━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
PERSONAL DATA PROCESSING — HandlerKraft
Version 1.0 · In effect since 23 August 2026 · Last updated: 25 August 2026
Applicable to: handlerkraft.md and to all offline interactions (phone, showroom, email) with Microcell SRL
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
0. Preamble
This document is the personal data processing notice ("Personal Data Processing") of Microcell SRL, the commercial operator behind HandlerKraft. It is a standalone document, distinct from the Terms and Conditions, the Refund Policy, and the Cookie Policy — the Terms and Conditions refer to this document for everything relating to your personal data, but do not replace it.
This document is drafted to comply with Law No. 195/2024 on the Protection of Personal Data, which entered into force on 23 August 2026 and replaces the previous Law No. 133/2011. Law No. 195/2024 substantially transposes Regulation (EU) 2016/679 ("GDPR") into the legislation of the Republic of Moldova, so the standards described below correspond both to current Moldovan legal requirements and to European best practices in this field. The document also takes into account Law No. 284/2004 on Electronic Commerce, applicable to the services offered through the site.
We recommend reading this document before sending us your personal data — through the order form, a contact or service-request form, by phone, or by email.
1. Who we are — the data controller
The personal data controller, within the meaning of Article 3 of Law No. 195/2024, is:
- Name: MICROCELL S.R.L. (operating under the trade name HandlerKraft)
- IDNO: 1003600007407
- Registered office: MD-2060, Chișinău, Botanica sector, Dacia Blvd. 30/1, office 113
- Operating address / showroom: Muncești Road 364, Chișinău, MD-2002
- Email dedicated to personal data requests: pdcp@handlerkraft.md
- General contact: marketing@handlerkraft.md · +373 22 788 907
The handlerkraft.md online store is hosted on the Shopify platform (Shopify Inc.), which acts as a processor on behalf of the controller for the site's technical infrastructure — see section 6.
2. What data we collect and from what sources
We do not operate user accounts, do not process online payments through the site (see the Terms and Conditions, "Payment" section), and do not store bank card data. For this reason, the categories of data we collect are significantly narrower than at a typical online store. As applicable, we collect:
| Category | Specific examples | Source |
|---|---|---|
| Identification and contact data | First name, last name, phone, email | Directly from you, via the order form, the contact form, or a service request |
| Delivery address data | Address, locality, district | Directly from you, if you choose delivery (rather than showroom pickup) |
| Legal entity data | Company name, IDNO, representative details | Directly from you, if you order on behalf of a company |
| Content of your communication with us | Comments, delivery requirements, messages from the contact form, phone calls, email correspondence | Directly from you |
| Technical / device data | IP address, browser and device type, cookies, advertising identifiers | Automatically, as you browse the site (see the Cookie Policy) |
| Marketing data | Communication preferences, history of commercial interactions | Directly from you / generated from your interactions with us |
We do not collect bank card data, financial account data, or user passwords, as these elements do not exist in our order flow. We do not intentionally collect special categories of data (see section 5).
3. How your data reaches us — technical channels
For transparency, here is exactly what happens technically when you send us data:
- The order (checkout) form at handlerkraft.md/cart: the data you enter (name, contact, address, customer type, products, comments) is transmitted over an encrypted connection (HTTPS) directly to Web3Forms, a third-party service that forwards the content to us by email. Your order does not automatically create an account or an order in the Shopify system — a member of the HandlerKraft team will contact you by phone to confirm.
- The contact form and service request form: work on the same principle — the data is sent via Web3Forms to the team's email addresses.
- Backup copy: to make sure no request is lost, a copy of the order is also recorded in an internal log (Google Sheets), accessible only to the HandlerKraft team, via an automated script (Google Apps Script) hosted by Google.
- Local draft and retry: if you start filling in the order form but don't submit it, your browser keeps a local draft (on your device, not on our servers) for 48 hours, for your convenience in resuming later; it is automatically deleted after that period. If order submission fails for technical reasons, the data is temporarily kept locally (a maximum of 7 days) for automatic retry.
- Phone and direct email: if you contact us by phone or email, the data you provide (name, phone number, content of the conversation) is recorded in our ordinary business correspondence.
4. Purposes of processing and legal bases
Under Article 6 of Law No. 195/2024, we process your data only when a valid legal basis exists. Here is the basis we rely on for each purpose:
| Purpose | Legal basis |
|---|---|
| Processing an order or a quote request, phone confirmation, delivery of products | Performance of a contract or pre-contractual steps taken at your request (Art. 6(1)(b)) |
| Issuing invoices and accounting records | Legal obligation of the controller, under the Accounting and Financial Reporting Law No. 287/2017 and tax legislation (Art. 6(1)(c)) |
| Responding to service, warranty, or spare-parts requests | Performance of the contract / legal obligation regarding product warranty |
| Form security (anti-spam protection, hCaptcha verification, submission rate limiting) | Our legitimate interest in preventing fraud and technical abuse, without disproportionately affecting your rights (Art. 6(1)(f)) |
| Basic site traffic analysis (number of visitors, popular pages) | Our legitimate interest in understanding and improving how the site works |
| Personalised online advertising (Google Ads, Meta) and non-essential cookies | Your consent, given through the cookie banner (revocable at any time — see section 14) |
| Direct marketing communications (if you subscribe to a newsletter, where applicable) | Your consent, revocable at any time |
We do not make decisions based solely on automated processing (including profiling) that would produce legal effects concerning you or similarly significantly affect you.
5. Special categories of data
We do not intentionally request or process special categories of data under Article 9 of Law No. 195/2024 (racial or ethnic origin, political opinions, religious beliefs, health data, biometric data, genetic data, sex life or sexual orientation). Please do not include such information in free-text fields (for example, the "Comments" section of the order form), unless strictly necessary and relevant to your request (for example, an accessibility requirement for delivery to a person with disabilities).
6. Who we share data with — recipients and processors
We do not sell your personal data. We share it only with providers who help us operate the site and the business, strictly to the extent necessary for the purpose for which it was collected, and with authorities when the law requires it. Our main providers are:
- Shopify Inc. (Canada/USA) — provides the e-commerce platform on which handlerkraft.md runs (hosting, security, payment modules if used in the future). Shopify acts as a processor on behalf of the controller.
- Web3Forms — receives and forwards by email the content of the order, contact, and service forms; it does not store data in its own database long-term, its role being simple forwarding.
- Google LLC — provides the email hosting (Google Workspace) on which the @handlerkraft.md addresses run, the backup log (Google Sheets), and the automated backup script (Google Apps Script), as well as, if enabled, Google Analytics and Google Ads for traffic statistics and advertising.
- Meta Platforms Ireland Ltd. — if the Meta Pixel is active on the site, it receives limited technical data (conversion events) for advertising purposes, only with your consent to cookies.
- Intuition Machines, Inc. (hCaptcha) — technically verifies whether a form submission comes from a real person rather than an automated bot.
- Courier partners — if you choose delivery to an address (rather than showroom pickup), we share with them the data strictly necessary for delivery (name, phone, address).
- Accounting and public authorities — the State Tax Service and other authorities, when required by law (for example, during a tax audit), as well as any external accountant who keeps Microcell SRL's financial records.
With every processor handling data on our behalf, we enter into, or rely on, a contractual data-processing commitment, in accordance with Article 28 of Law No. 195/2024.
7. International data transfers
Some of the providers listed above (Shopify, Web3Forms, Google, Meta, Intuition Machines) have servers or headquarters outside the Republic of Moldova, including in the United States. Law No. 195/2024 regulates transfers of data to third countries under a model similar to Chapter V of the GDPR: such a transfer is permitted when the receiving country ensures an adequate level of protection, or when equivalent contractual safeguards are applied (for example, standard contractual clauses).
The providers above operate at a global scale and have their own compliance mechanisms for international transfers (standard contractual clauses, certifications, or frameworks such as the Data Privacy Framework, as applicable). We do not transfer data to other recipients in third countries beyond these technical providers.
8. How long we keep your data
| Data category | Retention period |
|---|---|
| Completed order / quote request | For the duration of the business relationship, then a maximum of 3 years from the last interaction (the general limitation period under the Civil Code of the Republic of Moldova), for any contractual or warranty claims |
| Financial and accounting documents (invoices, receipts) | As set out in the Accounting and Financial Reporting Law No. 287/2017 and the "Index of Standard Documents" approved by the State Archive Service — generally, no less than 5 years from the date of issue |
| Local order draft (on your device) | 48 hours, then automatically deleted |
| Retry queue after technical failure (on your device) | 7 days, then automatically deleted |
| Marketing data / newsletter subscription | Until consent is withdrawn |
| Cookies | As set out in the Cookie Policy |
9. Data security
We apply reasonable technical and organisational measures to protect the data we collect, in accordance with Article 32 of Law No. 195/2024, including: an encrypted connection (HTTPS/TLS) across the entire site, bot verification (hCaptcha) and submission rate limiting on forms, an invisible honeypot field to filter automated submissions, restricted access to internal logs (Google Sheets) limited to authorised staff, and the absence of any bank card data storage on our infrastructure (we do not process online payments through the site).
10. Your rights
Under Chapter III of Law No. 195/2024, you have the following rights regarding your personal data:
- Right of access — to find out whether we process your data and, if so, to receive a copy of it.
- Right to rectification — to request the correction of inaccurate data or the completion of incomplete data.
- Right to erasure ("right to be forgotten") — to request the deletion of data, under certain conditions (for example, when it's no longer needed for the purpose for which it was collected).
- Right to restriction of processing — to request the temporary limitation of how we use your data, in certain situations.
- Right to data portability — to receive the data you provided to us in a structured, commonly used, machine-readable format.
- Right to object — to object to processing based on our legitimate interest, including objecting to direct marketing, at any time and without justification.
- Right not to be subject to a decision based solely on automated processing — not currently applicable, as we do not make such decisions, but mentioned here for full transparency.
- Right to withdraw consent — at any time, for any processing based on consent (for example, marketing or non-essential cookies), without affecting the lawfulness of processing carried out before the withdrawal.
11. How to exercise your rights
To exercise any of the rights above, write to us at pdcp@handlerkraft.md, clearly stating which right you wish to exercise and the details that allow us to identify you (name and, where applicable, the order or request number). We will respond within one month at most from receiving your request, a period that may be extended by up to two additional months for complex requests, in which case we will inform you of the reason for the extension.
The response is free of charge, except for manifestly unfounded or excessive requests (for example, repetitive ones), in which case we may charge a reasonable fee or reasonably refuse the request.
12. Right to lodge a complaint
If you believe that our processing of your data violates applicable law, you have the right to lodge a complaint with the national supervisory authority:
National Centre for Personal Data Protection (CNPDCP)
Email: centru@datepersonale.md
Phone: 022 820 801
Website: www.datepersonale.md
This right does not affect your right to bring proceedings directly before the competent courts of the Republic of Moldova.
13. Data protection officer (DPO)
We assessed the criteria set out in Article 37 of Law No. 195/2024 (public authority, systematic and large-scale monitoring, or large-scale processing of special categories of data) and, as of the date this document was last updated, Microcell SRL's activity does not fall under any of these criteria, so appointing a Data Protection Officer (DPO) is not mandatory. We will periodically reassess this conclusion as our activity evolves. The point of contact for any data-protection matter remains pdcp@handlerkraft.md.
14. Cookies and similar technologies
The site uses cookies and similar technologies for basic functionality, traffic measurement, and, where you give your consent, personalised advertising. Full details — which cookies we use, for what purpose, for how long, and how to withdraw your consent — are available in the Cookie Policy, published separately on the site.
15. Children and minors
The handlerkraft.md site is aimed at individuals and legal entities operating in the industrial equipment sector and is not intended for minors. We do not knowingly collect data from minors. If you have reason to believe we have mistakenly collected a minor's data, please contact us at pdcp@handlerkraft.md so we can delete it.
16. Changes to this document
We may periodically update this document, in particular as the practice of applying Law No. 195/2024 develops or as we introduce new features on the site. The date of the last update is shown at the top of the document. Significant changes will be flagged through a visible notice on the site.
17. Contact
MICROCELL S.R.L. (HandlerKraft)
MD-2060, Chișinău, Botanica sector, Dacia Blvd. 30/1, office 113
Showroom: Muncești Road 364, Chișinău, MD-2002
Personal data: pdcp@handlerkraft.md
General contact: marketing@handlerkraft.md · +373 22 788 907
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━