This policy explains what personal data the real estate agency AIR Real Estate processes through the air.md site and in its work with clients: why we use it, who we pass it to, how long we keep it and what rights you have.
1. Who processes the data
The data controller is “CROWN ROYAL-INVEST” SRL, which operates under the brand AIR Real Estate (hereinafter the “Agency”):
- IDNO 1022600035261;
- address: str. Bogdan Voievod 1/C, Chișinău municipality;
- e-mail: [email protected];
- phone: +373 61 222 210, +373 68 616 111.
You can write to these contacts with any question about your data.
2. What data we process
When you fill in a form on the site
- your phone number — required, so that we can reply to you;
- your name and comment — optional;
- what you are looking for or offering: sale or rent, type of property, area, budget, number of rooms and any other details you choose to write — optional;
- the property or agent from whose page you wrote, the language and the page of the site.
When you work with the Agency
To sell, buy or rent a property, the Agency may also process:
- identification data: name, IDNP and identity document details — only when they are needed for the contract or required by law;
- address and contact details;
- data about the property and the right of ownership;
- the price and terms of the transaction;
- the history of communication, of offers sent and of viewings.
When you visit the site
- Technical data: IP address, browser and device type, the page opened, date and time. The server needs them to show the page and to protect the site.
- Visit statistics: the site counts the pages opened, the country of the visit and the device type. For this it does not use cookies and does not store the IP address. To stop abuse, it uses only an encrypted form of the address, which is deleted within at most one day.
- Google Analytics — only if you have accepted it in the cookie banner. Details in the Cookie policy.
We do not ask for data we do not need. Copies of identity documents are not sent through the forms on the site.
3. Why we use the data and on what basis
- To reply to you and find suitable properties for you — steps taken at your request before a contract is concluded.
- To conclude and perform the brokerage contract — performance of the contract.
- Accounting and tax records, replies to authorities — legal obligation.
- Security of the site, protection against abuse, defence of the Agency’s rights — the Agency’s legitimate interest.
- Visit statistics without cookies — legitimate interest in knowing which pages are useful.
- Google Analytics and, if they are switched on, advertising tools — your consent, which you can withdraw at any time.
- Messages with new offers — only if you asked for them. You can opt out at any time.
We do not make decisions about you solely by automated means. The Agency’s system automatically selects properties that match the request, but a person decides what to offer you.
4. Do you have to give us your data?
For a question on the site, only your phone number is needed: without it we cannot contact you. For a contract, we need the data required by the contract and by law. Without it the Agency cannot conclude the contract.
5. Who sees the data and who we pass it to
- The Agency’s employees and agents who work on your request.
- Technical providers, only as far as they need it to do their job (list below).
- Participants in the transaction, when necessary: notaries, banks, valuers, the other party to the transaction.
- Public authorities, when the law requires it.
We do not sell the data and do not give it to other companies for their advertising.
Technical providers
- The site’s server, hosted in Germany.
- Cloudflare — protection and delivery of pages, the “not a robot” check in the request forms, storage of property photos.
- Supabase — the site’s database: properties, requests from forms, visit statistics.
- Neon — the database of the Agency’s client management system (CRM), with servers in Frankfurt, Germany.
- Telegram — employees receive a notification there about a new request, with the name and phone number from it.
- Google — Google Analytics and Google Tag Manager, only with your consent; the map on the “Contacts” page, only after you open it or allow “Marketing” in the cookie settings.
- maib — the loan calculator on the page of a property for sale, only after you open it: the bank receives your IP address and what you enter in the calculator.
- The technical administrator, who maintains the Agency’s site and systems.
6. Transfers outside the Republic of Moldova
The site’s server and the CRM database are located in Germany, in the European Union. Cloudflare, Supabase, Telegram and Google may also process data in other countries, including the USA. In these cases the Agency applies the safeguards required by law for transferring data.
7. How long we keep the data
- Requests that did not lead to a contract — at most 3 years from the last contact, then they are deleted.
- Data of clients with a contract — for the duration of the contract, then for as long as accounting and tax legislation and limitation periods require.
- The encrypted form of the IP address — at most one day.
- Visit statistics — kept only as totals, without data about individuals.
- Your choice about cookies — 12 months, in your browser.
8. Your rights
You can ask at any time:
- to find out what data we have about you and to receive a copy;
- for us to correct wrong or incomplete data;
- for us to delete the data if we no longer have grounds to keep it;
- for us to restrict processing;
- for us to send you the data in a format that a computer can read;
- for us to stop using the data on the basis of legitimate interest or for offers;
- to withdraw your consent, which does not affect what was done before.
Write to us at [email protected]. We reply within the time limits set by law. So that we do not give your data to someone else, we may ask you to confirm who you are.
If you believe that your data is being processed in breach of the law, you can file a complaint with the National Center for Personal Data Protection of the Republic of Moldova (datepersonale.md).
9. How we protect the data
- The site works only over an encrypted connection (HTTPS).
- Each employee logs in to the system with their own account and sees only what they need for their work.
- The client management system keeps a log of changes: who changed what.
- Technical providers receive only the data they need.
10. Changes to the policy
The date of the last update is shown at the top of the page. We announce important changes on the site.