Glasses in 1 hour · our own workshop · Mon–Fri 9:00–18:00 · Sat 9:00–14:00 · +373 67 24 00 00Technology. Warranty. Quality.
RORUEN
+373 67 24 00 00
RORUEN

Privacy policy

Draft. To be approved by the client's lawyer before launch. Version of 19.09.2026.

1. Who processes the data

Controller: SIMETTOM S.R.L. (Eurooptica optical chain), Chișinău, Republic of Moldova, e-mail: info@eurooptica.md. Processing follows Law No. 195/2024 on personal data protection.

2. What data and why

  • Orders, reservations and requests: name, phone, e-mail, delivery address, order content — to fulfil the contract and stay in touch. Kept 3 years after the last order.
  • Account: phone (SMS code sign-in), order history — for account access. Kept while the account exists.
  • Prescriptions and medical data (vision parameters): only with your separate consent at first sign-in; used to fit lenses and glasses. You can delete them at any time.
  • Analytics and advertising (cookies, device identifiers): only after consent in the cookie banner; you can withdraw it in the footer (“Cookie settings”).
  • Technical data (IP address, security logs): fraud protection, 12 months.
  • Encrypted phone number for advertising: only with your consent — “Marketing” in the cookie window or the “Help us with advertising” checkbox (section 4).

3. Who we share with

Courier services (delivery), SMS provider (sign-in codes), Bitrix24 CRM (order and customer contact processing), Google and Meta analytics and advertising services (with consent). Data is never sold to third parties. With your consent (section 4), Google and Meta also receive the phone number and first name from the request in encrypted form.

  • Virtual try-on: the photo you upload for a try-on is sent to Google Gemini (Google Ireland Ltd.) solely to generate the image with the chosen frame. We store neither the original photo nor the result on our servers; the result stays only in your browser. The try-on is available after signing in with your phone number; by pressing the sign-in button you accept these terms. Google processes the data under its API terms (no use for model training on the paid tier).

4. Help us with advertising

Our request and order forms have a separate “Help us with advertising” checkbox. It is not ticked in advance and is not required for the order: without it we accept and fulfil the order in exactly the same way. If you allowed “Marketing” in the cookie window, the checkbox is not shown: you have already given this consent there.

If you tick it (or allowed “Marketing”), we pass your phone number and, if provided, your first name to Google (Google Ads) and Meta (Facebook, Instagram) — only in encrypted form: an irreversible SHA-256 hash from which the number cannot be recovered. Together with the hash we pass the fact of the request or completed order and its amount.

  • Why: so that advertising systems see which ads led to real orders and show them to people who find them useful, not to everyone.
  • What happens next: Google and Meta compare the hash with their users. If there is no match, the record is discarded. The data is used to measure and tune our advertising under the Google Ads and Meta Business Tools data processing terms.
  • When: when you send a request and after the order is marked as completed.
  • Storage: the consent record is kept together with the request or order; Google and Meta keep the data they receive under their own rules.
  • How to withdraw: write to info@eurooptica.md or call +373 67 24 00 00. From that moment we stop passing your data. Withdrawal does not affect your order.

5. Your rights

Access, rectification, erasure, restriction, portability, withdrawal of consent, objection to marketing. Requests: info@eurooptica.md — we reply within 30 days. The account can be deleted on request from the account phone number. Complaints can be lodged with the National Center for Personal Data Protection (CNPDCP).

6. Cookies

Necessary cookies (cart, session, consent) always work. Analytics (GA4, Clarity) and marketing (Google Ads, Meta) only with consent. Consent is stored for 6 months.

7. Security

HTTPS, role-based staff access, admin action logging, backups.