In plain terms: what personal data we collect through this site, why, who we share it with, and what rights you have. Processing complies with Law No. 195/2024 on personal data protection (in force since 23 August 2026).
Last updated: 29 August 2026
MANNOL Moldova respects the privacy of its visitors and customers. We collect only the data we need to process orders, answer messages and keep the site secure — nothing more. We never sell or rent your data to anyone.
The controller responsible for processing your data through this site is:
We collect personal data only in the situations below, and only for the stated purpose:
| Data | Purpose | Legal basis |
|---|---|---|
| Name, phone, delivery address and order notes | Processing, confirming and delivering your order | Performance of a contract |
| Name, e-mail, phone and company details (for partners and agents) | Managing a partner/agent account. Accounts are created internally by the company — visitors cannot register themselves. | Performance of a contract |
| Name, phone and the message from the contact form | So we can reply to your question or request | Legitimate interest |
| IP address, browser type and a session cookie | Running the site securely and protecting against abuse | Legitimate interest (security) |
We receive the data directly from you — when you place an order, fill in the contact form, or use an account created for you. We do not buy data about you from other sources.
We do not sell your data. We disclose it only to those who help us serve your order: our team receives order and contact notifications through a messaging service (Telegram), and the site and database are hosted with an infrastructure provider (Railway). They process the data only on our instructions. Product text is translated with an external service (DeepL), which receives no personal data.
Some of the providers above (hosting, messaging) may store or process data on servers outside the Republic of Moldova. In these cases we make sure the transfer has a legal basis and appropriate safeguards, in line with Law No. 195/2024.
We keep data only as long as needed for the purpose we collected it for: order data — for the duration of the commercial relationship and for as long as accounting and tax law require; account data — for the term of the contract; contact messages — for a limited period, until the request is resolved. After that we delete or anonymise it.
We use only strictly necessary cookies: one that keeps your login session, and one that remembers your chosen language. We do not use Google Analytics, advertising pixels or other tracking tools, so we don't ask for consent to marketing cookies — there simply aren't any.
Passwords are stored encrypted (bcrypt hash), never in clear text. Connections are secured (HTTPS), access to customer data is restricted by role, and sensitive endpoints are protected against abuse. We take technical and organisational measures proportionate to the risk.
Under Law No. 195/2024, you have the following rights over your data:
Access
Find out what data we hold about you and get a copy.
Rectification
Correct inaccurate or incomplete data.
Erasure
Ask us to delete data when it is no longer needed.
Restriction
Temporarily limit processing in certain situations.
Objection
Object to processing based on our legitimate interest.
Portability
Receive your data in a format that can be transferred.
Withdraw consent
Withdraw consent at any time where processing relies on it.
Send a request to [email protected]. We reply within one month of receiving it at the latest.
If you believe we are processing your data incorrectly, you can contact us at any time. You also have the right to lodge a complaint with the supervisory authority:
National Centre for Personal Data Protection (CNPDCP)
We may update this policy when the way we process data or the legal requirements change. The current version and the date it was last updated are shown at the top of this page.
