Your rights regarding personal data

Law No. 195/2024 on personal data protection gives you several rights over your data that Click Expert S.R.L. (BLACKBOX) processes. You can exercise some of them directly in your account, mainly on the “Profilul meu” (My profile) page (blackbox.md/account, “Contul meu” (My account) → “Profil” (Profile)), and the others by email at support@blackbox.md. The official text is in the “Drepturile dvs.” (Your rights) section of the “Politica de confidențialitate” (Privacy policy) page (https://blackbox.md/info/privacy).

Available to: the blackbox.md account holder (actions in the account) and anyone whose data BLACKBOX processes (requests by email).

The blackbox.md website is available in Romanian and Russian; this article quotes the Romanian labels with their English meaning.

What rights you have

These rights are set out in Articles 15–22 of Law No. 195/2024.

What you can do directly in your account

The actions below are available only on blackbox.md. In the app.blackbox.md panel, you cannot change, download or delete your personal data.

Correcting your name and phone number

1. Open “Contul meu” (My account) → “Profil” (Profile).
2. In the “Date personale” (Personal details) block, correct the “Nume” (Name) or “Telefon” (Phone) field.
3. Click “Salvează modificările” (Save changes). The message “Modificările au fost salvate.” (Your changes have been saved.) appears.

The new details apply to orders placed after you save. Existing orders keep the contact details they had when they were placed. The “Email” field is read-only. Details: My profile: name, phone number and email.

Correcting your billing details

You correct a company's details or your personal details for invoices under “Contul meu” → “Date de facturare” (Billing details): click “Editează” (Edit) on the profile's card, change the fields and click “Salvează” (Save). PDF invoices that have already been sent do not change. Details: Billing details for companies and individuals.

Downloading your data (access and portability)

1. On the “Profilul meu” (My profile) page, find the “Datele mele” (My data) card.
2. Click “Descarcă datele mele” (Download my data). The button shows “Se pregătește…” (Preparing…).
3. Your browser saves the file blackbox-export-YYYY-MM-DD.json.

Among other things, the file contains your account details, orders, invoices, payments, balance, billing details, support tickets, the servers that belong to you and the last 200 access events. You can download your data at most 3 times in 24 hours. Details: Downloading your data (“Datele mele”).

Deleting your account

On the “Ștergerea contului” (Account deletion) card, on the same page, you request the deletion of your account. The deletion takes place after a 7-day grace period, during which you can cancel it with “Anulează ștergerea” (Cancel deletion). Before you make the request, you must not have, among other things, active servers, unfinished orders, unpaid invoices or funds in your balance. All the steps: Deleting your account.

After the grace period, the personal data in your account (name, phone number, password) is anonymized. Some data is kept because the law requires us to keep it: issued invoices for 5 years, and technical access and authentication logs for at least 180 days.

Tip Before you request deletion, download a copy of your data with “Descarcă datele mele”. After deletion, you can no longer download it.

What to request by email

Write to support@blackbox.md for:

• changing your account's email address: include the new address;
• correcting the contact details in orders you have already placed or the details on invoices that have already been issued: include the order or invoice number;
• restricting processing and objecting to processing;
• access, portability or erasure, if you cannot use the buttons in your account or you need data that is not in the downloaded file.

How to send your request

1. Write from the email address of your blackbox.md account.
2. State which right you are exercising and which data your request concerns.
3. For a correction, give the correct value.

Security A request sent from your account's address shows us that it comes from the account holder. If you write from a different address, we ask you for additional identity verification, for example a reply to an email we send to your account's address. We do not send personal data to an address we have not verified.

Response time

• We reply without undue delay and no later than one month after we receive your request.
• In complex cases, this period can be extended by up to two more months; in that case, we tell you the reasons.
• We usually reply within 1–2 business days.
• For urgent requests, you can call +373 78 003948, Monday–Friday, 09:00–18:00 (Moldova time).

If we cannot act on your request, we explain why.

Data protection officer

Click Expert S.R.L. has not appointed a data protection officer (DPO): under Article 37(1) of Law No. 195/2024, an appointment is not mandatory for its activity. For any matter related to personal data, the contact is support@blackbox.md.

Where to file a complaint

If you disagree with the answer you received or believe that the processing of your data breaks the law, you can:

• file a complaint with the National Center for Personal Data Protection (in Romanian, Centrul Național pentru Protecția Datelor cu Caracter Personal), under Article 72 of Law No. 195/2024;
• bring a court action before the competent court (Article 74).

The Center's contact details:

Frequently asked questions

Can I exercise these rights from the app.blackbox.md panel? No. The “Nume” (Name) and “Telefon” (Phone) fields and the “Datele mele” (My data) and “Ștergerea contului” (Account deletion) cards exist only on blackbox.md, on the “Profilul meu” (My profile) page. You exercise the other rights by email.

I don't see the “Datele mele” or “Ștergerea contului” card. What should I do? Reload the page. If you still don't see them, send your request by email to support@blackbox.md.

I am a visitor to a website hosted on a BLACKBOX server. Whom should I contact? The website's owner. For data that a customer processes in their own services, for example the data of their website's users, the controller is the customer, and Click Expert S.R.L. acts as a processor on the controller's behalf. See Data Processing Agreement (DPA) for companies.

Which version of the Privacy Policy is legally binding? The Romanian version. The Russian version is a translation provided for convenience. A summary of the policy: Privacy policy in brief.