GDPR Compliance
Last updated: 2026-01-03
This GDPR Compliance statement explains how Dioartis Grup SRL ("Company", "we", "us", "our") complies with the General Data Protection Regulation (EU) 2016/679 ("GDPR") when processing personal data. We are committed to protecting the privacy and rights of individuals whose personal data we process.
1. Data Controller
- Legal entity: Dioartis Grup SRL
- IDNO: 1011600003727
- Registered address: str. Calea Orheiului 109/3, mun. Chișinău, Republic of Moldova
- Contact email: support@webfundament.com
2. Scope of GDPR compliance
This page applies to all personal data processed through our websites, Client Area, billing system, and services including web hosting, VPS, reseller hosting, and domain-related services.
3. Roles under GDPR
- Data Controller: Dioartis Grup SRL determines the purposes and means of processing personal data.
- Data Processor: For client-hosted content, we may act as a processor on behalf of our clients.
- Clients: Clients are responsible for GDPR compliance of the data they store or process using our services.
4. Lawful basis for processing
We process personal data based on the following legal grounds:
- Performance of a contract (service provision)
- Compliance with legal obligations (accounting, taxation, fraud prevention)
- Legitimate interests (security, abuse prevention, service improvement)
- Consent, where explicitly required
5. Data subject rights
Under GDPR, individuals ("data subjects") have the following rights:
- Right of access
- Right to rectification
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent at any time
6. Exercising your rights
Requests related to personal data must be submitted via email to support@webfundament.com.
- We may request identity verification before processing requests.
- Requests are handled within the timeframes required by GDPR.
- Some data may not be erasable due to legal or contractual obligations.
7. Data processing for hosting services
When providing hosting or VPS services:
- Clients control the content and data stored on their servers.
- Clients are responsible for obtaining lawful consent from their end-users.
- We process hosted data only to provide, secure, and maintain services.
8. Data security measures
We implement appropriate technical and organizational measures to protect personal data, including:
- Access control and authentication systems
- Network security, monitoring, and firewalls
- Encryption where applicable
- Staff confidentiality obligations
9. Data breaches
In the event of a personal data breach:
- We investigate and mitigate the incident without undue delay.
- We notify affected clients when required by GDPR.
- We cooperate with supervisory authorities where legally required.
10. Data retention
- Personal data is retained only as long as necessary for its purpose.
- Billing and accounting data is retained as required by law.
- Hosting data is deleted upon service termination, subject to backup retention limits.
11. Sub-processors
We may use trusted third-party sub-processors (e.g., data centers, payment providers) to deliver our services. All sub-processors are contractually bound to GDPR obligations.
12. International data transfers
Where data is transferred outside the EU/EEA, we ensure appropriate safeguards, including contractual protections and security measures.
13. Changes to this GDPR Compliance page
We may update this page from time to time. The "Last updated" date reflects the latest version.
14. Contact
For GDPR-related questions or requests, contact us at support@webfundament.com.