Last technical update: 27 August 2026
This notice describes the data flows identified in the website code. It applies to browsing, preferences saved in the browser, external content and images, the registration form, and the publication/archiving of speaker profiles and conference materials.
1. Controller and contact details
According to the Information Notice supplied by the Chamber of Commerce and Industry of the Republic of Moldova, CCI of Moldova is the controller of data processed in connection with registration and participation in the event.
- Name
- Chamber of Commerce and Industry of the Republic of Moldova
- Address displayed on the website
- 151 Ștefan cel Mare și Sfânt Boulevard, Chișinău, MD-2004, Republic of Moldova
- General email
- camera@chamber.md
- Telephone
- +373 22 22 15 52
- Website
- chamber.md
- IDNO / legal identifier
- To be confirmed and completed by CCI of Moldova.To be confirmed by CCI of Moldova
- Dedicated privacy contact / data protection officer
- To be confirmed and completed by CCI of Moldova, if one has been appointed.To be confirmed by CCI of Moldova
2. Purposes, data, legal bases, recipients and retention
The following activities reflect the technical operations found in the repository. Unconfirmed fields have not been filled with assumptions.
Registration and attendance administration
- Purpose
- Receiving registrations, planning session attendance, and sending operational communications about the event.
- Data categories
- First and last name, institution/company, role, email, telephone, attendance choices, form language, the checked declaration concerning data processing and notice of photography/filming, and the technical privacy-notice version. The interface marks participant-entered details and the declaration as required and will not submit the request without them; CCI of Moldova must confirm whether each requirement is legal, contractual, or operational and explain the consequence of not providing it.
- Legal basis
- The supplied Notice lists, as applicable, consent, steps necessary for registration and participation, legal obligations, and legitimate interests. CCI of Moldova must associate the precise basis with each purpose and field; if legitimate interests are relied upon, the interest pursued and balancing assessment must be identified and communicated.
- Recipients
- Authorised CCI of Moldova staff and the HTTPS destination configured through GOOGLE_SHEETS_WEBHOOK_URL. Code labels indicate a Google Sheets / Apps Script flow, but the host, account, provider role, and any other recipients must be confirmed.
- Retention period
- To be confirmed by CCI of Moldova for registration records, backups, and any statistical reports.
Website delivery and technical security
- Purpose
- Delivering pages, diagnosing errors, maintaining security, and preventing abusive use.
- Data categories
- Technical data that may appear in hosting logs, such as IP address, date and time, requested URL, browser, and error information.
- Legal basis
- To be confirmed by CCI of Moldova. These operations should be limited to what is necessary for operation and security.
- Recipients
- The repository is connected to Vercel, and authorised persons administer the website. CCI of Moldova must confirm the active hosting/CDN provider before the final notice is published.
- Retention period
- CCI of Moldova must confirm the active provider, its log periods, and the internal retention policy.
Privacy preference
- Purpose
- Remembering the functional-content choice so it remains effective after navigation or refresh.
- Data categories
- Consent categories, notice version, and timestamp. No tracking identifier is created.
- Legal basis
- To be confirmed by CCI of Moldova under Article 6 of Law No. 195/2024. The technical classification as “strictly necessary” storage is not, by itself, a legal basis for processing personal data.
- Recipients
- The data remains in the user’s browser and is not sent by the application to a third party.
- Retention period
- The choice remains valid for no more than 180 days; on the first visit after expiry or a version change, the record is removed and the choice is requested again.
YouTube video playback
- Purpose
- Showing recordings of previous editions only when the user chooses to enable them.
- Data categories
- After activation, YouTube may receive the IP address and device, browser, and player-interaction data.
- Legal basis
- Prior consent for the “Functional” category, which may subsequently be withdrawn.
- Recipients
- Google / YouTube through youtube-nocookie.com.
- Retention period
- Third-party storage is controlled by Google/YouTube. Exact periods and any transfers must be checked against provider documentation and CCI of Moldova’s contracts.
Publishing and archiving speakers and materials
- Purpose
- Presenting the programme and public participants, attributing presentations, and maintaining the conference-edition archive.
- Data categories
- Name, role, organisation, country, photograph, LinkedIn link, association with sessions and presentations, and appearances in photo/video materials. The source of each item and how each person was informed are not established by the repository and must be confirmed by CCI of Moldova.
- Legal basis
- To be confirmed by CCI of Moldova separately for current publication, public indexing, and long-term archiving. If legitimate interests are relied upon, the interest and balancing assessment must be communicated.
- Recipients
- The general public, search engines, and technical providers that deliver the website; LinkedIn and document-hosting sites are contacted only when their links are followed.
- Retention period
- To be confirmed by CCI of Moldova for active profiles, archived editions, outdated material, and correction or takedown procedures.
Loading images from external domains
- Purpose
- Showing CCI service icons on the About page and the ADA logo in the 2025 edition archive.
- Data categories
- External providers may receive the IP address, date and time, browser type, and requested resource. The application applies a “no-referrer” policy to these images.
- Legal basis
- To be confirmed by CCI of Moldova; classification as a functional visual resource does not replace an applicable legal basis.
- Recipients
- chamber.md infrastructure and Wikimedia Commons.
- Retention period
- Provider log periods and any transfers are not established by the repository and must be checked by CCI of Moldova.
3. Data subject rights
Subject to Law No. 195/2024, a data subject may request, where applicable:
- information about and access to their personal data;
- rectification of inaccurate data or completion of incomplete data;
- erasure and restriction of processing where the statutory conditions apply;
- data portability where that right applies;
- objection to processing;
- not to be subject to a decision based solely on automated processing, subject to the law;
- a complaint to the supervisory authority and access to a judicial remedy.
4. Withdrawing consent
Where processing relies on consent, it may be withdrawn at any time without affecting processing carried out lawfully before withdrawal. For YouTube videos, the choice can be changed immediately through “Cookie settings”. For other requests, use the controller’s contact details.
5. Complaints and contact
The Information Notice designates camera@chamber.md for questions about data processing and exercising rights. A data subject may lodge a complaint with the National Center for Personal Data Protection.
National Center for Personal Data Protection ↗6. Cookies and similar technologies
The code audit found no active first-party cookies, analytics tools, or marketing technologies. The site only uses the local/session storage listed below and may allow third-party YouTube storage after consent.
No GA4, Google Tag Manager, Meta Pixel, Hotjar, Microsoft Clarity, LinkedIn Insight Tag, reCAPTCHA, or other marketing pixels were found.
| Name / service | Technology | Provider | Purpose | Category | Approximate duration |
|---|---|---|---|---|---|
| dpi-consent | localStorage | Dialog PRO-INDUSTRIE (first party) | Stores the categories, version, and choice date. | Strictly necessary | Up to 180 days; checked/removed on the next visit |
| tsr-scroll-restoration-v1_3 | sessionStorage | Dialog PRO-INDUSTRIE / TanStack Router (first party) | Restores page position after navigation. | Strictly necessary | Browser session |
| tanstack_router_reload:* | sessionStorage, only after a loading error | Dialog PRO-INDUSTRIE / TanStack Router (first party) | Prevents repeated reloads after a new site release. | Strictly necessary | Browser session |
| YouTube privacy-enhanced embedded player | iframe; possible third-party cookies/storage after activation | Google / YouTube (third party) | Plays archived videos. | Functional | According to provider settings |
7. Third-party services and resources
The code uses or links to the following services. Ordinary external links do not send data to their destination until they are followed.
Vercel
The repository contains a Vercel integration. CCI of Moldova must confirm its production use, region, log periods, subprocessor list, and contractual terms.
Registration webhook (labelled Google Sheets / Apps Script in code)
The server function sends form data to the HTTPS destination configured through GOOGLE_SHEETS_WEBHOOK_URL. The code indicates Google Sheets / Apps Script, but the actual provider, account, data location, access, security, retention, and deletion cannot be established from the repository and must be documented by CCI of Moldova.
YouTube (youtube-nocookie.com)
The player is not created before functional content is accepted. After acceptance, provider processing is governed by Google/YouTube terms.
chamber.md
The About page loads service icons from CCI’s domain, while several articles and documents are external links. Loading the images may transmit connection data to chamber.md.
Wikimedia Commons
One ADA logo in the 2025 archive is loaded from Wikimedia, which may transmit technical connection data to that provider.
8. International transfers
Vercel, Google/YouTube, the registration-webhook destination (if it is an external service), and external-image providers including chamber.md and Wikimedia Commons may involve processing outside the Republic of Moldova. Countries, provider roles, any adequacy decision, and applicable safeguards are not established by the repository and must be verified/documented by CCI of Moldova. The final notice must also explain how a person can obtain a copy of the applicable safeguards.
9. Data security
The form validates data in both the browser and server, protects the server function against cross-site requests, and neutralises spreadsheet formula input. Organisational controls, access rights to the webhook destination and, where applicable, the spreadsheet, backups, and the incident-response process must be confirmed separately by CCI of Moldova.
10. Photography and filming at the event
The form includes a required declaration acknowledging that photographs and video recordings may be made and later used for informational and promotional purposes. CCI of Moldova must separately establish and communicate the purpose, legal basis, zones/signage, recipients, retention, and rights mechanism. Ticking the declaration does not replace complete information or assessment of the applicable legal basis.
11. Automated decisions and profiling
The repository contains no profiling logic or decisions based solely on automated processing. CCI of Moldova must confirm that neither the external registration flow (labelled Google Sheets / Apps Script in code) nor any subsequent process performs such operations; if they do, the notice must describe the logic, significance, and expected consequences.
12. Notice updates
This notice should be reviewed whenever the form, providers, storage technologies, purposes, or legal bases change. The current technical version reflects the repository audited on the date shown above.