Privacy Policy

Last updated: 14 August 2026

1. Who we are (the data controller)

This Privacy Policy explains how the personal data of people who visit mostelle.md or use our services is collected, used and protected.

The personal data controller is:
S.R.L. MOSTELLE
IDNO: 1016600017466
Registered office: 26 Mihai Eminescu St., Chișinău, MD-2012, Republic of Moldova
E-mail: info@mostelle.md
Phone: 060 100 999 (also on WhatsApp: +373 60 100 999)

We process your data in accordance with Law of the Republic of Moldova No. 195/2024 on personal data protection, which transposes Regulation (EU) 2016/679 (GDPR).

2. What data we collect

Depending on how you interact with us, we may process:

Identification and contact data: first name, last name, phone number, e-mail address — which you provide through contact forms, appointment requests or chat.

Appointment and service data: the requested service, the date and time of the appointment, the history of requests and messages.

Health data (special category): if, as part of a request, appointment or consultation, you share information about your health, conditions, treatments or other medical aspects relevant to the aesthetic and medical services we provide. Such data is processed with enhanced protection and only on the grounds provided by law.

Technical and browsing data: IP address, device and browser type, pages visited, visit source and interactions with the site — collected through cookies and similar technologies, only with your consent.

We do not ask you to enter passwords, banking data or card numbers through the site forms.

3. Purposes and legal bases for processing

To respond to requests and contact you: we process contact data to reply to messages sent through forms, phone or chat. Basis: your consent and/or steps taken at your request before entering into a contract.

For appointments and providing services: we manage appointments and provide the requested aesthetic and medical services. Basis: performance of the service contract; for health data — explicit consent and/or the provision of healthcare.

For legal obligations: keeping accounting and medical records where required by law. Basis: compliance with a legal obligation.

For statistics and site improvement: we analyse how the site is used (Google Analytics, Microsoft Clarity). Basis: consent given through the cookie banner.

For marketing and campaign measurement: we measure the performance of advertising campaigns, only if you accepted the corresponding cookies. Basis: your consent.

For security and abuse prevention: protecting the site against spam and fraudulent use (including Google reCAPTCHA). Basis: our legitimate interest in keeping the site secure.

4. Who we disclose data to (processors and third parties)

We do not sell your data. We may share it only with providers who help us operate, acting as processors and strictly within the purposes above:

The website hosting provider.
Google (Google Analytics, Google Tag Manager, reCAPTCHA) — statistics, tag management and anti-spam protection.
Microsoft Clarity — site usage statistics.
Altegio (alteg.io) — the online booking system.
JivoChat (Jivo) — the on-site chat service.
Trustindex — displaying reviews.

We may also disclose data to public authorities where required by law.

5. Transfers outside the Republic of Moldova

Some of the providers above (e.g. Google, Microsoft) may process data on servers located outside the Republic of Moldova. In such cases, we ensure the transfer takes place with adequate safeguards, in line with Law No. 195/2024.

6. How long we keep data

We keep data only for as long as necessary:
Messages from forms and chat: until the request is resolved and for a reasonable period afterwards.
Appointment and service data: for the duration of the contractual relationship and afterwards, in accordance with applicable legal terms (including medical and accounting obligations).
Data collected through cookies: for the validity period of each cookie or until consent is withdrawn.

7. Your rights

In accordance with Law No. 195/2024, you have the right:
to access your data;
to rectify inaccurate data;
to erasure of data (“the right to be forgotten”);
to restrict processing;
to object to processing;
to data portability;
to withdraw your consent at any time, without affecting the lawfulness of prior processing;
to lodge a complaint with the supervisory authority.

To exercise these rights, write to us at info@mostelle.md.

8. Supervisory authority

If you believe your rights have been infringed, you may contact:
National Center for Personal Data Protection (CNPDCP)
48 Serghei Lazo St., Chișinău, MD-2004, Republic of Moldova
Phone: +373 22 820 801
E-mail: centru@datepersonale.md
Website: datepersonale.md

9. Data security

We apply reasonable technical and organizational measures to protect data against unauthorized access, loss or disclosure, including a secure connection (HTTPS) and limited access to information.

10. Cookies and similar technologies

What cookies are: small text files that the site stores on your device when you visit it. They help the site work, remember preferences and understand how it is used. We also use similar technologies (pixels, local storage).

Consent: on your first visit you will see a banner through which you can accept or reject non-essential cookies. Until you make a choice, statistics and marketing cookies remain blocked. You can change your mind at any time using the cookie settings button shown on the site.

Cookie categories:
Strictly necessary (functional) — enable the basic operation of the site, security and remembering your cookie choice; they cannot be disabled. They include reCAPTCHA and, if you use them, the chat and the booking module.
Statistics (analytics) — help us understand how the site is used; activated only with your consent. Providers: Google Analytics, Microsoft Clarity.
Marketing — used to measure the performance of advertising campaigns; activated only with your consent. Provider: Google (via Google Tag Manager).

Third-party services that may set cookies: Google Analytics, Google Tag Manager and Google reCAPTCHA (Google LLC), Microsoft Clarity (Microsoft Corporation), Altegio (online booking), JivoChat (chat) and Trustindex (reviews). These providers may set their own cookies, in accordance with their privacy policies.

Managing cookies: you can manage your preferences from the cookie banner (the cookie settings button) or in your browser settings. Disabling some cookies may affect the operation of certain sections of the site.

11. Minors’ data

Our services are intended for adults. For minors, data is processed only with the consent of the legal representative.

12. Changes to the policy

We may update this policy. The version in force is always the one published on the site, with the date of the last update shown at the top.