Privacy

This policy explains what data we collect through plesso.md, why we collect it and what rights you have. It follows Law No. 195/2024 on personal data protection, in force since 23 August 2026.

Who is responsible

The controller is “MIN PARTY” SRL, IDNO 1025600022167, 6 Ștefan cel Mare și Sfânt Blvd., Centru district, Chișinău. Phone: +373 68 553 335. Email: [email protected].

For any question about your data, write to [email protected].

What the order form collects

  • your name, so we know who we are delivering to;
  • your phone number, to confirm the order and for the courier;
  • your delivery address in Chișinău;
  • your comment, if you write one;
  • the contents of the order: the boxes, the desserts chosen, the prices, the delivery cost and the total;
  • the site language and the order number, generated automatically.

What the events form collects

  • your name;
  • your company, if you give one;
  • your phone number and, optionally, your email address;
  • the type of event, the date and the number of boxes;
  • the details you write to us.

Why we use it, and on what basis

We use the order data to prepare and deliver your order, to call you for confirmation and to answer complaints. The basis is performance of the contract you are party to.

We use the events form data to prepare a quote for you. The basis is your own request, as a step before entering into a contract.

We keep the accounting documents for orders because tax and accounting law requires it.

What we do not do

We do not use Google Analytics, advertising pixels or any other analytics or marketing tools. We do not track you across other sites and we do not build profiles.

We do not sell or rent your data to anyone.

We do not send you commercial messages without your prior consent, as Law No. 284/2004 on electronic commerce requires. We have no newsletter.

We do not collect card details: you pay the courier on delivery.

Who else sees the data

  • the courier who brings your order, who sees only your name, phone number and address;
  • Cloudflare, Inc., which protects the site and its forms against bots (the Turnstile service) and through which the site's traffic passes; this processes your IP address and technical details about your browser;
  • LEUNIA CLOUD SERVICES S.R.L., IDNO 1023600017422, which develops, runs and hosts the site and the database;
  • Hostinger International Ltd., which provides the hosting infrastructure the developer uses;
  • public authorities, where the law requires it.

All providers process the data only on our instructions, under data processing agreements.

Transfers outside the country

The hosting servers are in the European Union, and Cloudflare, Inc. processes technical data in the United States. Those transfers rely on standard contractual clauses and the other safeguards Law No. 195/2024 provides.

How long we keep it

  • order data: 3 years after delivery, for complaints and guarantees;
  • accounting documents: the period tax law requires;
  • event enquiries: 12 months after the last contact, if they do not become an order;
  • technical security logs: at most 12 months.

After those periods the data is deleted or anonymised.

Cookies and browser storage

We use only what is strictly necessary: the box you compose and your cart stay in your browser's memory (localStorage), your chosen language and your cookie choice are kept in our own cookies, and Turnstile uses a technical cookie against bots.

We have no analytics or marketing cookies running. If we ever add any, they will stay off until you accept them by category in the cookie banner, and refusing will be as easy as accepting.

Refusing optional cookies does not stop you browsing, composing a box or placing an order.

Your rights

You have the right to access your data, to have it corrected or erased, to restrict processing, to object and to data portability, under Law No. 195/2024.

You can ask us for any of this at any time at [email protected]. We reply within 30 days.

If our answer does not satisfy you, you can contact the National Centre for Personal Data Protection, 48 Serghei Lazo street, Chișinău, or the courts.

Your agreement and automated decisions

The box on the forms confirms that you have read this policy. We process the order to perform the contract, so the box is not withdrawn separately: if you no longer want us to use your data, cancel the order or write to [email protected]. Data that tax law requires us to keep stays in the accounting records.

We take no automated decisions about you and build no profiles. Every order is read and confirmed by a person.

Children

The site is for people over 14. For anyone under 14, the order is placed by a parent or legal guardian.

Security

The site uses an encrypted connection (HTTPS), access to order data is limited to the people who prepare and deliver orders, and the forms are protected against bots.

Changes

We may update this policy. The version published here is the one in force.

Last updated: 17 September 2026.