This Policy describes personal data processing for the Logoteca digital store, based on how the website actually works at the update date.
Last updated: 12 August 2026.
The data controller is Societatea cu Răspundere Limitată „ZARA FAMILY GROUP” (short name: „ZARA FAMILY GROUP” S.R.L.), which operates the Logoteca online store (https://logoteca.md). • IDNO: 1025600034829 • Registered office: MD-2009, str. Gheorghe Asachi, 7, ap. 1, mun. Chișinău, Republica Moldova • Email: logoplaykids@gmail.com • Phone: +373 69825255
Until 22 August 2026 inclusive, Law No. 133/2011 on personal data protection mainly applies. From 23 August 2026, Law No. 195/2024 on personal data protection enters into force (published in the Official Gazette on 23 August 2024; applicable 24 months after publication), introducing a modernised GDPR-aligned regime. This Policy is drafted to remain coherent with both regimes while the Site collects a limited set of data.
Depending on how you use the Site, we may process: • at checkout (optional): name, email address; • order data: order number, products, quantities, prices, total, currency (EUR), payment status, digital access/delivery status, creation date, payment confirmation date (if any), payment reference (if any), Terms acceptance timestamp; • technical download access token (needed for digital delivery); • ordinary server log technical data (e.g. IP address, user-agent) generated by hosting infrastructure — to the extent present in system logs; • cookie and local storage data detailed below. We do not collect via the Site: full card number, CVV, health data, or national ID numbers.
We process data to: process orders; confirm payments; grant PDF access; communicate about the order; handle complaints/refunds; secure the Site and prevent abuse; comply with legal obligations (including accounting/tax duties where applicable).
As applicable: contract performance (order/digital delivery); legitimate interest (security, fraud prevention, store operation); legal obligations; consent where required (e.g. accepting Terms before payment, or non-essential cookies if introduced later).
Orders are stored on the application server in an internal order file (not publicly exposed by URL). Administrative access is authenticated.
In the current flow, the Customer is directed to the external MIA page for transfer. Logoteca does not process full card data on its own Site. After maib e-commerce (or another processor) is integrated, card data will be entered on the processor’s infrastructure; the Site will receive only transaction statuses/references needed for reconciliation, per the processor’s official documentation.
For delivery we use an httpOnly access cookie (`logoteca_access`) and/or a token from the order link, verified server-side before download.
The contact page does not save a form on the server. Contact is via email (logoplaykids@gmail.com) or phone (+373 69825255) using the user’s email/phone app (mailto/tel).
Cookies / storage identified on the Site: • `NEXT_LOCALE` — language preference (needed for i18n); • `logoteca_access` — httpOnly cookie for download access after confirmed payment (necessary); • `logoteca_admin` — admin session (administrators only, httpOnly); • `logoteca_cart_v1` — shopping cart in localStorage (browser local storage, not a cookie). Not implemented in code: Google Analytics, Google Tag Manager, Meta Pixel, TikTok Pixel, reCAPTCHA or other marketing/tracking tools on the Site.
External services observed in current operation: • hosting/server running the Site; • maib payment processor (when active); • Google fonts (Inter) via next/font; • transactional email (Resend), when configured; • links to social pages (Facebook, Instagram, TikTok).
Data may be accessed by: authorised merchant staff; the payment processor (when active); the hosting provider as needed for technical operation; public authorities where required by law.
Some third-party resources (e.. TikTok, Google Fonts) may involve international transfers of technical data. We do not intentionally transfer order data to marketing tools.
We keep order data for as long as needed to perform the contract, provide support, resolve disputes and meet legal obligations (including applicable accounting retention periods). localStorage cart data remains on the Customer’s device until cleared by the Customer or the cart is emptied.
We apply reasonable measures: HTTPS, httpOnly cookies for sensitive sessions, PDFs stored outside the public directory, server-side download checks, protected admin access. No measure guarantees absolute security.
Under applicable law, you may request: information, access, rectification, erasure (where applicable), restriction, opposition, and other rights under Law No. 133/2011 and, after 23 August 2026, Law No. 195/2024. To exercise rights: email logoplaykids@gmail.com, describing the request and contact details. We may ask for reasonable information to verify identity. Controller: „ZARA FAMILY GROUP” S.R.L., IDNO 1025600034829.
You may lodge a complaint with the National Center for Personal Data Protection (CNPDCP) of the Republic of Moldova, under the authority’s published procedures.
We may update this Policy. The current version is published on the Site, with last update date: 12 August 2026.
