The controller is:
ARUTIN INVEST SRL
Address: MD-2012, 11 Veronica Micle Street, Chișinău municipality, Republic of Moldova

For questions or requests about personal data, use the contact form on any Covered Website or write to the address above. You may also use the current contact details published on the Contact page of the Covered Website you are using.

In this Policy, the "Covered Websites" are
- www.arutinbureau.com,
- www.arutindesign.com,
- www.arutinrealty.com,
- www.arutinlife.com,
- www.sampopark.md,
including their pages, language versions, subdomains and related forms operated by ARUTIN INVEST SRL. The same Policy applies to all Covered Websites; a reference to the "website" means any one of them.

This Policy applies to visitors to the Covered Websites and people who:

- ask for information, a price quotation, a consultation or a meeting;
- enquire about architecture, interior-design services, a residential project, a property, a viewing or a possible real-estate transaction;
- are prospective buyers, sellers, owners, tenants, partners or their representatives;
- register for or attend an event organised by us;
- appear in photographs, video or audio recorded at an event;
- communicate with us by email, telephone, messaging service or social media.

Where a property transaction, design contract or another service requires additional documents and checks, we may provide a separate privacy notice at the point of collection.

Depending on your interaction, we may process:

- identity and contact data: first and last name, email address, telephone number, location and preferred language;
- enquiry data: your message, service or property of interest, project type, preferences, requirements, indicative budget, price range, timelines and meeting availability;
- professional data: company, position or representative capacity where relevant;
- relationship data: communication history, appointments, quotations requested or issued, feedback and agreed next steps;
- event data: registration, attendance, organisational preferences and information required for access or delivery of the event;
- media data: photographs, video, voice and, where relevant, statements or testimonials;
- technical data: IP address, online identifiers, browser and device type, operating system, pages visited, traffic source, website interactions, access date and time and security logs;
- cookie preferences and records of the choices you make.

Please do not send copies of identity documents, financial information, health information or other sensitive data through a general website form unless we separately request it for a clear purpose and provide a suitable channel.

We obtain data mainly from you when you submit a form on a Covered Website, contact us, request a quotation or viewing, or attend an event. We may also receive data from an authorised representative, a transaction partner, a co-organiser or a public source where this is necessary and lawful. Technical data is generated when you use a Covered Website, depending on its technical configuration and your cookie choices.

We may use data for the following purposes:

- Enquiries and price quotations. To understand your needs, reply, arrange a discussion and prepare a quotation. Legal basis: steps requested before entering into a contract and/or our legitimate interest in managing enquiries.

- Architecture, interior design, residential development and real-estate activity. To discuss requirements, present projects or available units, arrange viewings, identify suitable properties or services, facilitate communication between parties and, if the matter proceeds, prepare or perform a contract. Legal basis: pre-contractual steps, contract performance, legal obligations and legitimate interests.

- Managing prospective-client and buyer relationships. To follow up an active enquiry, preserve communication history and avoid repetitive or conflicting messages. Legal basis: legitimate interests, balanced against the person's rights.

- Events. To register attendees, confirm attendance, send logistical information, manage access, safety and delivery. Legal basis: requested steps, legitimate interests and consent where required.

- Photographs and media. To document events and communicate or promote our activities on our website and social media. General event images may be used on the basis of legitimate interests where the impact on individuals is limited and attendees are informed. We generally request separate permission for close-ups, interviews, testimonials, dedicated campaigns or uses likely to have a significant impact.

- Promotional communications. To send news, property information, service updates or event invitations only where we have consent or another legal basis permitted by law. You may opt out at any time.

- Website operation and security. To deliver pages and forms, prevent abuse, diagnose errors and protect systems. Legal basis: legitimate interests and, where applicable, legal obligations.

- Online analytics and marketing. To measure website use or campaign effectiveness only after consent for non-essential technologies, as described in the Cookie Policy.

- Legal compliance and claims. To maintain required records, respond to authorities, prevent fraud and establish, exercise or defend legal claims. Legal basis: legal obligations and legitimate interests.

We do not make decisions based solely on automated processing that produce legal or similarly significant effects, unless we separately explain the processing and meet the applicable legal conditions.

Fields marked as required are necessary to respond to or process your enquiry. If you do not complete them, we may be unable to contact you or provide the requested information.

Providing an email address or telephone number for a reply does not automatically subscribe you to marketing. Communications about your enquiry may continue while it remains active and for a reasonable follow-up period.

For an initial enquiry, we collect only what is necessary to understand your interest. If the matter develops into representation, reservation, brokerage, purchase, sale, lease or delivery of a design project, further data, documents and checks may be required by law or contract. We will provide additional information before or when that data is collected.

We will give reasonable notice where photography or recording takes place. If you do not wish to appear in general event images, please tell the organiser or photographer; we will make reasonable efforts to respect your choice.

For individual photographs, interviews and testimonials, we may use a separate release identifying the channels and uses. Withdrawal of consent does not affect lawful use before withdrawal and may not allow us to recall printed materials already distributed, but we will stop future uses under our control where reasonably possible.

When content is posted on a social platform, that platform may process data as an independent controller under its own privacy terms.

Each Covered Website may use strictly necessary cookies and, with your consent, analytics, marketing or third-party technologies. Non-essential technologies must remain disabled until you make a choice. See the Cookie Policy and the preference panel of the Covered Website visited for details.

Data may be accessed, where necessary, by:

- authorised ARUTIN INVEST SRL employees, contractors and project teams;
- providers of website, hosting, forms, email, storage, security, maintenance, analytics and communications services;
- professional advisers and providers involved in the service requested;
- event co-organisers, photographers or other event partners;
- social platforms or advertising providers, subject to applicable conditions and, for non-essential technologies, your consent;
- authorities, courts or other recipients where disclosure is required or permitted by law or necessary to protect legal rights.

We do not sell personal data.

Some technology providers or social platforms may process data in other countries. Where an international transfer requires safeguards, we use mechanisms recognised by applicable law, such as an adequacy decision, approved standard contractual clauses or other lawful safeguards, together with supplementary measures where needed.

We retain data only for as long as necessary for the stated purpose, taking into account the relationship, legal obligations and the need to defend rights. As a guide:

- initial enquiries, quotation requests and communication history: up to 24 months after the last relevant interaction, unless a contractual relationship begins;
- contractual, accounting or legal records: for the relationship and afterwards for legally required or claims-related periods;
- event administration data: up to 12 months after the event, unless a record must be kept longer;
- promotional communications: until consent is withdrawn or after an inactivity period set in our procedures;
- photographs and media: while relevant to documenting and communicating our activities, subject to periodic review and valid requests;
- technical and security logs: for the period needed to secure the website, investigate incidents and administer systems;
- cookies: for the duration shown in the preference panel or until deleted by the user.

At the end of the applicable period, data is deleted, anonymised or archived with restricted access, as appropriate.

We apply technical and organisational measures proportionate to the risks, including access controls, limited user rights, backups, updates, contractual confidentiality and incident procedures. No transmission or storage method can guarantee absolute security.

Subject to Moldova's Law No. 195/2024 on personal data protection and, where applicable, Regulation (EU) 2016/679, you may have the right to:

- receive transparent information about processing;
- request access to and a copy of your data;
- correct inaccurate data;
- request erasure;
- request restriction of processing;
- receive data in a portable format where applicable;
- object to processing based on legitimate interests and to direct marketing;
- withdraw consent at any time, without affecting earlier lawful processing;
- not be subject to certain solely automated decisions;
- lodge a complaint and seek a judicial remedy.

These rights are not absolute and legal exceptions may apply.

Send your request through the contact form on any Covered Website or to the postal address in Section 1. State that your request concerns data protection and provide enough information to identify the request and your relationship with us.

To protect data, we may request proportionate information to verify identity. We will respond within the period required by law and explain any permitted extension or inability to fulfil a request in full.

If you believe your data has been handled improperly, we encourage you to contact us first. You may also complain to Moldova's National Centre for Personal Data Protection (CNPDCP) using the current details on datepersonale.md, or to another competent authority where applicable.

The Covered Websites and our services are not directed specifically to children. If an event involves minors, we will use situation-specific notices and, where required, obtain permission from a parent or legal representative.

We may update this Policy when our activities, providers, technology or legal requirements change. The current version and date will be posted on this page. We may provide an additional notice for material changes.