Privacy and Cookie Policy
This policy explains which personal data we collect through the website sevens.md, the chat on the website and our Facebook and Instagram pages, why we collect it, how long we keep it and what rights you have. We process data in accordance with Law No. 195/2024 on the protection of personal data of the Republic of Moldova.
1. Who processes the data (the controller)
- Î.I. „777-Chiciuc”, IDNO 1004600008814
- Registered address: Durlesti, 13 Chimistilor St., office 16
- Venue address (SEVENS hall): Chisinau, 47A Paris St.
- E-mail for personal data requests: 777chiciuc@mail.ru
- Phone: +373 67 437 881
2. What data we collect and why
| Situation | Data | Purpose | Legal basis |
|---|---|---|---|
| Request form / quote calculator | name, phone, e-mail (optional), event type and date, number of guests, chosen preferences (menu, decor, music, etc.), preferred contact method | to contact you, prepare the offer and organise the event | steps taken at your request before entering into a contract, and performance of the contract |
| Website chat (virtual assistant) | your messages, data you share in the conversation (name, phone, event date, etc.), the page you write from | to answer questions and, at your request, register a quote request | pre-contractual steps; legitimate interest in answering enquiries |
| Facebook Messenger / Instagram messages | profile name, conversation identifier, messages | to reply to messages (automatically via the virtual assistant or by a manager) | pre-contractual steps; legitimate interest |
| Technical data when visiting the website | IP address, browser type, page visited, date and time | website security, protection against abuse (spam), correct operation | legitimate interest in ensuring security |
| Analytics and marketing cookies | cookie identifiers, pages visited, interactions | visit statistics, measuring advertising effectiveness | your consent, which you may withdraw at any time |
We do not make decisions based solely on automated processing that produce legal effects for you. The virtual assistant only answers questions and passes the request to a manager; offers and bookings are always confirmed by a person.
Providing data is voluntary; however, without a phone number or another way to contact you we cannot send you an offer.
3. Who we share data with
We do not sell or rent your data. It is accessible only to SEVENS managers handling requests and, to the extent necessary, to the following providers acting on our behalf:
- the hosting provider of the website and e-mail service (the server the website runs on);
- artificial intelligence providers used by the virtual assistant to formulate answers (e.g. Groq Inc. — USA, Google LLC — USA, Mistral AI — France/EU); they receive the text of the conversation;
- Meta Platforms (Facebook, Instagram) — for conversations held on these platforms;
- Telegram and the e-mail service — for internal notification of managers about a new request;
- the automatic translation service (DeepL SE — Germany/EU) — only for website texts, not for customer data;
- public authorities — only when required by law.
4. Transfers outside the Republic of Moldova
Some of the providers above have servers in the European Union or the USA. Transfers to countries in the European Economic Area do not require authorisation. For transfers to other countries we rely on the safeguards provided by law, in particular the providers’ standard contractual clauses. You may request further information at the e-mail address above.
5. How long we keep data
- requests that did not result in a contract — up to 24 months after the last contact;
- data of customers with whom we concluded a contract — for the duration of the contract and afterwards for the period required by accounting and tax legislation;
- chat and Messenger/Instagram conversations — up to 12 months, after which they are deleted automatically;
- proof of cookie consent — up to 3 years;
- technical server logs — no more than a few months, for security.
6. Your rights
Under Law No. 195/2024 you have the right:
- to be informed and to access your data (to find out what data we hold and receive a copy);
- to rectification of inaccurate data;
- to erasure (“right to be forgotten”) when there is no longer a basis for processing;
- to restriction of processing;
- to data portability;
- to object to processing based on legitimate interest and, at any time, to direct marketing;
- to withdraw consent at any time, as easily as you gave it (for cookies — via the “Cookie settings” link in the website footer), without affecting the lawfulness of prior processing;
- to lodge a complaint with the National Centre for Personal Data Protection (CNPDCP), datepersonale.md, or to go to court.
To exercise your rights, write to 777chiciuc@mail.ru or call +373 67 437 881. We reply free of charge within one month; in complex cases this may be extended by two more months, and we will inform you within the first month. For security, we may ask you to confirm your identity.
7. Data security
The website works only over an encrypted connection (HTTPS). Access to request data is restricted to authorised persons with their own accounts. Forms are protected against automated attacks. In the event of a security incident that may affect your data, we will notify the CNPDCP within 72 hours and, if the risk is high, you as well.
8. Minors
Our services are intended for adults. We do not knowingly collect data from children under 14 without the consent of their legal representative.
9. Cookies and similar technologies
Cookies are small files saved by your browser. We divide them into three categories. Strictly necessary cookies work without consent; the others are activated only if you accept them in the cookie banner. You can change your choice at any time via the “Cookie settings” link in the website footer.
| Name | Category | Purpose | Duration |
|---|---|---|---|
sevens_csrf | Necessary | protecting forms against forged requests | 2 hours |
sevens_session | Necessary | temporarily keeping form data (e.g. after an input error) | session |
sv_cc | Necessary | refreshing cached files once after a website update | 2 years |
sv_consent (local storage) | Necessary | remembering your cookie choice | until deleted / policy change |
sv_chat_k, sv_chat_open (local storage) | Necessary | continuing the chat conversation when you move to another page | until deleted |
Google Analytics and other statistics tools (e.g. _ga) | Analytics | anonymous visit statistics | per provider, usually up to 2 years |
Meta Pixel and other advertising tools (e.g. _fbp) | Marketing | measuring and personalising ads | per provider, usually up to 3 months |
Analytics and marketing cookies load only if they are installed on the website and only after your consent. You can delete cookies at any time in your browser settings.
10. Changes to this policy
We may update this policy when legislation or the way we process data changes. The date of the last update is shown at the top of the page. When the policy changes, the cookie banner will ask for your consent again.
