Privacy Policy

This Privacy Policy sets forth the procedures for processing and protecting the personal data of users of the website www.eurosanteh.md in strict accordance with the provisions of Law No. 195/2024.

1. PERSONAL DATA CONTROLLER

The personal data controller is:

Edenvor SRL

IDNO: 1014609001015

Registered address: 110 Burebista St., Republic of Moldova

Phone: + 373 68 272 991

Email: info@eurosanteh.md

Contact for personal data protection inquiries:

privacy@eurosanteh.md

2. CATEGORIES OF DATA PROCESSED

When using the website and placing an order, the following categories of personal data may be processed:

• first and last name;
• phone number;
• email address;
• shipping address;
• order information;
• information from user inquiries;
• technical information about the website’s operation and its use.

The website does not store full credit card numbers, CVV/CVC codes, or other confidential payment details.

3. PURPOSES OF PERSONAL DATA PROCESSING

Personal data is processed for the following purposes:

• processing, confirming, and fulfilling orders;
• delivering goods to customers;
• processing payments and refunds;
• communicating with customers regarding orders;
• reviewing inquiries and complaints;
• complying with tax, accounting, and other legal requirements;
• ensuring the proper functioning of the website;
• analyzing website traffic and improving the website’s performance;
• sending marketing information, provided the user has given the necessary consent.

4. LEGAL BASES FOR PROCESSING

Personal data is processed on the following grounds:

• performance of a sales contract;
• compliance with legal obligations;
• the controller’s legitimate interest;
• consent of the data subject in cases provided for by law.

5. RECIPIENTS OF PERSONAL DATA

Personal data may be disclosed to the following categories of recipients:

• banks and payment institutions;
• the payment provider MAIB;
• courier and transportation services;
• hosting and technical support service providers;
• Google Analytics and Google Tag Manager web analytics services;
• government agencies in cases provided for by law.

The transfer is carried out only to the extent necessary to achieve the relevant processing purposes.

6. PAYMENT PROCESSING

When making a payment, the user enters their credit card information directly on the secure page of the payment provider MAIB.

The eurosanteh.md website does not receive or store:

• the full credit card number;
• the CVV/CVC code;
• PIN codes;
• payment confirmation passwords.

Payments are processed in accordance with the security requirements of payment systems and the security standards applied by the payment provider.

7. RETENTION PERIODS FOR PERSONAL DATA

S.R.L. EDENVOR retains personal data strictly for the period necessary to achieve the purposes for which it was collected, in compliance with the principle of data minimization, as well as in accordance with the legal obligations applicable to commercial activities. Upon expiration of the established retention periods, the data is deleted, destroyed, or pseudonymized in accordance with the company’s internal procedures. Data related to orders, invoices, and other documents pertaining to contract performance and accounting are retained for the periods established by the legislation of the Republic of Moldova.

8. RIGHTS OF THE DATA SUBJECT

The user has the right to:

• receive information about the processing of their personal data;
• access their personal data;
• request the correction of inaccurate data;
• request the deletion of personal data in cases provided for by law;
• to request restriction of processing;
• to object to the processing of data;
• to exercise the right to data portability;
• to withdraw previously given consent;
• to file a complaint with the authorized personal data protection authority.

To exercise their rights, the user may submit a request to the following address:

privacy@eurosanteh.md

9. RIGHT TO FILE A COMPLAINT

Users have the right to file a complaint with the National Center for the Protection of Personal Data of the Republic of Moldova (CNPDCP) if they believe that the processing of their personal data violates legal requirements.

Official website:

www.datepersonale.md

10. SECURITY MEASURES

Edenvor SRL takes reasonable organizational and technical measures to protect personal data from:

• unauthorized access;
• destruction;
• alteration;
• disclosure;
• loss.

Despite the use of modern security measures, data transmission over the Internet cannot guarantee absolute security.

11. COOKIES

The website uses cookies and similar technologies to ensure the proper functioning of the website, analyze traffic, and improve the user experience. Detailed information is provided in a separate Cookie Policy.

12. CHANGES TO THE PRIVACY POLICY

Edenvor SRL reserves the right to make changes to this Privacy Policy. The current version of the Policy is always published on the website www.eurosanteh.md.