Data Protection

Last updated: 16 July 2026

Top Consulting SRL (“we”, “us”, “our”) operates this website. This notice explains what personal data this website processes, why we process it, the legal basis for doing so, how long we keep it, who else receives it, and what rights you have.

We have written this notice to describe what this website actually does, rather than to make general reassurances. Where your data reaches a third party, we say so explicitly.

1. Who is responsible

The data controller is Top Consulting SRL, Republic of Moldova.

For any question about this notice, or to exercise any of the rights described in section 7, contact us at info@topconsulting.md.

2. What we collect, and why

You can browse this website without telling us who you are. We do not ask you to create an account, and we do not run advertising or marketing analytics on this site. The processing below is what actually takes place.

2.1 Contact form

What: the name, email address, telephone number and message you type into our contact form.
Why: to read and answer your enquiry.
Legal basis: steps taken at your request prior to entering into a contract, and our legitimate interest in responding to people who contact us.
Retention: 24 months from our last correspondence with you, unless the enquiry becomes part of a client engagement, in which case our normal engagement records apply.
Note: submissions are emailed to us and are checked for spam by a filter that runs on our own server. No part of your submission is sent to an external spam-checking service.

2.2 Live chat

What: the messages you send in the chat widget, and any name or email address you choose to provide in it.
Why: to answer your questions in real time.
Legal basis: your consent, given by allowing Google content and by choosing to start a chat.
Retention: 12 months.
Note: our live chat is powered by Google Firebase. If you allow it, the messages you send — and any name or email address you provide in the chat — are transmitted to and stored by Google, and may be processed outside the Republic of Moldova, including in the United States. The chat does not load at all unless you allow it. See section 3.2.

2.3 Comments on articles

What: if you leave a comment, we store the name and email address you supply, the comment itself, and — as standard WordPress behaviour — your IP address and browser user-agent string.
Why: to publish your comment and to moderate spam and abuse.
Legal basis: your consent, given by submitting the comment.
Retention: for as long as the comment remains published. You can ask us to delete it at any time.

2.4 Server logs

What: our web server records the IP address, date and time, requested page, referring page and browser user-agent for requests made to the site.
Why: to keep the site available and secure, and to diagnose faults.
Legal basis: our legitimate interest in the security and stability of the website.
Retention: short-term, as operated by our hosting provider; we do not use these logs to build profiles of visitors.

3. Third parties that receive data

By default this website loads no third-party content, and Google receives nothing when you visit. Two optional features are provided by Google: the map on our Contacts page, and the live chat. Neither loads until you choose to allow it in the banner shown on your first visit. If you do allow them, your browser contacts Google’s servers directly and Google receives your IP address. You can change or withdraw your choice at any time — see section 5.

3.1 Google Maps

The map on our Contacts page is embedded from Google Maps. Until you allow it we show a placeholder with our address instead, and nothing is sent to Google. If you choose to load the map, Google receives your IP address and information about your device and browser, may set cookies in your browser, and may process this on servers outside the Republic of Moldova, including in the United States.

Legal basis: your consent, given through our cookie banner.
Provider: Google Ireland Limited / Google LLC. See Google’s Privacy Policy and Terms.

3.2 Live chat (Google Firebase)

Our live chat widget runs on Google Firebase, a Google service. It does not load unless you allow Google content. If you allow it, Google receives your IP address, and any chat you start — including its messages and any name or email address you provide — is transmitted to and stored on Google’s servers, which may be located outside the Republic of Moldova, including in the United States.

Legal basis: your consent, given through our cookie banner and by choosing to start a chat.
Provider: Google Ireland Limited / Google LLC.

3.3 Hosting

Our hosting provider stores this website and its database on our behalf, and processes data only on our instructions.

3.4 What we do not do

  • We do not run Google Analytics or any comparable audience-measurement or advertising tracker on this site.
  • We do not use advertising pixels, and we do not share your data with advertising networks or data brokers.
  • We do not sell your personal data.
  • Our spam filters run entirely on our own server and do not send your data to an external spam-checking service.
  • We do not use Google reCAPTCHA. It has been removed from this site and no longer loads on any page.
  • We host our own typefaces. Loading a page does not request fonts from Google or any other external server.

4. Transfers outside the Republic of Moldova

The Google services described in section 3 may involve processing of your data in the United States. Google LLC is certified under the EU–U.S. Data Privacy Framework and additionally relies on the European Commission’s Standard Contractual Clauses as a transfer mechanism.

If you would like a copy of the safeguards applying to these transfers, write to info@topconsulting.md.

5. Cookies

This site does not set advertising or analytics cookies. The cookies it does use are limited to the following purposes:

PurposeSet byWhy
Language preferenceThis site (WPML)Remembers whether you are reading the site in English, Romanian or Russian.
Comment detailsThis site (WordPress)If you leave a comment, remembers your name and email so you need not retype them. Set only when you comment.
Pop-up displayThis site (Popup Maker)Remembers that you have already closed a pop-up, so it is not shown to you repeatedly.
Session / securityThis site (WordPress)Keeps the site working correctly and protects forms against cross-site request forgery.
Your cookie choiceThis siteRemembers whether you allowed or refused optional Google content, so we do not ask again. Named tc_consent, kept for 12 months.
Google Maps / live chatGoogleSet by Google only if you allow Google content — see section 3. If you refuse, none are set.

You can delete or block cookies through your browser settings. Blocking them may stop parts of the site, such as the contact form or the language switcher, from working properly.

Change your choice

You can change or withdraw your choice about optional Google content at any time, as easily as you gave it:

Withdrawing does not affect the lawfulness of any processing carried out before you withdrew.

6. Security

This website is served over an encrypted HTTPS connection, so the data you send us in transit is protected. We restrict access to the personal data described here to the people within our firm who need it in order to answer you.

7. Your rights

In relation to your personal data, you have the right to:

  • Access — obtain confirmation of whether we process your data, and a copy of it.
  • Rectification — have inaccurate or incomplete data corrected.
  • Erasure — have your data deleted where there is no overriding reason for us to keep it.
  • Restriction — ask us to pause processing while a dispute about it is resolved.
  • Portability — receive the data you gave us in a structured, machine-readable format.
  • Objection — object to processing based on our legitimate interests, on grounds relating to your situation.
  • Withdraw consent — where processing rests on consent, withdraw it at any time. This does not affect processing carried out before you withdrew it.
  • Complain — lodge a complaint with the supervisory authority, whose details are given below.

To exercise any of these rights, write to info@topconsulting.md. We will respond within the period required by the applicable law. We will not charge you for a request, and we will not treat you differently for making one.

We would prefer to resolve any concern directly, so please do contact us first. You remain free at any time to complain to the supervisory authority:

National Center for Personal Data Protection of the Republic of Moldova
str. Serghei Lazo 48, MD-2004, Chișinău
Tel: +373 22 820 801
Email: centru@datepersonale.md
Web: datepersonale.md

If you are in the European Union, you may also complain to the data protection authority of the country where you live or work.

8. Automated decision-making

We do not make decisions about you by automated means that produce legal effects or similarly significantly affect you, and we do not profile visitors for marketing purposes.

9. Changes to this notice

If we change how this website handles personal data, we will update this page and change the “last updated” date at the top. Where a change is significant, we will make that clear rather than relying on you to spot it.