Privacy and Cookie Policy

The company “Resource Alliance SRL. with its registered office at MD-2051, 84 Ion Creangă St., apt. (office) 3, Chișinău municipality, Republic of Moldova, operator of the online store https://www.moonglow.md“, declares that all personal data collected through the website https://www.moonglow.md are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) GDPR.

Resource Alliance SRL. respects the rights of customers accessing the online store with regard to the processing of their personal data, in accordance with the applicable legislation.

Resource Alliance SRL. collects personal information in the following cases:

a) registration of an account in the online store and its management. Legal basis – the processing is necessary for the performance of a contract with the data subject and the free provision of services (Article 6(1)(b) GDPR);

b) placing an order in the online store. Legal basis – necessity for the performance of the sales contract (Article 6(1)(b) GDPR);

c) subscription to the newsletter, the content of which is delivered electronically. Legal basis – the data subject’s consent to the processing of his or her personal data for the provision of the Newsletter service (Article 6(1)(a) GDPR).

d) the telephone number may be used both for service messages (order confirmation, delivery, technical notifications) and for promotional communications regarding MoonGlow products and campaigns. The customer may object at any time to the processing of his or her data for marketing purposes (including SMS) by contacting us using the contact details provided on the website; in this case, the number will be removed from the commercial communications list, except for messages strictly necessary for the performance of orders already placed.

1. When registering an account in the online store, the customer provides the following personal data:

a) first name and last name;
b) delivery address:
c) postal code and city;
d) country (state);
e) street, house/apartment number;
f) email address;
g) telephone number;

When registering an account in the online store, the customer sets an individual password to access his or her account. The customer may change the password later, under the conditions described in §6.

2. When placing an order in the online store, the customer provides the following data:

a) email address;
b) delivery address:
c) postal code and city;
d) country (state);
e) street, house/apartment number;
f) first name and last name;
g) telephone number;

3. In the case of entrepreneurs, the list of personal data collected is extended to include:

a) the entrepreneur’s company name;
b) the personal identification number (IDNP).

4. When using the Newsletter service, the customer provides only his or her email address.

5. Certain additional information is collected and processed while the customer accesses the website www.moonglow.md, in particular: the IP address assigned to the computer used by the customer or the external IP address of the Internet service provider, the domain name, the browser type, the access time and the type of operating system.

6. Navigation data, including links and cookies, related to the activities carried out in the online store www.moonglow.md. may be collected from customers. Furthermore, in order to establish and investigate claims, data such as first name, last name, data on the use of the services and other data necessary to prove the claim may be processed. Legal basis – legitimate interest (Article 6(1)(f) GDPR). The data are collected to facilitate the use of the services and to improve their functioning.

7. The provision of personal data to Resource Alliance SRL. is voluntary and is related to the provision of the online store’s services. During account registration, the customer is asked to fill in all the specified personal information in order to avoid errors. When placing an order without registering an account, the customer may encounter certain difficulties.

1. Personal data are transmitted to the service providers of Resource Alliance SRL. while the website https://www.moonglow.md is being accessed. The information is transmitted in accordance with the provisions of the GDPR, solely for the performance of service-related tasks.

2. Personal data are processed where the customer has given consent, and such processing is valid until the consent is withdrawn and for a period of time after withdrawal, in accordance with the law.

At the same time, personal data may be stored for the purpose of compiling certain statistics, conducting research and improving the services.

3. When a product is purchased in the online store, personal data may be transferred, depending on the customer’s choice, to courier services.

4. Navigation data are used to provide customers with a better quality of service, for statistical analysis of data and for adapting the online store to customers’ preferences, as well as for the administration of the online store.

5. When the customer is subscribed to the newsletter, Resource Alliance SRL. sends commercial information about promotions and new products available in the online store to the customer’s email address.

6. Upon request, Resource Alliance SRL. provides personal data to the authorized state authorities, in particular to the organizational units of the Prosecutor’s Office, the Police, the President of the Personal Data Protection Office, the President of the Office of Competition and Consumer Protection or the President of the Office of Electronic Communications.

1. The online store uses small text files called cookies. They are stored by Resource Alliance SRL. on the device used by the person accessing the online store. A cookie contains the name of the domain from which it originates, its expiry time and an individual, randomly selected number assigned to that file.

The information collected through these files helps ensure the proper functioning of the shopping cart (so that the order can be completed easily and quickly), the correct personalization of advertising content, as well as the general functioning of the website.

2. Resource Alliance SRL. uses two types of cookies:
a) Session cookies: after the browser session ends or the computer is shut down, the stored information is automatically deleted from the device’s memory. The session cookie mechanism does not allow the collection of personal data or confidential information from the customer’s computer.

b) Persistent cookies: these are stored in the memory of the device used by the customer and remain there until they are deleted or expire automatically. The persistent cookie mechanism does not allow the collection of personal data or confidential information from the customer’s computer.

3. Resource Alliance SRL. uses its own (first-party) cookies for the following purposes:

a) authenticating the customer in the online store and maintaining access (after authentication), so that the customer does not have to enter his or her login details and password on each separate page of the online store;
b) analyses, research and, in particular, the creation of anonymous statistics in order to understand how customers use the store’s website.

4. Resource Alliance SRL. uses third-party cookies: to collect general and anonymous statistical data through the Google Analytics analytical tools (third-party cookie administrator: Google Inc., based in the USA);

5. The cookie mechanism is safe for the customers of the online store. The collection of data through cookies does not cause any damage (viruses or other unwanted programs) to the customer’s computer. Nevertheless, customers have the option in their browsers to limit or disable cookie access to their computer. Using this option does not prevent access to and use of the online store’s website, except for certain functions.

6. Information about browsers and how to disable and refuse cookies.

a) Internet Explorer browser; ( https://support.microsoft.com/ro-ro/help/17442/windows-internet-explorer-delete-manage-cookies )
b) Android browser; (https://support.google.com/accounts/answer/61416?hl=ro&co=GENIE.Platform%3DAndroid&oco=1 )
c) Mozilla Firefox browser; (https://support.mozilla.org/ro/kb/activarea-si-dezactivarea-cookie-urilor)
d) Chrome browser; ( https://support.google.com/accounts/answer/61416?hl=ro&co=GENIE.Platform%3DDesktop&oco=1 )

7. Resource Alliance SRL. may collect customers’ IP addresses. An IP address is a number assigned to each computer connected to the Internet. In most cases, it changes each time a connection to the Internet is established. The IP address is used by Resource Alliance SRL. to determine the regions from which the most views are recorded. The information collected is considered useful for the administration and improvement of the website https://www.moonglow.md

8. The online store contains links to other websites. Important! Our company is not responsible for the privacy rules applicable to them.

1. Right to withdraw consent. Legal basis: Article 7(3) GDPR.

a) The customer has the right to withdraw any consent given to Resource Alliance SRL.;
b) Withdrawal of consent has no negative consequences for the customer, but it may prevent further use of the services or their functioning.

2. Right to object. Legal basis: Article 21 GDPR.

a) The customer has the right to object at any time to the processing of his or her personal data, including profiling, where Resource Alliance SRL. uses the personal data for direct marketing purposes;
b) If the customer’s objection proves to be justified and Resource Alliance SRL. has no other legal basis for processing the personal data, the customer’s data will be deleted from the database.

3. Right to erasure (“right to be forgotten”) – legal basis: Article 17 GDPR

a) the customer has the right to request the erasure of all or certain personal data.
b) the customer has the right to request the erasure of personal data in the following cases:

a. the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
b. the customer withdraws the consent on which the processing is based;
c. the customer objects to the use of his or her data for marketing purposes;
d. the personal data are processed unlawfully;
e. the personal data must be erased in order to comply with a legal obligation under European Union law or the law of a Member State to which Resource Alliance SRL. is subject.

c) Resource Alliance SRL., following certain requests for erasure of personal data or withdrawal of consent, may retain certain personal data only where the processing is necessary for the establishment, exercise or defence of legal claims, as well as for compliance with legal obligations. This applies in particular to personal data including: last name, first name, email address. The data are retained for the purpose of resolving complaints and claims related to the use of the online store https://www.moonglow.md.

4. Right to restriction of processing – legal basis: Article 18 GDPR.

a) The customer has the right to request restriction of the processing of his or her personal data. Submitting a request, pending its examination, prevents the use of certain functions or services whose use involves the processing of the data covered by the request. Resource Alliance SRL. will not send the customer any messages, including marketing messages.
b) The customer has the right to request restriction of the use of personal data in the following cases:

a. where the customer contests the accuracy of the personal data, Resource Alliance SRL. restricts their use for a period enabling the controller to verify the accuracy of the data (no longer than 7 days);
b. where the processing is unlawful and the data subject opposes the erasure of the data and requests the restriction of their use instead;
c. where the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject to establish or defend a right.

5. Right of access – legal basis: Article 15 GDPR.

The customer has the right to obtain from the controller confirmation as to whether or not his or her personal data are being processed and, where that is the case, the customer has the right:

a. to access the personal data;
b. to obtain information about the purpose of the processing, the categories of personal data processed, the envisaged storage period and the right to lodge a complaint with a supervisory authority;
c. to request a copy of the personal data.

6. Right to rectification – legal basis: Article 16 GDPR.
The customer has the right to request the controller to rectify inaccurate personal data. Taking into account the purposes of the processing, the customer has the right to request that incomplete personal data be completed, including by means of a supplementary statement, by sending the request to the email address in accordance with §7 of the Privacy Policy.

7. Right to data portability – legal basis: Article 20 GDPR
The customer has the right to receive the personal data he or she has provided to the controller and then transmit them to another controller of his or her choice. The controller will send the customer’s personal data in the form of a file in csv format.

8. When the customer exercises any of the above rights, Resource Alliance SRL. is obliged to comply with the request and resolve it without undue delay (no later than one month from its receipt). In justified cases, this period may be extended by two months. Resource Alliance SRL. will inform the customer, within one month of receipt of the request, of the extension and the reasons for the delay.

9. The customer may submit complaints, requests and applications to the controller regarding the processing of personal data and the exercise of his or her rights.

10. The customer has the right to request Resource Alliance SRL. to provide copies of the contractual clauses by sending the request through the means indicated in §7 of the Privacy Policy.

11. The customer has the right to lodge a complaint with the President of the Personal Data Protection Office regarding the infringement of his or her rights or of other rights granted under the GDPR.

1. Profiling means any form of automated processing of personal data. Profiling involves the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse aspects concerning that person’s actions, economic situation, health, personal preferences, location and behaviour.

2. Customers’ personal data may be processed by automated means; however, such processing does not produce legal effects and has no negative impact on the customers’ situation.

3. Profiling of personal data by Resource Alliance SRL. is based on the automated and manual processing of the customer’s data and its use to evaluate certain information about customers, in particular to analyse or predict their personal preferences and interests.

4. In order to send marketing messages to the customer, Resource Alliance SRL. uses its own cookie mechanisms to collect information about the activity of customers accessing the online store’s website. Details on the use of cookies can be found in §3. Legal basis – legitimate interest (Article 6(1)(f) GDPR), consisting in matching marketing messages to the customer’s preferences and interests.

1. Resource Alliance SRL. provides customers with a secure connection when transmitting personal data and when logging into the customer account on the website. Resource Alliance SRL. uses the SSL encryption system (security of data transmitted over the Internet).

2. Access to the customer account on https://www.moonglow.md is possible only after entering the personal password. If the customer has lost the access password, the online store allows a new password to be generated. The password is stored in the database in an encrypted form, in a manner that prevents it from being read. To generate a new password, the customer will be asked to enter the email address in the form available under the “Remind password” link provided at the login form. The new password will be sent automatically to the email address provided during registration or saved in the most recent update of the account profile.

1. The Privacy Policy may be amended; customers will be notified of the changes 7 days in advance.

2. Questions regarding the Privacy Policy should be addressed to: [email protected]