PRIVACY AND PERSONAL DATA SECURITY POLICY
decorshop.md respects the privacy and ensures the protection of its customers' personal data, in accordance with Law No. 133 of 08.07.2011 on the protection of personal data of the Republic of Moldova, with Government Decision No. 1123 of 14.12.2010 on the requirements for ensuring the security of personal data, as well as with Regulation (EU) 2016/679 (GDPR).
PERSONAL DATA OPERATOR
decorshop.md acts as the operator of personal data and is responsible for their processing in accordance with the legislation in force.
Contact details:
Email: info@decorshop.md
Phone: +373 78 883 878
WHAT IS PERSONAL DATA
According to Law No. 133/2011, personal data means any information relating to an identified or identifiable natural person. An identifiable person is one who can be identified, directly or indirectly, by reference to an identification number or to one or more specific elements of their physical, physiological, psychological, economic, cultural or social identity.
CATEGORIES OF DATA COLLECTED
In the course of its commercial activity, decorshop.md collects and processes the following categories of personal data:
– First name and last name;
– Delivery address and billing address;
– Phone number;
– Email address;
– Order data (products, value, purchase history);
– IP address and navigation data (for traffic analysis and security);
– Cookies and similar technologies;
– Data voluntarily provided through contact forms or newsletter subscription.
decorshop.md DOES NOT collect and DOES NOT store payment card data. All online payments are processed through certified payment service providers, in accordance with PCI DSS standards.
PURPOSE OF DATA PROCESSING
Personal data is processed exclusively for the following purposes:
– Processing and delivery of placed orders;
– Issuing invoices and fiscal documents;
– Communicating with the customer about order status;
– Managing returns, exchanges and warranty claims;
– Providing customer support;
– Sending commercial communications, exclusively with the customer's prior consent;
– Improving services and the user experience on the website;
– Compliance with legal obligations (tax, accounting, reporting to authorities).
LEGAL BASIS FOR PROCESSING
Data processing is carried out on the basis of:
– The explicit consent of the personal data subject (Art. 5 para. 1 of Law 133/2011);
– The performance of the sales contract (Art. 5 para. 5 letter a) of Law 133/2011);
– Compliance with the operator's legal obligations (Art. 5 para. 5 letter b) of Law 133/2011);
– The legitimate interest of the operator, when this does not prejudice the rights of the data subject.
DATA RETENTION PERIOD
Personal data is retained only for the period necessary to fulfill the purposes for which it was collected:
– Order and invoice data: minimum 5 years, according to tax legislation;
– Account and contact data: for the duration of the commercial relationship;
– Newsletter data: until consent is withdrawn;
– Navigation data and cookies: according to the cookie policy (typically 12-24 months).
After these periods expire, the data is irreversibly deleted or anonymized.
CUSTOMER RIGHTS (UNDER ART. 12-18 OF LAW 133/2011 AND GDPR)
As a personal data subject, you have the following rights:
– The right to information — about the processing of your data;
– The right of access — to the personal data we hold;
– The right of intervention — to rectify, update or delete inaccurate data;
– The right to object — to data processing in certain circumstances;
– The right not to be subject to an automated individual decision;
– The right to data portability — to receive your data in a structured format;
– The right to erasure ("right to be forgotten") — under the conditions provided by law;
– The right to withdraw consent at any time;
– The right to lodge a complaint with the National Center for Personal Data Protection (CNPDCP) or with a court of law.
EXERCISING YOUR RIGHTS
To exercise any of the above-mentioned rights, you can contact us at:
Email: info@decorshop.md
Phone: +373 78 883 878
The request will be processed within a maximum of 30 calendar days from receipt. In the case of complex requests, this period may be extended, of which you will be informed in due time.
DISCLOSURE OF DATA TO THIRD PARTIES
decorshop.md does not sell, rent or transfer your personal data to third parties for commercial purposes. Data may be disclosed exclusively to:
– Couriers and transport companies — for order delivery;
– Payment service providers — for processing transactions;
– IT and hosting service providers — strictly for the operation of the website;
– Public authorities — in the cases provided by law.
All partners with whom we cooperate are contractually obliged to respect the confidentiality and security of your data.
DATA TRANSFER OUTSIDE THE REPUBLIC OF MOLDOVA
If certain data is transferred to states outside the Republic of Moldova, the transfer is carried out only to states that ensure an adequate level of data protection, in accordance with the decisions of the CNPDCP and GDPR standards.
SECURITY MEASURES
decorshop.md implements appropriate technical and organizational measures to protect personal data against unauthorized access, loss, destruction or accidental disclosure, including:
– Encryption of the connection via HTTPS protocol (SSL certificate);
– Controlled and authenticated access to customer data;
– Storage on secure servers with protection against cyber attacks;
– Internal confidentiality policies for staff with access to data;
– Regular backups and recovery plans in case of incidents;
– Payment processing exclusively through PCI DSS certified providers.
COOKIES
The decorshop.md website uses cookies to improve the browsing experience. Full details are available in the Cookie Policy. On the first visit to the website, the user can accept or refuse the use of non-essential cookies.
SECURITY INCIDENTS
In the event of a personal data security breach that may generate risks for the rights and freedoms of customers, decorshop.md will notify the CNPDCP and the affected persons, in accordance with the legal provisions, as soon as possible.
POLICY CHANGES
This policy may be updated periodically to reflect legislative changes or changes in our internal practices. The current version is always available on the decorshop.md website. We recommend that you check this page periodically.
CONTACT
For any question related to the processing of personal data:
Email: info@decorshop.md
Phone: +373 78 883 878
Hours: Monday – Friday, 09:00 – 17:00
SUPERVISORY AUTHORITY
If you believe that your rights regarding the protection of personal data have been violated, you may lodge a complaint with:
National Center for Personal Data Protection of the Republic of Moldova
Address: 48 Serghei Lazo Street, MD-2004, Chișinău
Email: centru@datepersonale.md
This policy complies with the provisions of Law No. 133 of 08.07.2011 on the protection of personal data of the Republic of Moldova, Government Decision No. 1123/2010 and Regulation (EU) 2016/679 (GDPR).
