Privacy and Personal Data Processing Policy

Version of 2026-08-08 · coffeemolka.md

This Policy explains what data we collect about you on this website, why, on what legal basis, whom we share it with and how you can control it. It is drawn up in accordance with Law No. 195/2024 of the Republic of Moldova on the protection of personal data (in force from 23 August 2026; until then Law No. 133/2011 applies).

1. Who processes your data

Controller (who is responsible for your data):

CoffeeMolka.MD — ‹specify the controller’s legal name in site settings›
Chișinău, 31 August 1989 St. 78/3
e-mail: coffeemolka.md@gmail.com
phone: +373 79 956 474

Data protection contact: coffeemolka.md@gmail.com

2. What data we process

We ask only for the data that is genuinely needed for the stated purpose.

What	Which data	Purpose	Legal basis
Enquiry / message	name, phone, optionally e-mail and message text	contact you and answer your enquiry	your consent / performance of a contract
Booking	name, phone, date and time, number of guests, preferences	accept and confirm the booking	performance of a contract at your request
Chat assistant conversation	the text of your messages (please do not type passwords, documents or health data)	answer your questions and, at your request, pass you to an operator	your consent
Review, rating	name or signature, review text, rating	publishing the review after moderation	your consent
UDS loyalty code	a short-lived code that you enter yourself	calculate your discount/cashback at that moment	your request
Technical data	IP address, device and browser type, pages, referral source	site security and anonymous statistics	our legitimate interest / analytics consent

4. Cookies and analytics

Cookies are small files a website stores in your browser. We group them by category and enable optional categories only after your consent. You can change your choice at any time via the “Cookie settings” link in the footer.

If you clicked “Decline”, no advertising or analytics cookies are set, and statistics are collected anonymously without your identifiers (Google Consent Mode v2 — cookieless).

Category	Purpose	Set by	Lifetime
Necessary	Login session, selected language, cart, anti-spam protection of forms	This site	session / up to 1 year
Necessary	Remembering your cookie choice (so we do not ask again)	This site	12 months
Analytics	Anonymous page-visit counting (our own statistics, no profiles)	This site	no cookie
Analytics	Google Analytics 4 — visit and traffic-source statistics	Google	up to 2 years
Marketing	Meta Pixel — advertising performance in Facebook/Instagram	Meta	up to 3 months
Analytics	Yandex.Metrica — visit statistics	Yandex	up to 2 years
Convenience	Embedded map	Google / OpenStreetMap	per service rules
Necessary	Checking your UDS loyalty code at your request	UDS	not stored
Convenience	On-site chat assistant: keeping your conversation in this window	This site	up to 30 days

Cookie settings

5. Whom we share data with

Hosting and technical support of the site — the company operating the server under a data processing agreement (art. 28 of Law No. 195/2024)
Google (Google Analytics 4, Google Ads) — only with your analytics/marketing consent
Meta Platforms (Facebook, Instagram) — only with your marketing consent
Yandex (Yandex.Metrica) — only with your analytics consent
Telegram — enquiries reach the administrator in the Telegram app
UDS (loyalty programme) — only the code you entered, and only at the moment of calculation
E-mail service — for notification messages about your enquiry
Public authorities — only upon a lawful written request

6. Transfers outside the country

Our servers are located in the Republic of Moldova and in the European Union (Germany). If you consented to analytics or marketing, the corresponding anonymous data may be processed by Google and Meta services outside the country under their own safeguards (standard contractual clauses). Enquiry notifications reach the administrator via Telegram. By declining optional cookies you exclude any transfer to advertising and analytics services.

7. How long we keep data

enquiries, bookings and orders — while they are being handled and afterwards within the periods required by law for accounting and claims;
chat assistant conversations — up to 30 days, then deleted;
the log of your cookie choice — 12 months (this is the proof of consent);
anonymous visit statistics — without your identifiers, kept indefinitely in aggregated form;
server technical logs — as a rule up to 90 days.

8. Your rights

You have the right to:

know what data we process and receive a copy of it;
correct inaccurate data;
erase data (“right to be forgotten”) where there is no longer a basis for keeping it;
restrict processing or object to it;
receive your data in a portable format;
withdraw consent at any time — as easily as you gave it (the “Cookie settings” link in the site footer; for other cases — an e-mail to the address above);
not be subject to a decision based solely on automated processing that significantly affects you;
lodge a complaint with the supervisory authority.

We register every request and reply within one month of receipt at the latest (art. 13–22 of Law No. 195/2024). If you believe we have infringed your rights, you may contact the National Center for Personal Data Protection of the Republic of Moldova (datepersonale.md).

Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

9. How we protect data

Data is stored on protected servers; access is limited to authorised persons and protected by passwords and two-factor authentication where possible. We keep backups and update software. Should a security incident occur that may create a risk to your rights, we will notify the supervisory authority and, in case of high risk, you (art. 33–34 of Law No. 195/2024).

10. Children

This site is not intended for collecting children’s data. We do not knowingly collect data of persons under 16 without the consent of a parent or legal guardian. If this has happened, write to us and we will delete the data.

11. Changes to this policy

We may update this Policy. Material changes come as a new version together with a renewed cookie consent request. The current version is always on this page.

Privacy Policy