1. General Provisions

This Personal Data Processing Policy has been developed in accordance with the requirements of the Law of the Republic of Moldova No. 133 of 08.07.2011 on the Protection of Personal Data (hereinafter – the Law on Personal Data Protection) and establishes the procedure for processing personal data and the measures taken to ensure their security by CUSTOM CLOTHES LLC (hereinafter – the Operator).

1.1. The Operator defines as its main objective and condition for its activity the observance of human and citizen rights and freedoms during the processing of personal data, including the protection of the right to privacy, personal and family confidentiality.

1.2. This Policy of the Operator regarding the processing of personal data (hereinafter – the Policy) applies to all information that the Operator may obtain about visitors to the website https://custom.md.

2. Basic Terms Used in the Policy

2.1. Automated processing of personal data – processing of personal data using computing technology.

2.2. Blocking of personal data – temporary suspension of the processing of personal data (except when processing is required for clarification).

2.3. Website – the totality of graphic and informational materials, as well as software and databases, ensuring their accessibility on the Internet at the address https://custom.md.

2.4. Information system of personal data – the totality of personal data contained in databases, as well as information technologies and technical means ensuring their processing.

2.5. Depersonalization of personal data – actions as a result of which it becomes impossible, without using additional information, to determine the belonging of personal data to a specific User or another data subject.

2.6. Processing of personal data – any action (operation) or set of actions (operations), performed with or without the use of automation, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data.

2.7. Operator – CUSTOM CLOTHES LLC, a legal entity that, independently or jointly with others, organizes and/or carries out the processing of personal data, determines the purposes of processing, the composition of the personal data to be processed, and the actions performed with personal data.

2.8. Personal data – any information that relates directly or indirectly to a specific or identifiable User of the website https://custom.md.

2.9. Personal data permitted for distribution by the data subject – personal data to which the data subject grants access to an unlimited number of persons by giving consent.

2.10. User – any visitor to the website https://custom.md.

2.11. Provision of personal data – actions aimed at disclosing personal data to a specific person or a limited circle of persons.

2.12. Distribution of personal data – any actions aimed at disclosing personal data to an indefinite number of persons.

2.13. Cross-border transfer of personal data – transfer of personal data to the territory of a foreign state, to a public authority, or a foreign individual or legal entity.

2.14. Destruction of personal data – any actions resulting in the irreversible destruction of personal data.

3. Basic Rights and Obligations of the Operator

3.1. The Operator has the right to:

– receive truthful information from the data subject;

– in case of withdrawal of consent, continue processing if there are legal grounds;

– independently determine the composition of data protection measures.

3.2. The Operator is obliged to:

– provide the data subject with information about the processing of their data;

– organize processing in accordance with the law;

– respond to data subjects’ requests;

– provide the authorized authority with necessary information;

– publish this Policy publicly;

– take measures to protect personal data;

– cease processing and destroy personal data when legal grounds arise.

4. Basic Rights and Obligations of Data Subjects

4.1. Data subjects have the right to:

– obtain information about the processing of their data;

– request clarification, blocking, or destruction of data;

– revoke consent to data processing;

– challenge the Operator’s actions.

4.2. Data subjects are obliged to:

– provide accurate data;

– inform about any changes to their data.

4.3. Persons who have provided inaccurate data are liable under the legislation of the Republic of Moldova.

5. The Operator May Process the Following Personal Data of the User

5.1. Surname, first name, patronymic;

5.2. Email address;

5.3. Phone number;

5.4. Residence and registration address;

5.5. Depersonalized data (cookies) through internet statistics services (e.g., Google Analytics).

5.6. Special categories of personal data are not processed.

6. Principles of Personal Data Processing

6.1. The processing of personal data by the Operator is based on the following principles: a) Processing is carried out in good faith and in accordance with applicable law. b) Personal data are collected for specific, explicit, and legitimate purposes, and their further processing must not be incompatible with those purposes. c) Personal data must be adequate, relevant, and not excessive in relation to the purposes for which they are collected and/or subsequently processed. d) Data must be accurate and, if necessary, kept up to date; the Operator shall take all reasonable steps to ensure that inaccurate or incomplete data are deleted or corrected. e) Personal data are stored in a form that allows identification of data subjects for no longer than is necessary for the purposes for which the data are collected and processed.

6.2. The Operator ensures that all personal data processing operations fully comply with the principles mentioned above to guarantee the protection of Users’ rights and freedoms.

7. Purposes of Personal Data Processing

7.1. Informing the User, concluding and executing contracts, and providing access to the website’s services.

7.2. The Operator may send notifications about new products and services. The User may opt out by sending an email to custom_clothes_md@mail.ru
with the note “Unsubscribe from notifications.”

7.3. Depersonalized data are used to improve the website.

8. Legal Grounds for Personal Data Processing

8.1. The legal grounds for processing personal data by the Operator are:

– the statutory documents of CUSTOM CLOTHES LLC;

– contracts concluded between the Operator and the data subject;

– laws and other regulatory acts in the field of personal data protection;

– the Users’ consent to the processing of their personal data.

8.2. The Operator processes the User’s personal data only if they are voluntarily provided via forms on the website https://custom.md
or via email. By submitting the data, the User agrees to this Policy.

8.3. The Operator processes depersonalized User data if this is allowed by browser settings (cookies, JavaScript).

8.4. The data subject independently decides to provide personal data and gives consent freely and voluntarily.

9. Conditions for Personal Data Processing

9.1. Personal data processing is carried out with the consent of the data subject.

9.2. Processing is necessary to achieve purposes established by law or international treaties.

9.3. For the administration of justice or execution of judicial acts.

9.4. For the execution of a contract to which the data subject is a party.

9.5. For the exercise of the legitimate rights and interests of the Operator or third parties, provided that this does not infringe upon the rights and freedoms of the data subject.

9.6. Processing of personal data made public by the data subject.

9.7. Processing of personal data to be disclosed under law.

10. Procedure for Collecting, Storing, Transferring, and Other Types of Processing of Personal Data

10.1. The Operator ensures the security of personal data and takes all possible measures to prevent unauthorized access.

10.2. Personal data are never transferred to third parties without the consent of the data subject, except as required by law or necessary for the execution of a contract.

10.3. In case of inaccuracies in personal data, the User may update them by sending an email to custom_clothes_md@mail.ru
with the note “Update of personal data.”

10.4. The processing period is determined by the purposes unless otherwise provided by contract or law. The User may withdraw consent by sending an email to custom_clothes_md@mail.ru with the note “Withdrawal of consent for personal data processing.”

10.5. Information collected by third-party services (payment systems, communication tools, other service providers) is stored and processed by them in accordance with their Privacy Policies. The User must independently familiarize themselves with these documents. The Operator is not responsible for the actions of third parties.

10.6. Restrictions established by the data subject regarding the transfer and processing of personal data do not apply in cases of processing for state, public, or other interests defined by the legislation of the Republic of Moldova.

10.7. The Operator ensures the confidentiality of personal data during their processing.

10.8. Personal data are stored no longer than required for processing purposes unless otherwise provided by law or contract.

10.9. The condition for terminating the processing of personal data may be the achievement of processing purposes, expiration or withdrawal of consent, or detection of unlawful processing.

11. List of Actions Performed by the Operator with Personal Data

11.1. The Operator performs collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer, depersonalization, blocking, deletion, and destruction of personal data.

11.2. The Operator carries out automated processing of personal data with or without the possibility of transmitting data via telecommunication networks.

12. Cross-Border Transfer of Personal Data

12.1. Before initiating the cross-border transfer of personal data, the Operator must ensure that the foreign state provides adequate protection for the rights of personal data subjects.

12.2. Transfer to foreign states that do not provide adequate protection is permitted with the written consent of the data subject or for the execution of a contract to which the data subject is a party.

13. Confidentiality of Personal Data

The Operator and other persons who have obtained access to personal data are obliged not to disclose them to third parties and not to distribute them without the consent of the data subject, unless otherwise provided by law.

14. Final Provisions

14.1. The User may obtain any clarifications regarding the processing of personal data by contacting the Operator at the email address custom_clothes_md@mail.ru.

14.2. Changes to this document will reflect updates to the Operator’s data processing policy. The Policy is valid for an indefinite period until replaced by a new version.