The company “Resource Alliance SRL, with registered office at MD-2051, 84 Ion Creanga Street, Apt. (Of) 3, Chisinau, Republic of Moldova, the operator of the online store www.moonglow.md“, declares that all personal data collected through the website www.moonglow.md are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation – GDPR).

Resource Alliance SRL respects the rights regarding the processing of personal data of customers accessing the online store, in accordance with applicable legislation.

Resource Alliance SRL collects personal information in the following situations:

a) Registration of an account in the online store and its management. Legal basis – Processing of data is necessary for the performance of a contract with the data subject and the free provision of services (Article 6(1)(b) GDPR);

b) Placing an order in the online store. Legal basis – Necessity for the performance of the sales contract (Article 6(1)(b) GDPR);

c) Subscribing to the newsletter, which is provided electronically. Legal basis – Consent of the data subject to process their personal data for the provision of the Newsletter service (Article 6(1)(a) GDPR);

d) the phone number may be used both for service messages (order confirmation, delivery updates, technical notifications) and for promotional communications about MoonGlow products and campaigns. The customer may object at any time to the processing of their data for marketing purposes (including SMS) by contacting us via the contact details provided on the website; in such case, their number will be removed from the commercial communication list, except for messages strictly necessary for the execution of orders already placed.

1. When registering an account in the online store, the customer provides the following personal data:

a) First and last name;
b) Delivery address;
c) Postal code and city;
d) Country;
e) Street, house/apartment number;
f) Email address;
g) Phone number;

When registering an account in the online store, the customer sets a personal password to access their account. The customer can change the password later under the conditions described in §6.

2. When placing an order in the online store, the customer provides the following data:

a) Email address;
b) Delivery address;
c) Postal code and city;
d) Country;
e) Street, house/apartment number;
f) First and last name;
g) Phone number;

3. For entrepreneurs, the list of collected personal data is expanded to include:

a) Company of the entrepreneur;
b) Personal identification number (IDNP).

4. When using the Newsletter service, the customer provides only their email address.

5. Certain additional information is collected and processed while the customer accesses the website www.moonglow.md, in particular: IP address assigned to the computer used by the customer or the external IP address of the Internet provider, domain name, browser type, access time, and operating system type.

6. Browsing data, including links and cookies, related to activities carried out in the online store www.moonglow.md may be collected from customers. Additionally, to establish and investigate claims, data such as first and last name, usage information, and other data necessary to prove the existence of a claim may be processed. Legal basis – legitimate interest (Article 6(1)(f) GDPR). Data is collected to facilitate the use of services and improve their functionality.

7. The transfer of personal data to Resource Alliance SRL is voluntary in connection with the provision of online store services. During account registration, the customer is requested to provide all specified personal data to avoid errors. When placing an order without registering an account, the customer may encounter certain obstacles.

1. Personal data is transmitted to service providers within Resource Alliance SRL while accessing the website www.moonglow.md. Information is transmitted in accordance with the provisions of the GDPR, solely for the performance of service tasks.

2. Personal data is processed when there is consent from the customer, which remains valid until it is withdrawn and for a period of time thereafter, in accordance with the law.

At the same time, the storage of personal data may be necessary for certain statistics, research, and service improvements.

3. When purchasing a product in the online store, personal data may be transferred, depending on the customer’s choice, to courier services.

4. Browsing data is used to provide customers with better service quality, for statistical analysis of data, adaptation of the online store to customer preferences, and administration of the online store.

5. When the customer subscribes to the newsletter, Resource Alliance SRL sends commercial information about promotions and new products available in the online store to the customer’s email address.

6. In case of a submitted request, Resource Alliance SRL provides personal data to authorized state authorities, in particular to organizational units of the Prosecutor’s Office, Police, the President of the Office for Personal Data Protection, the President of the Competition and Consumer Protection Office, or the President of the Electronic Communications Office.

1. The online store uses small text files called cookies. These are stored by Resource Alliance SRL on the device used by the person accessing the online store. A cookie contains the domain name from which it originates, its expiration time, and a randomly assigned individual number for that file.

The information collected through these files helps the shopping cart function properly (to complete the order quickly and easily), to correctly personalize the content of advertisements, and to ensure the overall functionality of the website.

2. Resource Alliance SRL uses two types of cookies:
a) Session cookies: after the browser session ends or the computer is turned off, the stored information is automatically removed from the device’s memory. The session cookie mechanism does not allow the collection of personal data or confidential information from the customer’s computer.

b) Persistent cookies: these are stored in the memory of the device used by the customer and remain there until deleted or expired automatically. The persistent cookie mechanism does not allow the collection of personal data or confidential information from the customer’s computer.

3. Resource Alliance SRL uses its own cookies for the following purposes:

a) Customer authentication in the online store and ensuring access after login, allowing the customer not to enter login credentials and password on every separate page of the online store;
b) Analysis and research, in particular to create anonymous statistics to understand how customers use the store’s website.

4. Resource Alliance SRL uses external cookies to collect general and anonymous statistical data through Google Analytics tools (external cookie administrator: Google Inc., based in the USA).

5. The cookie mechanism is safe for online store customers. Data collection through cookies does not cause harm (viruses or other unwanted programs) to the customer’s computer. However, in their browsers, customers have the option to limit or disable cookie access on their devices. Using this option does not prevent access to and use of the online store, except for certain functions.

6. Information on browsers and how to disable or refuse cookies:

a) Internet Explorer browser: https://support.microsoft.com/ro-ro/help/17442/windows-internet-explorer-delete-manage-cookies
b) Android browser: https://support.google.com/accounts/answer/61416?hl=ro&co=GENIE.Platform%3DAndroid&oco=1
c) Mozilla Firefox browser: https://support.mozilla.org/ro/kb/activarea-si-dezactivarea-cookie-urilor
d) Chrome browser: https://support.google.com/accounts/answer/61416?hl=ro&co=GENIE.Platform%3DDesktop&oco=1

7. Resource Alliance SRL may collect customers’ IP addresses. An IP address is a number assigned to each computer connected to the Internet. In most cases, it changes each time the Internet connection is established. The IP address is used by Resource Alliance SRL to determine the regions with the highest number of views. The information collected is considered useful for managing and improving the website www.moonglow.md

8. The online store contains links to other websites. Important! Our company is not responsible for the privacy policies applicable to these sites.

1. Right to withdraw consent. Legal basis: Article 7(3) of the GDPR.

a) The client has the right to withdraw any consent given to Resource Alliance SRL.
b) Withdrawal of consent does not have negative consequences for the client but may prevent the continued use or functioning of certain services.

2. Right to object. Legal basis: Article 21 of the GDPR.

a) At any time, the client has the right to object to the processing of their personal data, including profiling, if Resource Alliance SRL uses personal data for direct marketing;
b) If the client’s objection is justified and Resource Alliance SRL has no other legal basis to process the personal data, the client’s data will be removed from the database.

3. Right to erasure (“right to be forgotten”). Legal basis: Article 17 of the GDPR.

a) The client has the right to request the deletion of all or certain personal data.
b) The client has the right to request the deletion of personal data in the following cases:

a. Personal data are no longer necessary for the purposes for which they were collected or processed;
b. The client withdraws consent on which the processing is based;
c. The client objects to the use of their data for marketing purposes;
d. Personal data are processed unlawfully;
e. Personal data must be deleted to comply with a legal obligation under EU law or the law of a Member State applicable to Resource Alliance SRL.

c) Resource Alliance SRL, following certain requests for deletion of personal data or withdrawal of consent, may retain certain personal data only when processing is necessary for establishing, exercising, or defending claims, as well as for fulfilling legal obligations. This applies in particular to personal data such as: name, surname, email address. Data are retained for resolving complaints and claims related to the use of the online store www.moonglow.md

4. Right to restriction of processing. Legal basis: Article 18 of the GDPR.

a) The client has the right to request the restriction of the processing of their personal data. Submission of a request, while pending review, prevents the use of certain functions or services whose use involves processing of the data covered by the request. Resource Alliance SRL will not send messages to the client, including marketing messages.
b) The client has the right to request a restriction on the use of personal data in the following cases:

a. The client contests the accuracy of personal data; Resource Alliance SRL limits their use for a period allowing the operator to verify the accuracy of the data (no more than 7 days);
b. When the processing of data is unlawful, and the data subject opposes the deletion of the data, requesting restriction of use;
c. The operator no longer needs the personal data for processing purposes, but the data subject requests them for the establishment, exercise, or defense of a legal right.

5. Right of access. Legal basis: Article 15 of the GDPR.

The client has the right to obtain from the operator confirmation as to whether personal data concerning them is being processed. If so, the client has the right to:

a. Access their personal data;
b. Obtain information about the purpose of processing, categories of personal data processed, planned storage period, and the right to lodge a complaint with a supervisory authority;
c. Request a copy of the personal data.

6. Right to rectification. Legal basis: Article 16 of the GDPR.

The client has the right to request the controller to rectify inaccurate personal data. Considering the purposes of processing, the client has the right to request the completion of incomplete personal data, including by providing a supplementary statement, directing the request to the email address indicated in §7 of the Privacy Policy.

7. Right to data portability. Legal basis: Article 20 of the GDPR.

The client has the right to receive personal data they provided to the operator and to transmit it to another personal data operator of their choice. The operator will provide the client’s personal data in a CSV file format.

8. Compliance with requests.

In situations similar to the rights mentioned above, Resource Alliance SRL is obliged to comply with the request and resolve it without delay (no later than one month from receipt). In justified cases, the deadline may be extended by two months. Resource Alliance SRL will inform the client within one month of receiving the request about the extension and the reasons for the delay.

9. Complaints and requests.

The client may send complaints, requests, and inquiries regarding the processing of personal data and the exercise of their rights to the operator.

10. Right to contractual clauses.

The client has the right to request from Resource Alliance SRL copies of contractual clauses by submitting the inquiry through the module indicated in §7 of the Privacy Policy.

11. Right to lodge a complaint with the supervisory authority.

The client has the right to lodge a complaint with the President of the Personal Data Protection Office in case of a violation of their rights or other rights granted under the GDPR.

1. Profiling – any form of automated processing of personal data. Profiling involves the use of personal data to evaluate certain personal aspects of an individual, in particular to analyze aspects related to their actions, economic situation, health, personal preferences, location, and behavior.

2. Automatic processing of client personal data

Clients’ personal data may be processed automatically; however, such processing does not produce legal effects and does not have a negative impact on the clients’ situation.

3. Profiling by Resource Alliance SRL

Profiling of personal data by Resource Alliance SRL is based on both automated and manual processing of client data, using it to evaluate certain client information, particularly to analyze or predict the client’s personal preferences and interests.

4. Marketing messages

To send marketing messages to clients, Resource Alliance SRL uses its own cookie mechanisms to collect information about the activity of clients accessing the online store website. Details regarding cookie usage can be found in §3. Legal basis – legitimate interest (Article 6(1)(f) of the GDPR), which consists of correlating marketing messages with the client’s preferences and interests.

1. Resource Alliance SRL provides clients with a secure connection for transmitting personal data and for accessing their customer account on the website. Resource Alliance SRL uses the SSL encryption system (security of data transmitted over the Internet).

2. Access to the client account on [www.moonglow.md](http://www.moonglow.md) is possible only after entering a personal password. If the client has lost their access password, the online store allows generating a new password. The password is stored in the database in an encrypted form that prevents it from being read. To generate a new password, the client will be asked to enter their email address in the form available under the “forgot password” link provided in the login form. The new password will be sent automatically to the email address provided during registration or saved in the last update of the account profile.

1. The privacy policy may be amended, and clients will be notified 7 days in advance of any changes.

2. Questions regarding the privacy policy should be addressed to: [email protected]

State Inspectorate for the Supervision of Non-Food Products and Consumer Protection

Address: 78 Vasile Alecsandri St., Chisinau

Phone: (+373) 22 501 981