Privacy Policy

Mostelle – Medical clinic

Last updated: 14 August 2026

1. Who we are (the data controller)

This Privacy Policy explains how the personal data of people who visit the shop.mostelle.md online store or place orders is collected, used and protected.

The personal data controller is:
S.R.L. MOSTELLE
IDNO: 1016600017466
Registered office: 26 Mihai Eminescu St., Chișinău, MD-2012, Republic of Moldova
E-mail: info@mostelle.md
Phone: 060 100 999 (also on WhatsApp: +373 60 100 999)

We process your data in accordance with Law of the Republic of Moldova No. 195/2024 on personal data protection, which transposes Regulation (EU) 2016/679 (GDPR).

2. What data we collect

Depending on how you interact with the shop, we may process:

Identification and contact data: first name, last name, phone number, e-mail address.

Order and delivery data: delivery address, ordered products, order value and history, chosen delivery and payment method.

Payment data: online payment processing is carried out by the payment service provider. We do not store your full card details.

Account data (if you create an account): login details and shopping preferences.

Technical and browsing data: IP address, device and browser type, pages visited and interactions with the shop — collected through cookies and similar technologies, only with your consent.

We do not ask you to enter banking passwords or sensitive data through the shop forms.

3. Purposes and legal bases for processing

To process and deliver orders: we manage the order, payment, delivery and order-related communications. Basis: performance of the sales contract.

For legal obligations: issuing tax documents and keeping accounting records. Basis: compliance with a legal obligation.

For support and customer relations: we answer questions and requests. Basis: performance of the contract and/or our legitimate interest.

For statistics and shop improvement: we analyse how the site is used. Basis: consent given through the cookie banner.

For marketing and campaign measurement: we measure the performance of advertising campaigns (including Meta/Facebook Pixel) and, if you subscribed, we send offers. Basis: your consent.

For security and fraud prevention: we protect the shop against spam and fraudulent use (including Google reCAPTCHA). Basis: our legitimate interest.

4. Who we disclose data to (processors and third parties)

We do not sell your data. We may share it only with providers who help us operate, strictly within the purposes above:

The shop hosting provider.
Courier / delivery companies, to deliver your order.
The payment service provider, to process online payments.
Meta Platforms (Facebook Pixel) — measuring and optimizing advertising campaigns.
Altegio (alteg.io) — the online booking system.
Google (reCAPTCHA) — anti-spam protection.

We may also disclose data to public authorities where required by law.

5. Transfers outside the Republic of Moldova

Some of the providers above (e.g. Meta, Google) may process data on servers located outside the Republic of Moldova. In such cases, we ensure the transfer takes place with adequate safeguards, in line with Law No. 195/2024.

6. How long we keep data

We keep data only for as long as necessary:
Order data: for the period necessary to fulfil the order and afterwards, in accordance with accounting and tax terms.
Account data: until the account is deleted.
Data collected through cookies: for the validity period of each cookie or until consent is withdrawn.

7. Your rights

In accordance with Law No. 195/2024, you have the right:
to access your data;
to rectify inaccurate data;
to erasure of data (“the right to be forgotten”);
to restrict processing;
to object to processing;
to data portability;
to withdraw your consent at any time, without affecting the lawfulness of prior processing;
to lodge a complaint with the supervisory authority.

To exercise these rights, write to us at info@mostelle.md.

8. Supervisory authority

If you believe your rights have been infringed, you may contact:
National Center for Personal Data Protection (CNPDCP)
48 Serghei Lazo St., Chișinău, MD-2004, Republic of Moldova
Phone: +373 22 820 801
E-mail: centru@datepersonale.md
Website: datepersonale.md

9. Data security

We apply reasonable technical and organizational measures to protect data against unauthorized access, loss or disclosure, including a secure connection (HTTPS) and limited access to information.

10. Cookies and similar technologies

What cookies are: small text files that the shop stores on your device when you visit it. They help the shop work, remember the cart and preferences, and understand how it is used. We also use similar technologies (pixels, local storage).

Consent: on your first visit you will see a banner through which you can accept or reject non-essential cookies. Until you make a choice, statistics and marketing cookies remain blocked. You can change your mind at any time using the cookie settings button shown on the site.

Cookie categories:
Strictly necessary (functional) — enable the basic operation of the shop, the shopping cart, security and remembering your cookie choice; they cannot be disabled. They include reCAPTCHA.
Statistics (analytics) — help us understand how the shop is used; activated only with your consent.
Marketing — used to measure the performance of advertising campaigns; activated only with your consent. Provider: Meta/Facebook Pixel.

Third-party services that may set cookies: Meta Platforms (Facebook Pixel), Google (reCAPTCHA) and Altegio (online booking). These providers may set their own cookies, in accordance with their privacy policies.

Managing cookies: you can manage your preferences from the cookie banner (the cookie settings button) or in your browser settings. Disabling some cookies may affect the operation of certain sections of the shop.

11. Minors’ data

The shop is intended for adults. For minors, data is processed only with the consent of the legal representative.

12. Changes to the policy

We may update this policy. The version in force is always the one published on the site, with the date of the last update shown at the top.