Controller and contact details
Controller: Diketo SRL, IDNO 1023600005106.
For privacy questions and rights requests: admin@diketo.md, phone +373 69 682 401.
Data we process
Account and contact data: name, email, phone, language, account information and requests.
Order and service data: selected product, price, payment status, access and interaction history. Card data is processed by the payment provider; DIKETO does not store full card details.
Technical data: IP address, online identifiers, security logs, session and device data, and necessary cookies.
The personalized-menu questionnaire may include preferences, routine, conditions, allergies and intolerances. These health details require a separate express choice.
Purposes and legal bases
Registration, order fulfilment, access, support and necessary service communications rely on contract and pre-contractual steps.
Accounting, tax and other mandatory records are processed to meet legal obligations.
Security, abuse prevention and protection of DIKETO's rights may rely on legitimate interests while respecting user rights.
Analytics, marketing and health-data processing rely on consent only where expressly stated. We do not request consent for processing required under another lawful basis.
How consent is given
Consent is freely given, specific, informed and unambiguous, and is expressed through a separate clear affirmative action.
Optional purposes are selected separately. Boxes are not pre-ticked; silence, inactivity and continued browsing are not consent.
Refusing optional processing does not prevent use of essential functions or a purchase when the data is not necessary for the requested service.
Questionnaire and health data
Before submitting the questionnaire, the user separately chooses whether to agree or refuse health-data processing solely to prepare and provide the personalized nutrition menu.
If refused, the questionnaire is not submitted. On withdrawal, previously saved answers are deleted from the active record; withdrawal does not affect earlier lawful processing.
DIKETO programs are not medical diagnosis or treatment and do not replace medical advice.
Recipients and retention
As necessary, data may be processed by IT and hosting providers, payment processors, accounting, communications and marketing providers, and competent authorities when required by law.
Data is retained only as long as needed for the stated purpose, contract performance, legal claims and mandatory recordkeeping, then deleted or irreversibly anonymized.
Your rights
You have rights to information and access, rectification, erasure, restriction, objection, portability, consent withdrawal and protection from solely automated decisions in cases provided by law.
You may complain to Moldova's National Center for Personal Data Protection. Contact DIKETO at admin@diketo.md; we may verify identity to protect your data.
Withdrawing consent
Optional-cookie settings can be reopened at any time through the “Cookie privacy settings” link in the footer, where a new choice can be saved.
Questionnaire consent can be withdrawn in the questionnaire by selecting refusal and saving the decision. For other consents, email admin@diketo.md.
Withdrawal applies for the future and is as easy as giving consent. Processing may continue where another valid legal basis applies.
Security, incidents and updates
DIKETO applies proportionate technical and organizational measures against loss, alteration, disclosure and unauthorized access. Incidents are assessed and documented and, where required, reported to the competent authority and affected people.
A new Policy version is published here with its update date. A new optional purpose will receive fresh consent where required.