Privacy Policy

1. GENERAL PROVISIONS

1.1. This Privacy and Personal Data Processing Policy (hereinafter - the "Policy") governs the collection, use, storage, transfer, protection and other processing of personal data of users of the website solaren.md (hereinafter - the "Site").

1.2. This Policy applies to the personal data of individuals who visit the Site, create an account, place orders, purchase products, contact the Seller, or otherwise interact with the Site.

1.3. Personal data is processed in accordance with the applicable legislation of the Republic of Moldova, including Law No. 195/2024 on the Protection of Personal Data, as well as other applicable regulations of the Republic of Moldova. Law No. 195/2024 transposes the main provisions of Regulation (EU) 2016/679 (GDPR) and entered into force on 23 August 2026.

1.4. This Policy is the document through which the User is informed about what personal data may be processed, the purposes for which it is processed, the legal grounds for processing, the recipients to whom the data may be disclosed, the period for which it is retained, and the rights available to the data subject.

1.5. This Policy applies exclusively to the processing of personal data carried out by the Operator in connection with the Site's activity. The use of third-party internet resources and services is governed by the rules and policies of the respective third parties.

1.6. The Operator processes personal data based on the principles of lawfulness, fairness and transparency, purpose limitation, data minimization, accuracy, storage limitation, and integrity and confidentiality of personal data.

2. PERSONAL DATA OPERATOR

2.1. The operator of the personal data processed in connection with the use of the Site is S.R.L. STILIST GRUP, IDNO 1009600001843 (hereinafter - the "Operator" or the "Seller").

2.2. Legal address of the Operator: MD-2032, Republic of Moldova, Chișinău mun., Botanica sector, 2 Nicolae Titulescu St., office 48

2.3. Actual (de facto) address of the Operator: Calea Ieșilor 10, Chișinău mun., Republic of Moldova

2.4. For matters related to the processing of personal data, the User may contact the Operator using the following contact details:

Email: [email protected]

Phone: +373 67 600 900

3. CATEGORIES OF PERSONAL DATA PROCESSED

3.1. Depending on the nature of the User's interaction with the Site, the Operator may process the following categories of personal data:

first and last name;
phone number;
email address;
delivery address;
postal address;
data necessary to create and manage an account;
information about orders, purchased products, order status, delivery and returns;
information contained in inquiries, requests, applications and messages sent by the User to the Operator;
other data voluntarily provided by the User, to the extent necessary to achieve the relevant processing purpose.

3.2. When visiting the Site, the Operator and the technical and analytics services used on the Site (Google Analytics, Google Tag Manager, Yandex.Metrica) may automatically obtain certain technical information related to the use of the Site, within the limits and in the manner provided by applicable legislation and the User's settings, as expressed through the cookie management mechanism described in the Cookie Policy.

3.3. The Operator does not collect or store users' full bank card details, including the card number, expiry date, CVC/CVV code, or other data necessary to carry out a card transaction.

3.4. Payment information is processed by the relevant payment providers and banking institutions in accordance with their own rules and applicable legislation.

4. PURPOSES OF PROCESSING PERSONAL DATA

4.1. The Operator processes personal data exclusively for lawful, determined and specific purposes.

4.2. Personal data may be processed for the following purposes:

ensuring the operation and administration of the Site;
creating, maintaining and managing the User's account;
receiving, processing, confirming and fulfilling orders;
concluding and performing the sales contract;
organizing the delivery of ordered products;
communicating with the User on matters related to the order, delivery, return, exchange of products or other services;
handling the User's inquiries, requests and applications;
fulfilling obligations established by the legislation of the Republic of Moldova;
maintaining accounting, tax and other mandatory records;
preventing fraud, abuse and other unlawful acts;
ensuring the security of the Site and the Operator's information systems;
carrying out statistical and analytical analysis within the limits permitted by legislation;
the User's participation in promotional campaigns and special offers, where an appropriate legal ground exists;
sending informational and marketing messages, news and offers, based on consent or another applicable legal ground;
protecting the legitimate rights and interests of the Operator, Users and third parties, in the cases provided by legislation.

4.3. The Operator does not use personal data for purposes incompatible with the original purposes of its collection, except where such processing is permitted by the legislation of the Republic of Moldova.

5. LEGAL GROUNDS FOR PROCESSING PERSONAL DATA

5.1. The Operator processes personal data only where an appropriate legal ground exists, as provided by applicable legislation.

5.2. Depending on the specific situation, the legal grounds for processing may be:

the necessity of processing for the conclusion and performance of a contract to which the User is a party;
the necessity of taking steps at the User's request prior to entering into a contract;
compliance with a legal obligation incumbent on the Operator under the legislation of the Republic of Moldova;
the consent of the data subject, in cases where such consent is required by legislation;
the necessity of protecting the vital interests of the data subject or of another natural person, in the cases provided by legislation;
the legitimate interest of the Operator or of a third party, provided that such interest does not override the fundamental rights and freedoms of the data subject and is permitted by legislation.

5.3. Where processing is carried out on the basis of consent, the User has the right to withdraw their consent in the manner provided by applicable legislation.

5.4. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal, nor does it prevent further processing of personal data where another legal ground exists for such processing.

6. DISCLOSURE OF PERSONAL DATA TO THIRD PARTIES

6.1. The Operator may disclose personal data to third parties only to the extent necessary to achieve the lawful purposes of processing and to fulfill obligations towards the User.

6.2. Personal data may be disclosed to:

courier and logistics companies, to the extent necessary for the delivery of orders;
payment providers and banking institutions, to the extent necessary for processing and confirming payments;
providers of technical, IT and other services that support the operation of the Site and the Operator's activity, where necessary and in accordance with applicable legislation;
public authorities, law enforcement bodies, courts and other authorized persons, in the cases and manner provided by the legislation of the Republic of Moldova;
other persons, where such disclosure is necessary for the performance of a contract, compliance with a legal obligation, or the protection of the Operator's legitimate rights and interests, based on an appropriate legal ground.

6.3. The Operator does not sell Users' personal data and does not provide it to third parties for independent use for purposes unrelated to the Operator's activity, unless expressly provided by legislation or carried out on the basis of an appropriate legal ground.

6.4. Where third parties are engaged in the processing of personal data, the Operator takes reasonable steps to ensure that such parties process the data only in accordance with applicable legislation and within the powers granted to them.

7. INTERNATIONAL DATA TRANSFER

7.1. In the course of using the Site, certain providers of technical, IT, analytics or other services may process data outside the Republic of Moldova.

7.2. The transfer of personal data outside the Republic of Moldova is carried out only on the grounds provided by legislation and in compliance with the requirements of the legislation of the Republic of Moldova on the cross-border transfer of personal data.

7.3. Where necessary, the Operator takes appropriate measures to ensure an adequate level of protection of personal data in the event of its international transfer.

8. PERSONAL DATA STORAGE PERIOD

8.1. Personal data is retained for no longer than necessary to achieve the purposes for which it was collected and processed.

8.2. The duration of personal data storage is determined, in particular, by the following criteria:

the necessity of performing the contract and processing orders;
the necessity of carrying out delivery, return or exchange of the product;
the requirements of accounting, tax and other applicable legislation;
limitation periods and the necessity of protecting the Operator's legitimate rights and interests;
the existence of consent and its period of validity, where processing is based on consent;
the necessity of fulfilling other legal obligations.

8.3. Once the purposes of processing have been achieved or the applicable storage period has expired, personal data is deleted, destroyed, anonymized or otherwise processed in accordance with the requirements of the legislation of the Republic of Moldova, unless its further storage is necessary or permitted by legislation.

9. RIGHTS OF THE DATA SUBJECT

9.1. The User, as a data subject, has the rights provided by the legislation of the Republic of Moldova on the protection of personal data.

9.2. Depending on the specific situation and subject to the conditions provided by legislation, the User has the right to:

receive information about the processing of their personal data;
obtain access to their personal data;
request the rectification of inaccurate or incomplete personal data;
request the erasure of personal data in the cases provided by legislation;
request restriction of the processing of personal data in the cases provided by legislation;
object to the processing of personal data in the cases and manner provided by legislation;
withdraw consent to the processing of personal data, where processing is based on consent;
receive their personal data or request its transfer, in cases where such a right is provided by legislation;
not be subject to a decision based solely on automated processing, including profiling, where such a decision produces legal effects or similarly significantly affects the User, except in the cases provided by legislation;
lodge a complaint with the competent authority for the protection of personal data;
exercise other rights provided by the legislation of the Republic of Moldova.

9.3. To exercise their rights, the User may contact the Operator using the contact details indicated in Section 2 of this Policy.

9.4. The Operator may request additional information necessary to confirm the identity of the requester, where this is necessary to prevent unauthorized access to personal data.

9.5. Requests from data subjects are examined within the timeframes and in the manner provided by applicable legislation. Law No. 195/2024 provides for information about the measures taken in response to a data subject's request to be provided without undue delay and, as a rule, no later than one month from receipt of the request.

10. SECURITY MEASURES

10.1. The Operator takes appropriate organizational and technical measures to ensure the security of personal data, taking into account the nature, scope, context and purposes of processing, as well as existing risks.

10.2. In particular, the Operator takes measures aimed at preventing:

unauthorized access to personal data;
unlawful processing of personal data;
loss or destruction of personal data;
accidental or unlawful alteration of data;
unauthorized disclosure of personal data;
unlawful copying or distribution of data.

10.3. Access to personal data is granted only to authorized persons who require such data to perform their corresponding job duties or contractual obligations.

10.4. Persons with access to personal data are required to comply with confidentiality requirements and applicable personal data protection rules.

10.5. Despite the security measures taken, the transmission of information over the Internet and wireless networks cannot guarantee absolute protection against all existing risks. The Operator takes reasonable measures to reduce such risks, within the limits provided by legislation.

11. PROCESSING OF CHILDREN'S PERSONAL DATA

11.1. The Site is not intended for the intentional collection of children's personal data in breach of applicable legislation.

11.2. Where legislation provides special requirements for the processing of children's personal data for a specific type of processing, the Operator carries out such processing only on the basis of appropriate legal grounds and necessary safeguards.

11.3. Should the Operator become aware that a child's personal data has been obtained or processed in breach of legal requirements, the Operator will take the necessary measures in accordance with applicable legislation.

12. INQUIRIES AND COMPLAINTS

12.1. For matters related to the processing of personal data, the User may initially contact the Operator directly using the contact details indicated in Section 2 of this Policy.

12.2. The User has the right to lodge a complaint with the competent authority responsible for the protection of personal data in the Republic of Moldova, in the manner established by legislation, if they consider that their rights regarding the protection of personal data have been violated.

12.3. Contacting the Operator does not limit the User's right to use other means of protecting their rights provided by the legislation of the Republic of Moldova.

13. CHANGES TO THE POLICY

13.1. The Operator has the right to introduce changes and additions to this Policy, including in connection with:

changes in the legislation of the Republic of Moldova;
changes in the methods of processing personal data;
the implementation of new technical solutions and services;
changes in the Site's activity;
the need to improve personal data protection measures.

13.2. The updated version of the Policy is published on the Site.

13.3. Changes take effect from the moment the updated version of the Policy is published on the Site, unless a different term is indicated in the new version of the Policy or provided by legislation.

14. CONTACT INFORMATION

14.1. For all questions related to the processing of personal data, the exercise of the data subject's rights, or this Policy, the User may contact the Operator:

S.R.L. STILIST GRUP

IDNO: 1009600001843

Legal address: MD-2032, Republic of Moldova, Chișinău mun., Botanica sector, 2 Nicolae Titulescu St., office 48