy Policy
Version of 23 August 2026
1. Who processes your data
The data controller is SRL „ALANAR-GRUP“ — a company registered in the Republic of Moldova, which owns and operates the website ids-doors.com and the brand IDS — Innovative Doors Systems.
2. Scope of this Policy
This Policy explains what personal data we collect, for what purpose, on what legal basis, whom we share it with, how long we keep it and what rights you have. It applies to visitors of ids-doors.com in all language versions, to customers of our door systems, and to visitors of our showrooms in relation to enquiries and orders.
Processing is carried out in accordance with Law of the Republic of Moldova No. 195/2024 on personal data protection (Official Gazette No. 367-369 of 23.08.2024, art. 574; in force since 23 August 2026), which fully transposes Regulation (EU) 2016/679 (GDPR), as well as Law No. 284/2004 on electronic commerce, Law No. 105/2003 on consumer protection, Law No. 241/2007 on electronic communications and Law No. 287/2017 on accounting and financial reporting.
3. What data we collect
Data you provide yourself:
4. Purposes of processing and legal bases
5. Retention periods
6. Whom we share data with
We do not sell personal data. Data may be shared only with the following categories of recipients and only to the extent necessary:
7. Transfers outside the Republic of Moldova
Some of the services we use (Tilda, Google, Meta) process data on servers located in the European Union and in third countries, including the USA. Such transfers take place subject to the safeguards required by Law No. 195/2024: transfers to countries ensuring an adequate level of protection, or on the basis of standard contractual clauses and other safeguards provided by law. A copy of the safeguards applied can be requested using the contacts in section 1.
8. Cookies
Cookies are small text files that a website stores in your device's browser. Alongside them we use browser local storage, pixels and third-party scripts; the same rules apply to them.
Strictly necessary cookies are set without consent — the website cannot function without them. All others — functional, analytics and marketing — are set only after your prior consent, given through the banner on your first visit. Until you make a choice, optional scripts are not loaded, category toggles are off by default, and continuing to browse or closing the banner does not count as consent.
Categories:
9. Your rights
10. How to exercise your rights
Send your request to alanargrup@gmail.com or in writing to the controller's address. State which right you are exercising and include information allowing us to identify you — for example the phone number or e-mail used in your enquiry, or the order number. We respond within one month of receiving the request; where the request is complex or requests are numerous, this period may be extended by up to two further months, and we will inform you within the first month. Exercising your rights is free of charge; where requests are manifestly unfounded or excessive, in particular repetitive, we may charge a reasonable fee or refuse with reasons.
11. Complaint to the supervisory authority
If you believe that the processing of your data breaches the law, you have the right to lodge a complaint with the National Center for Personal Data Protection (CNPDCP): MD-2004, mun. Chișinău, str. Serghei Lazo 48, phone +373 22 820 801, centru@datepersonale.md, datepersonale.md. You may also bring the matter before a court. We ask you to contact us first — most issues are resolved faster directly.
12. Data security
We apply technical and organisational measures proportionate to the risks: encryption of the connection to the website (HTTPS/TLS), access rights segregation, confidentiality undertakings for employees and contractors, backups and server protection, a record of processing activities and incident logging. In the event of a personal data breach posing a risk to your rights, we notify the CNPDCP within 72 hours and, where the risk is high, you as well.
13. Children's data
The website and services are not directed at persons under 16, and we do not knowingly collect their data. If you believe a minor has provided us with their data, please tell us — we will delete it without undue delay.
14. Changes to this Policy
We may revise this Policy when legislation, the services we use or our processes change. The current version is always published on the website with its date. If changes materially affect your rights, we will inform you separately.
Effective date of this version: 23 August 2026.
Version of 23 August 2026
1. Who processes your data
The data controller is SRL „ALANAR-GRUP“ — a company registered in the Republic of Moldova, which owns and operates the website ids-doors.com and the brand IDS — Innovative Doors Systems.
- Company name: SRL „ALANAR-GRUP“
- IDNO / fiscal code: 1011600002856
- VAT code: 0307598
- Registered address: MD-2060, mun. Chișinău, bd. Dacia 60/5, of. 115, Republic of Moldova
- Operating address: mun. Chișinău, str. Uzinelor 90
- Phone: +373 600 10 050, +373 600 16 050
- E-mail: alanargrup@gmail.com
- Website: https://ids-doors.com
2. Scope of this Policy
This Policy explains what personal data we collect, for what purpose, on what legal basis, whom we share it with, how long we keep it and what rights you have. It applies to visitors of ids-doors.com in all language versions, to customers of our door systems, and to visitors of our showrooms in relation to enquiries and orders.
Processing is carried out in accordance with Law of the Republic of Moldova No. 195/2024 on personal data protection (Official Gazette No. 367-369 of 23.08.2024, art. 574; in force since 23 August 2026), which fully transposes Regulation (EU) 2016/679 (GDPR), as well as Law No. 284/2004 on electronic commerce, Law No. 105/2003 on consumer protection, Law No. 241/2007 on electronic communications and Law No. 287/2017 on accounting and financial reporting.
3. What data we collect
Data you provide yourself:
- your name and phone number — when submitting the consultation form;
- your e-mail address, if you provide it in correspondence;
- order details: site address, door opening dimensions, selected models and configuration;
- data required to draw up the contract, invoice and fiscal document;
- the content of your correspondence with us by e-mail, messengers and phone.
- IP address, approximate city-level location, browser, operating system and device type, interface language;
- date and time of the visit, pages and door models viewed, referral source;
- cookie and similar technology identifiers, conversion data.
4. Purposes of processing and legal bases
- Handling consultation requests, callbacks and questions — name, phone, content of the enquiry. Basis: pre-contractual steps taken at your request.
- On-site measurement, price calculation, preparing a commercial offer — contacts, site address, opening dimensions. Basis: pre-contractual steps.
- Conclusion and performance of the contract: sale, delivery, installation, service — contact details, order and payment data. Basis: performance of a contract to which you are a party.
- Accounting and tax records, issuing fiscal documents — identification and payment data. Basis: compliance with a legal obligation of the controller.
- Warranty service and handling of complaints — order data, correspondence, defect description. Basis: performance of the contract and legal obligation.
- Website analytics — measuring traffic and interface usability — cookie identifiers, IP, on-site behaviour data. Basis: your consent.
- Advertising, remarketing, measuring campaign performance — advertising identifiers, conversion data. Basis: your consent.
- Website security, prevention of fraud and abuse — IP address, technical logs. Basis: the controller's legitimate interest.
- Video surveillance in showroom sales areas — video images. Basis: legitimate interest in the safety of people and property.
- Establishment, exercise or defence of legal claims — data relevant to the dispute. Basis: the controller's legitimate interest.
5. Retention periods
- Enquiries that did not lead to a contract — 12 months from the last contact.
- Contracts and order data — the term of the contract plus 3 years (the general limitation period).
- Warranty claims — the warranty period plus 3 years.
- Accounting and fiscal documents — the period set by accounting and archiving legislation.
- Analytics data — until consent is withdrawn, and no longer than 14 months from the last visit.
- Advertising identifiers — until consent is withdrawn, and no longer than 24 months.
- Technical security logs — up to 12 months.
- Video recordings — up to 30 days, unless required to investigate an incident.
6. Whom we share data with
We do not sell personal data. Data may be shared only with the following categories of recipients and only to the extent necessary:
- employees and authorised persons of the controller — showroom managers, surveyors, installation teams, accounting;
- transport and courier companies, installation crews — for delivery and installation;
- IT service providers: the Tilda platform (website hosting and receipt of form submissions), CRM system, IP telephony, e-mail delivery services;
- analytics and advertising platforms: Google Ireland Limited / Google LLC (Google Analytics, Google Ads, Google Tag Manager) and Meta Platforms Ireland Limited — subject to your consent for the relevant cookie categories;
- banks and payment providers — for receiving and refunding payments;
- external advisers — lawyers, auditors, accountants;
- public authorities — upon a substantiated lawful request.
7. Transfers outside the Republic of Moldova
Some of the services we use (Tilda, Google, Meta) process data on servers located in the European Union and in third countries, including the USA. Such transfers take place subject to the safeguards required by Law No. 195/2024: transfers to countries ensuring an adequate level of protection, or on the basis of standard contractual clauses and other safeguards provided by law. A copy of the safeguards applied can be requested using the contacts in section 1.
8. Cookies
Cookies are small text files that a website stores in your device's browser. Alongside them we use browser local storage, pixels and third-party scripts; the same rules apply to them.
Strictly necessary cookies are set without consent — the website cannot function without them. All others — functional, analytics and marketing — are set only after your prior consent, given through the banner on your first visit. Until you make a choice, optional scripts are not loaded, category toggles are off by default, and continuing to browse or closing the banner does not count as consent.
Categories:
- Strictly necessary — maintaining the session, correct operation of forms, storing your cookie banner choice, basic security.
- Functional — remembering the interface language and the selected showroom.
- Analytics — understanding which pages and door models interest visitors and where difficulties arise; statistics in aggregated form.
- Marketing — measuring advertising performance and conversions, showing relevant offers on Google, Facebook and Instagram.
- tildasid, tildauid — Tilda platform — session identification and form operation — strictly necessary — session and up to 12 months;
- cookie_consent — ids-doors.com — stores your cookie category choice — strictly necessary — 6 months;
- _ga, _ga_ID, _gid — Google Analytics — distinguishing users and visit statistics — analytics — from 24 hours to 24 months;
- _gcl_au — Google Ads — attribution of conversions from ad clicks — marketing — 90 days;
- IDE, test_cookie — doubleclick.net — ad delivery and performance measurement — marketing — from 15 minutes to 13 months;
- _fbp, fr — Meta — browser identification for advertising on Facebook and Instagram — marketing — 90 days.
9. Your rights
- Right to information and access — to learn whether we process your data, which data, for what purpose, whom we share it with and how long we keep it, and to obtain a copy.
- Right to rectification — to have inaccurate data corrected and incomplete data completed.
- Right to erasure — to have data deleted where it is no longer needed for the purpose, consent has been withdrawn and there is no other basis, or processing is unlawful.
- Right to restriction of processing — to have the use of your data suspended temporarily.
- Right to data portability — to receive the data you provided in a machine-readable format or have it transmitted to another controller.
- Right to object — to processing based on legitimate interest; to direct marketing — at any time and unconditionally.
- Right to withdraw consent — at any time, as easily as it was given.
- Right not to be subject to an automated decision producing legal effects or similarly significantly affecting you.
10. How to exercise your rights
Send your request to alanargrup@gmail.com or in writing to the controller's address. State which right you are exercising and include information allowing us to identify you — for example the phone number or e-mail used in your enquiry, or the order number. We respond within one month of receiving the request; where the request is complex or requests are numerous, this period may be extended by up to two further months, and we will inform you within the first month. Exercising your rights is free of charge; where requests are manifestly unfounded or excessive, in particular repetitive, we may charge a reasonable fee or refuse with reasons.
11. Complaint to the supervisory authority
If you believe that the processing of your data breaches the law, you have the right to lodge a complaint with the National Center for Personal Data Protection (CNPDCP): MD-2004, mun. Chișinău, str. Serghei Lazo 48, phone +373 22 820 801, centru@datepersonale.md, datepersonale.md. You may also bring the matter before a court. We ask you to contact us first — most issues are resolved faster directly.
12. Data security
We apply technical and organisational measures proportionate to the risks: encryption of the connection to the website (HTTPS/TLS), access rights segregation, confidentiality undertakings for employees and contractors, backups and server protection, a record of processing activities and incident logging. In the event of a personal data breach posing a risk to your rights, we notify the CNPDCP within 72 hours and, where the risk is high, you as well.
13. Children's data
The website and services are not directed at persons under 16, and we do not knowingly collect their data. If you believe a minor has provided us with their data, please tell us — we will delete it without undue delay.
14. Changes to this Policy
We may revise this Policy when legislation, the services we use or our processes change. The current version is always published on the website with its date. If changes materially affect your rights, we will inform you separately.
Effective date of this version: 23 August 2026.