Last updated: 31.10.2026
1. Who we are (data controller)
ZOLOTCO BAKERY SRL, IDNO 1021600033086, 28/2 Florilor St., apt. 127, Chișinău, MD-2068.
Contact for personal data matters: zolotco.bakery@gmail.com, tel. +373 79334128.
We process data in accordance with Law No. 195/2024 on personal data protection.
2. What data we process, why and on what legal basis
| Purpose | Data | Legal basis | Retention period |
|---|---|---|---|
| Processing and delivering orders | first and last name, phone, delivery address, email, order contents | performance of a contract | 5 years (accounting legislation) |
| Online payment | payment confirmation (card data is entered only on the secure maib page; we do not see or store it) | performance of a contract | as required by accounting rules |
| Replying to messages from contact forms | name, phone/email, message | consent / legitimate interest in replying | 12 months |
| Newsletter and promotions | consent (separate, can be withdrawn at any time) | until consent is withdrawn | |
| Website statistics (Google Analytics) | online identifiers, pages visited, device | consent (cookies) | 14 months |
| Advertising and remarketing (Meta Pixel) | online identifiers, actions on the site | consent (cookies) | according to Meta settings |
| Login with a social account (Facebook/Google) | name, email, account identifier | consent | as long as the account exists |
Providing data for an order is necessary: without it we cannot deliver. All other processing is optional. We do not use automated decisions or profiling with legal effects for you.
3. Who we share data with
- couriers / delivery service (name, phone, address);
- maib (payment processor);
- the website hosting provider;
- Telegram (internal order notifications for our team);
- Google (Analytics, Tag Manager) and Meta (Pixel), only if you accepted the relevant cookies;
- Mailchimp (sending the newsletter), only if you subscribed;
- public authorities, upon lawful request.
Some of these providers are located outside the Republic of Moldova (e.g. Telegram, Google, Meta, Mailchimp). Transfers are made on the basis of safeguards provided by law (standard contractual clauses or an adequacy decision).
4. Cookies
Strictly necessary cookies always work. Statistics and marketing cookies are enabled only after your consent in the cookie banner. You can withdraw consent at any time, as easily as you gave it.
5. Your rights
You have the right of access, rectification, erasure, restriction, portability and objection (including to direct marketing, at any time). You have the right to withdraw consent without affecting the lawfulness of processing carried out before withdrawal.
Requests should be sent to zolotco.bakery@gmail.com. We reply within one month, free of charge.
You may lodge a complaint with the National Centre for Personal Data Protection (datepersonale.md).
6. Security
We apply reasonable technical and organisational measures. In the event of a security breach that presents a risk to you, we notify the authority within 72 hours and, where necessary, the affected persons.
7. Children
The site is not intended for persons under 14. If we learn that we have collected data of a child under 14 without parental consent, we delete it.
8. Changes
We will publish any changes here, together with the update date.