Privacy Policy

1. What data we collect

1.1. When placing an order:

• first and last name;
• phone number;
• email address (optional);
• delivery address (if delivery is selected);
• order contents and total.

1.2. When submitting a request via the cake constructor:

• first and last name;
• phone number;
• email address (optional);
• request comment;
• images you upload (if any).

1.3. Technical data:

• cookies required for the website to function (see the Cookie Policy for details);
• standard server log records (IP address, date and time of the request).

1.4. Bank card details are not entered or stored on the website.

1.5. The website is not intended to collect data of persons under 14 years of age and does not collect special categories of personal data.

2. Purposes of processing

2.1. Personal data is processed exclusively for the purposes of:

• receiving and processing orders and requests;
• communicating with the customer regarding the order;
• arranging delivery;
• sending the order confirmation to the provided email address;
• fulfilling legal obligations (including accounting);
• ensuring the operation and security of the website.

2.2. The data is not used for automated decision-making and is not shared for third-party marketing communications.

3. Legal grounds for processing

• performance of a contract — processing and delivering your order;
• your consent — confirmed by ticking the corresponding box when submitting a form;
• compliance with the Controller's legal obligations;
• the Controller's legitimate interest — ensuring the security and operation of the website.

4. Who the data is shared with

4.1. Personal data is not sold and is not transferred to third parties for marketing purposes.

4.2. Access to the data is limited to the Controller's authorised staff and to parties directly involved in fulfilling the order:

• the courier service — to the extent necessary for delivery;
• the hosting and mail server provider — as part of the technical operation of the website;
• competent public authorities — in cases provided for by law.

5. Retention periods

5.1. Order and request data is stored for as long as necessary for the purposes of processing, record keeping and fulfilment of legal obligations, or until a justified deletion request is received.

5.2. Images uploaded via the constructor are stored together with the request and are deleted along with it.

6. Your rights

6.1. In accordance with applicable law, you have the right to:

• access your personal data;
• rectify inaccurate data;
• erase your data;
• restrict processing;
• object to processing;
• data portability;
• withdraw consent at any time.

6.2. To exercise your rights, send a request to info@mooncake.md. We will respond within the timeframes established by law.

6.3. You also have the right to lodge a complaint with the National Center for Personal Data Protection of the Republic of Moldova (CNPDCP), www.datepersonale.md.

7. Data security

7.1. To protect personal data we take reasonable organisational and technical measures, including:

• data transfer over a secure connection (HTTPS);
• restricted access to the website administration panel;
• protection of session cookies from third-party script access.

8. Cookies

8.1. Information about the cookies used and how to manage them is provided in the Cookie Policy published on the website.

9. Changes to this Policy

9.1. The Controller may update this Policy. The current version is always available on this page; the date of the last update is indicated at the top of the document.

10. Contact details

Company name: "Comvalansa" SRL

Registered address: Republic of Moldova, mun. Chisinau, str. Nadejda Russo 7/1

Bakery address: mun. Chisinau, str. Columna 105

Phone: +373 78 719 493

Email: info@mooncake.md

IDNO: 1023600045133