Privacy policy
Who is the data operator
The operator that determines the purposes and means of processing your personal data through ika.md is:
- Name: INVESTES SRL
- IDNO: 1018600048448
- Registered office: mun. Chișinău, or. Vatra, Miciurin, 5
- E-mail: [email protected]
- Phone: +373 (22) 007700
For any question about the protection of personal data, including to exercise the rights described below, you can contact us at [email protected].
Applicable law
We process personal data in accordance with Law no. 195/2024 on the protection of personal data of the Republic of Moldova and, to the extent it applies to us, with Regulation (EU) 2016/679 (GDPR).
What we process, for what purpose and on what basis
| Purpose | Data processed | Legal basis | Retention |
|---|---|---|---|
| Taking and delivering orders | Name, phone, e-mail, delivery address, order contents, comments | Performance of a contract | 3 years from the last order |
| User account | E-mail, password (stored hashed), order history | Performance of a contract | Until the account is deleted |
| Card payment processing | Transaction identifier, amount. We never receive or store your card details — they are entered directly on the bank's secure page. | Performance of a contract | As required by accounting law |
| Newsletter | E-mail address, date and source of consent | Consent | Until consent is withdrawn |
| Analytics and online marketing | Cookie identifiers, IP address, pages visited | Consent | See the Cookie policy |
| Proof of cookie consent | Anonymous identifier, chosen categories, IP address, user agent, date | Legal obligation | 3 years |
| Site security | Web server logs, including IP address | Legitimate interest | 12 months maximum |
Who we disclose data to
We pass data only to suppliers who provide services to us, and only as far as necessary: the couriers delivering your order, the bank processing card payments, our e-mail provider, our hosting provider, and Google and Meta for analytics and marketing cookies if you have consented. We do not sell your data.
Transfers outside the Republic of Moldova
Analytics and marketing cookies send data to Google (Google Ireland Limited / Google LLC) and Meta (Meta Platforms Ireland Limited / Meta Platforms, Inc.), which may process the data in the United States. The transfer only happens if you consented to the relevant categories and relies on Standard Contractual Clauses and on the providers' certification under the EU-U.S. Data Privacy Framework.
Your rights
You have the right of access, rectification, erasure, restriction of processing, objection and data portability, as well as the right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal. To exercise these rights write to us at [email protected]. We reply within 30 days at the latest.
Right to lodge a complaint
If you believe we have infringed your rights, you may contact the National Center for Personal Data Protection (CNPDCP), Chișinău, str. Serghei Lazo 48, MD-2004, e-mail [email protected], phone +373 22 820 801, as well as the courts.
Cookies
How we use cookies, their categories and how long they are kept are described separately in our Cookie policy, where you can change or withdraw your consent at any time.
Changes to this policy
This policy applies from 20.08.2026. Any change will be published on this page, with the date above updated.
