Privacy Policy
Personal data protection — handlerkraft.md
Last updated: August 19, 2026
1. Who is the data controller
MICROCELL S.R.L. (HandlerKraft), IDNO 1003600007407, registered at MD-2060, Chișinău, Botanica sector, Dacia Blvd. 30/1, office 113, is the data controller for the processing described in this policy. You can reach us with any request about your personal data at: sales@handlerkraft.md.
2. Applicable law
We process personal data in accordance with:
- Law No. 195/2024 on the protection of personal data, which transposes Regulation (EU) 2016/679 (GDPR) and enters into force on August 23, 2026 (until then, Law No. 133/2011 applies, whose core principles remain similar);
- Law No. 284/2004 on information society services;
- other applicable legislation on trade and consumer protection.
The supervisory authority is the National Center for Personal Data Protection (CNPDCP) — email: centru@datepersonale.md, phone: 022 820 801, website: datepersonale.md.
3. What data we collect
| Category | Examples | When |
|---|---|---|
| Identification and contact details | first/last name, phone, email | when filling in the order/reservation form or the contact form |
| Company data | company name, IDNO, legal address, contact person | if you select "legal entity" |
| Delivery data | locality, district, address, requested delivery date | if you request delivery |
| Order content | products and quantities in the cart, options (installation, special freight), comments | when filling in the Form |
| Technical data | IP address, device/browser type, pages visited, traffic source | automatically, via cookies and similar technologies (see the Cookie Policy) |
| Anti-spam verification data | hCaptcha response, time taken to fill in the form | when submitting forms, to prevent spam |
We do not request or intentionally collect special categories of data (ethnic origin, religious beliefs, health data, etc.), and we do not process bank card data through the Site.
4. Purposes and legal basis of processing
| Purpose | Legal basis |
|---|---|
| Processing your reservation/order request and contacting you to confirm it | pre-contractual measures at your request / performance of a contract |
| Issuing invoices and keeping accounting records | legal obligation (tax/accounting legislation) |
| Responding to enquiries via the contact form | legitimate interest / pre-contractual measures |
| Commercial/marketing communications (where you've given consent) | consent, revocable at any time |
| Traffic analysis and improving the Site (Google Analytics) | consent (non-essential cookies) |
| Targeted advertising (Meta Pixel, Google Ads) | consent (non-essential cookies) |
| Fraud and spam prevention (hCaptcha) | legitimate interest |
5. Who we share data with
We do not sell your data. We share it, to the extent necessary, with:
- Web3Forms — the service that processes and delivers the Site's forms (order/reservation, contact) to HandlerKraft's email;
- Shopify Inc. — the technical platform the Site runs on (hosting, shopping cart);
- Google (Google Analytics/GA4, Google Ads, Google Workspace for email, and, if enabled, Google Sheets/Apps Script as a backup system for logging orders) — for traffic analysis, advertising, and operational reliability;
- Meta Platforms (Meta Pixel) — for measuring and targeting Facebook/Instagram ad campaigns, if you accepted marketing cookies;
- hCaptcha — for anti-spam verification when submitting forms;
- public authorities, where required by law (e.g. tax authorities or CNPDCP).
International transfers: some of the providers above (Google, Meta, Web3Forms, hCaptcha) may process data on servers located outside the Republic of Moldova, including in the United States. These transfers rely on the safeguards provided by the respective providers (typically standard contractual clauses/certifications equivalent to GDPR requirements), in line with Article 32 of Law No. 133/2011 and, from 23.08.2026, the international-transfer chapter of Law No. 195/2024.
6. How long we keep data
- Data in an unsubmitted Order Form (draft): stored locally in your browser for up to 48 hours, then deleted automatically.
- Data from a confirmed reservation/order: for as long as needed to carry out the commercial relationship, and afterward for the period required by tax/accounting legislation (typically several years from the end of the financial year).
- Marketing data (where consent was given): until consent is withdrawn.
- Technical data/cookies: per the retention periods listed in the Cookie Policy below.
7. Your rights
As a data subject, you have the right to:
- request access to the data we process about you;
- request rectification of inaccurate data;
- request erasure of your data ("the right to be forgotten"), within the limits of the law;
- request restriction of processing;
- object to processing based on legitimate interest or carried out for direct marketing purposes;
- request portability of the data you provided;
- withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal;
- lodge a complaint with CNPDCP (centru@datepersonale.md) or with the competent court, if you believe your rights have been violated.
To exercise any of these rights, write to us at sales@handlerkraft.md. We respond within the statutory timeframe (generally no more than one month from receiving the request).
8. Data security
We apply reasonable technical and organizational measures to protect data (restricted access, anti-spam/anti-bot verification, backup systems with logging to prevent lost requests). The Site does not process online payments, so it does not store bank card data.
9. Minors
The Site is aimed at individuals and companies acting for commercial/professional purposes, or adults purchasing for their own use. We do not knowingly collect data from minors.
10. Changes to this policy
This policy may be updated periodically; the date of the last update is shown at the top of the document. Material changes will be communicated via a notice on the Site.