1. Website and verification roles
attesto handles its website inquiries and business correspondence. In a customer verification workflow, the organisation deciding why people are checked is normally the controller, while processing roles and instructions are defined in the service and data-processing agreements. The applicable privacy notice must be provided to the person being verified before processing begins.
2. Before a workflow launches
Agree the purposes, legal bases, required data, authorised access, retention and hosting requirements before going live. Biometric identification may involve special-category data and requires additional legal conditions and safeguards where applicable. A data protection impact assessment may be required for high-risk processing. A verification result supports the customer's review; it does not replace the customer's legal duties.
3. Exercise your rights
Send website privacy requests to the contact below. If a business asked you to complete verification, contact that business as the controller; we can help route a request concerning a workflow. Depending on the applicable basis and law, rights include access, rectification, erasure, restriction, portability, objection and withdrawal of consent. GDPR requests normally receive a response within one month. Do not send identity or medical documents by ordinary contact email unless a secure, necessary identification procedure has been agreed.
4. Applicable rules and complaints
GDPR applies where its territorial and material conditions are met; local data-protection law may also apply. In Moldova, Law No. 195/2024 is in force from 23 August 2026. You can contact Moldova's National Centre for Personal Data Protection or the competent EU supervisory authority where relevant. This page explains the approach and rights; it is not a GDPR certification or a substitute for a signed processing agreement.
Privacy contact
attesto
mun. Chișinău, str. Șoseaua Hâncești 38 B, Republica Moldova, MD-2028hello@attesto.app+373 78 111 444