Legal information
Privacy and cookies
What information you share with us when you order wine, book a winery tour or get in touch, why we need it and how you stay in control of it.
Working draft ·
This notice is a working draft and is due to be reviewed by a lawyer in the Republic of Moldova under Law No. 195/2024 on personal data protection. Until the final version is published, some points are marked “To be confirmed”.
The Romanian text is the reference version; the Russian and English versions are provided for information only.
01 Who is responsible for your data
To be confirmed
The controller of your personal data is S.R.L. “DOINA VIN”, IDNO 1003600017246, with its registered office at str. Vasile Alecsandri 82A, MD-2012, Chișinău, Republic of Moldova.
If you have any question about your data, write to us at [email protected] with the subject line “Date personale” (personal data). A dedicated data protection contact will be announced here.
02 Where this notice applies
This is the only privacy and cookie notice for Doina Vin. It covers both of our online spaces: the winery website and the online shop.
The website and the shop are intended only for people aged 18 or over, and your age is confirmed on entry. We do not knowingly collect data about minors; if you become aware that a minor has sent us personal data, let us know and we will delete it.
03 What data we process and why
To be confirmed
We only process the data we need to do what you ask of us.
- Shop orders. Your name, phone number, email address, delivery address, the products you order and the payment method you choose (cash on delivery or bank transfer). We use them to receive, prepare, deliver and invoice your order.
- Delivery. We pass your name, phone number and delivery address, or the branch you have chosen, to the courier so that your wine can reach you.
- Tour bookings. Tours are booked through the shop cart: along with your order details, you give us your preferred date, a time if you wish, and the number of people. We use this to confirm and prepare your tour of the winery.
- Messages and questions. When you write to us, we process your email address, your name and whatever you tell us in your message, so that we can reply.
- Age confirmation. When you arrive, we ask whether you are 18 or over. Your answer is stored only in your browser, in a cookie; we do not ask for any ID on the website.
- Technical data. When you visit the website or the shop, our servers automatically log your IP address, browser type, the date and time and the pages requested, to keep the site secure and working.
- Marketing communications. We do not currently send marketing communications. If we start, we will only do so with your separate consent, given by ticking a box that is not pre-ticked and is not a condition of your order; you will be able to withdraw it at any time with a simple message.
04 Legal bases for processing
To be confirmed
Each processing activity rests on a legal basis provided for by Law No. 195/2024. The exact mapping between purposes and provisions of the law will be set during the legal review.
- Contract. Order, delivery and booking details are needed to enter into and perform a contract at your request.
- Legal obligations. We keep the accounting and tax records relating to a sale because the law requires us to.
- Legitimate interests. Replying to your messages, keeping the website secure and defending our rights in the event of a dispute.
- Consent. Marketing communications and any cookie that is not strictly necessary. You can withdraw consent as easily as you gave it.
05 Who we share data with
To be confirmed
We never sell or rent your data to anyone. We share it only with the providers the website and your orders depend on, or where the law requires it.
- Nova Post. The courier that delivers our orders receives the details needed for delivery: your name, phone number and address or chosen branch.
- Banks. When you pay by bank transfer, the payment details pass through your bank and ours.
- Technical providers. The website, the shop and our email run with the help of technical providers (hosting, email delivery, backups), which process data only on our instructions. Their names and the countries where their servers are located will be listed here.
- Web fonts. To display our pages, your browser loads fonts from Google Fonts; this provider receives your IP address and technical details about your browser. We do not use this service for analytics or advertising.
- Authorities. Only when the law requires us to.
06 How long we keep data
To be confirmed
We keep data only for as long as we need it for the purpose for which we received it, or for as long as the law requires. The retention period for each category (orders, accounting records, bookings, messages, technical data) will be published here after the legal and accounting review.
Processing based on consent stops as soon as you withdraw it.
07 Your rights
To be confirmed
Law No. 195/2024, which is aligned with the General Data Protection Regulation (GDPR), has applied since 23 August 2026 and repealed Law No. 133/2011. Under it, your main rights are:
Access
To find out what data we hold about you and to receive a copy.
Rectification
To have inaccurate or incomplete data corrected.
Erasure
To have data deleted that we no longer need or are not entitled to keep.
Restriction and objection
To have processing limited or to object to it, including at any time where marketing communications are concerned.
Portability
To receive the data you have provided in a structured format that another controller can use.
Withdrawal of consent
At any time, without affecting processing carried out before you withdraw it.
Complaint
If you believe your data has been processed unlawfully, you can lodge a complaint with the CNPDCP, the data protection supervisory authority of the Republic of Moldova.
08 Cookies
To be confirmed
Cookies are small files that a website saves in your browser. We only use the cookies and local storage that the website and the shop cannot work without.
We do not set analytics or advertising cookies before you consent. If we ever introduce such cookies, we will ask you first, through a banner with three buttons of equal size and prominence: “Accept”, “Reject” and “Settings”. Rejecting them will not limit your access to the website or the shop.
You can delete cookies at any time in your browser settings; you will then be asked to confirm your age again.
09 Customer account and signing in with Google, Facebook or Telegram
To be confirmed
A customer account is optional: you can order without one. If you create an account, we keep the email address, name, phone number and addresses you enter, to show you your orders and fill in your next order faster.
If you sign in with Google, Facebook or Telegram, we receive from that service only what it shows you when you sign in: your name and email address (Google, Facebook) or your name, username and account ID (Telegram), sometimes also your profile photo. We never receive your password and never post anything on your behalf.
Deleting your data. You can ask us at any time to delete your account and the data received from Google, Facebook or Telegram: write to [email protected] with the subject “Account deletion”, from the account’s email address. We delete the account within one month at the latest and confirm by email; invoice data and the data of orders already delivered are kept only as long as the law requires. You can also remove Doina Vin’s access at any time in your Google, Facebook or Telegram account settings.
10 Changes to this notice
When we change the way we process data, we update this page and the version date at the top. If a change affects you directly, for example a new purpose for which we need your consent, we will let you know beforehand.