Compliance with the confidentiality of user data in accordance with the requirements of the Law on Personal Data Protection and Regulation (EU) 2016/679 (“General Data Protection Regulation” or “GDPR”) is one of the fundamental principles of our company’s operations. To comply with GDPR requirements and ensure the protection of personal data, our company undertakes to allocate all necessary resources. This Privacy Policy describes what types of data we collect and how we use the personal information obtained when you use our website. More information about the terms of use of the website and all available payment methods for products and services can be found on the Terms of Use page.
1. What is GDPR?
Starting from May 25, 2018, Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data—also known as the General Data Protection Regulation (GDPR)—entered into force. The regulation requires any Company or Operator that processes personal data to apply the new requirements and provide transparent information about how such data is processed.
2. Why is the processing and collection of personal data required?
In accordance with GDPR and our obligation to ensure the protection of your personal data stored in our database, we hereby inform you that your data is used solely for the purposes of managing our relationship with clients: ordering, sales, order processing, delivery, and customer service.
3. What personal data is subject to processing?
We collect information to ensure the most convenient use of our services. Most of the personal data we process is provided by you directly when you perform the following actions:
- Create an account or purchase products on our website (this includes personal data such as your name, phone number, email address, payment method, bank card details, etc.).
- Request assistance from our customer support service (e.g., by providing a phone number).
- Fill out contact forms or request information from us (e.g., your email address).
- Participate in contests, surveys, or other events organized by us, where certain information about you may be required.
We may also collect additional data during the provision of our services, in order to maintain the required level of service quality. These methods may not always be obvious, so we explain what they may include and how they work (noting they may change).
4. How do we use the information we collect?
According to Regulation (EU) 2016/679 and the applicable legislation of the Republic of Moldova, personal data is used solely within the relationship between our company and the data subject (client). We maintain strict confidentiality of the information received and use it only for the purposes for which it was collected. We use your personal data for the following:
4.1. To communicate with customers
a) Website access – When visiting www.varavara, certain information is automatically stored in server logs each time a webpage or its files are accessed. Each data package may include the referring webpage, IP address, access date and time, client web request, HTTP response code, data volume transferred, browser type, and platform type.
b) Location identification – Using your IP address, we may determine your geographical location. After the session ends, we do not retain IP addresses for tracking purposes.
c) Customer account – When creating a new account on www.varavara and filling out the registration fields, your personal data is stored in our database. You may request deletion of this information and your account at any time. When placing an order, the provided information will be processed to fulfill your purchase.
d) Order processing – We use the personal data stored in your account to process your requests.
4.2. Customer communication data
We may contact you directly or through a third-party service provider regarding products or services you purchased or subscribed to—for example, to send service messages. We may also contact you with offers for additional services we believe may interest you, provided you consent or if such communication aligns with legitimate interests. Consent is not required to purchase our products or services.
Possible methods of communication:
- Email;
- Text messages (SMS);
- Phone calls;
- Automated calls or text messages.
If information is collected as part of a joint offer, it will be clear at the time of collection who is gathering the information and whose privacy policy applies. You will be offered options regarding the use or disclosure of your personal data to the partner. If you believe someone has provided us with your personal data and wish to have it removed, contact us at info@varavara.md.
4.3. To comply with legal or governmental requests
We cooperate with government agencies, law enforcement authorities, and private parties to ensure compliance with the law. We may disclose your information if necessary to protect our rights or property or the rights or property of third parties, ensure public or personal safety, or prevent or stop illegal activities. Where permitted by law, we will take reasonable steps to notify you if your data must be provided as part of a legal process.
4.4. For web analytics using Google Adwords/Analytics
We use various web analytics tools (Google, Yandex, etc.) to collect information about user interactions with our website or mobile applications, including pages visited, referral sources, time spent on pages, operating systems, web browsers, network details, and IP addresses.
4.5. For receiving cookies
To improve our services, cookies are used to identify you during future visits. Each cookie may only be used by the respective service provider (e.g., Google in the case of Google Analytics). Data collected via cookies may be transferred to and stored by service providers on servers in countries other than your own. While this data does not include personal identifiers such as name or payment details, it is handled in accordance with the provider’s privacy policy.
4.6. For third-party websites
Our website contains links to third-party sites. We are not responsible for their privacy policies or content and recommend reviewing the privacy statements of each site you visit.
4.7. For displaying targeted advertising
You may receive targeted advertisements or interest-based offers based on your activity on our site and others, as well as based on products you currently own. Such ads may appear as rotating product banners. We also partner with third parties that manage advertising on our site and across the internet. These partners may use cookies or similar technologies to collect information about your activity and provide relevant advertising or assess ad performance.
5. Recipients of personal data
Recipients of personal data must comply with applicable legislation. Access to or transfer of personal data may be granted to:
- Employees of our company for client registration or order processing;
- Company partners;
- Payment/banking service providers;
- Marketing research providers;
- Advertising and promotion service providers;
- IT service providers;
- Other state or legal entities in connection with criminal investigations.
Legal Basis
For more detailed information, refer to the applicable legislation: Law of the Republic of Moldova No. 133 of 08.07.2011 on Personal Data Protection; Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR). The person responsible for personal data security within www.varavara is the Project Director, who can be contacted at: info@varavara.md.
