Privacy Policy

around.md is an online catalog of places and venues in Moldova, available at around.md. The owner and operator of the platform is Sergei (info@around.md), registered in the Republic of Moldova. We collect data entered in the site's forms, as well as the visitor's IP address and browser user-agent data for security and spam prevention purposes. We do not guarantee the accuracy of information added by users or third parties.

We may collect the following data: • Upon registration: email, name, avatar — basis: user consent and contract performance • When adding a venue: name, address, phone, photos, description — basis: contract performance • Automatically: IP address, browser type, pages visited, visit time — basis: legitimate interest (analytics, security) • Via cookies: language settings, session, viewing history for recommendations — basis: user consent We do not sell or share your personal data with third parties for advertising purposes.

If you upload photos to the site, we recommend ensuring that images do not contain EXIF metadata with GPS coordinates. Visitors can extract this data by downloading the image. We automatically convert photos to WebP format, which may remove some metadata, but we do not guarantee complete removal.

Collected data is used for: • Providing platform services (catalog, search, recommendations) • Personalizing recommendations based on your views • Improving site performance and traffic analysis • Sending push notifications (only with your explicit subscription) • Communicating with you about your account or requests • Ensuring security and preventing fraud

Your data is stored on Supabase servers (PostgreSQL), which ensures encryption of data at rest (AES-256) and in transit (TLS 1.2+). Photos are stored in secure cloud storage. We may transfer data to the following third-party services solely for platform operation: • Supabase Inc. (USA) — database and authentication • Vercel Inc. (USA) — hosting and CDN • Cloudflare Inc. (USA) — DDoS protection, Turnstile CAPTCHA • Resend Inc. (USA) — email delivery • Open-Meteo (Switzerland) — weather data Data may be processed on servers outside Moldova (EU, USA). For data transfers to the USA, Standard Contractual Clauses (SCCs) or other mechanisms are applied in accordance with applicable law.

We use cookies for: • Storing the authentication session (required) • Remembering language settings (required) • Caching weather data (functional) • Traffic analytics (analytical, anonymously) You can disable cookies in your browser settings, however this may affect site functionality. By using the site, you agree to the use of required cookies. Additional information on the Cookies page.

• Account data: retained until account deletion • Session cookies: deleted when browser is closed • Persistent cookies: stored for up to 1 year • Weather cache: 30 minutes in localStorage • Security logs (IP, user-agent): up to 90 days • Analytics data: up to 12 months in aggregated form

Under the laws of Moldova (Law No. 133/2011) and GDPR principles, you have the right to: • Access your data (Art. 15 GDPR) • Rectify inaccurate data (Art. 16 GDPR) • Delete your account and all associated data (Art. 17 GDPR) • Restrict processing of your data (Art. 18 GDPR) • Receive your data in a machine-readable format (Art. 20 GDPR) • Object to data processing (Art. 21 GDPR) • Lodge a complaint with a supervisory authority To exercise your rights: info@around.md EU users may contact their national data protection authority. Moldova users may contact the National Center for Personal Data Protection (www.datepersonale.md). California residents (CCPA): you have the right to know what personal information we collect, to delete it, and to opt out of its sale (we do not sell personal data). Contact us at info@around.md.

Our service is not intended for persons under 16 years of age. We do not intentionally collect data about children. If you believe a child has registered on the platform, contact us at info@around.md to delete the account.

We may update this policy. For significant changes, we will notify users via the site or email. The date of the last update is shown at the top of this page. Continued use of the platform after changes are published constitutes acceptance of the new version.

For all questions related to personal data: Email: info@around.md Telegram: @dricomm Response time: up to 30 days (in accordance with GDPR requirements)