COOKIE POLICY — APL.MD

Last updated: September 2026

1. WHO WE ARE

The website apl.md is operated by the public association Alliance of Local Producers, with its registered office at 4 Albișoara Street, floor 10, Chișinău (hereinafter “APL”, “we”), acting as the controller of personal data, registered in accordance with the legislation of the Republic of Moldova.

For any questions regarding the processing of personal data, you may contact us at: office@alegelocal.md.

2. LEGAL FRAMEWORK

This policy has been drawn up in accordance with:

Law of the Republic of Moldova No. 133 of 08.07.2011 on the protection of personal data;
Regulation (EU) 2016/679 (General Data Protection Regulation — GDPR), to the extent applicable to the processing carried out by us;
Law No. 284 of 22.07.2004 on electronic commerce;
Recommendations of the National Centre for Personal Data Protection of the Republic of Moldova (NCPDP).

3. WHAT ARE COOKIES

Cookies are small text files stored on your device (computer, phone, tablet) when you visit a website. They allow the website to recognise your device, remember your preferences (for example, the language or the contents of your shopping basket) and collect information about how you use the site. In addition to cookies, we may use similar technologies: localStorage, sessionStorage, tracking pixels and mobile identifiers — this policy covers all of them.

Cookies may be “first-party” (set by apl.md) or “third-party” (set by our partners, for example Google or Meta), “session” cookies (deleted when the browser is closed) or “persistent” (stored for a defined period).

4. CATEGORIES OF COOKIES USED

4.1. STRICTLY NECESSARY

These cookies are essential for the website to function and cannot be disabled. They enable navigation, account authentication, language selection, and technical security (fraud protection, CSRF attack prevention, load balancing).

Legal basis: the legitimate interest of the controller and the necessity of performing a contract (Article 6(1)(b) and (f) GDPR; Article 5 of Law No. 133/2011). Consent is not required for this category.

Storage period: as a rule, for the duration of the session or for a short period (up to 12 months for the consent preference).

Cookies used:
PHPSESSID / _csrf (apl.md) — session, security — session
consent_preferences (apl.md) — storing your consent choices — 12 months
language (apl.md) — selected language — 12 months

4.2. FUNCTIONAL

They provide extended functionality and personalisation: recently viewed pages, favourites list, online chat, embedded video content. They may be set by us or by third-party providers processing data on our behalf under a contract.

Legal basis: your consent (Article 6(1)(a) GDPR; Article 5 of Law No. 133/2011), which may be withdrawn at any time.

Storage period: as a rule, up to 12 months.

4.3. STATISTICS (ANALYTICS)

They collect aggregated information about site usage: pages visited, visit duration, traffic sources, errors encountered. We use Google Analytics 4 (Google Ireland Limited), acting as a data processor; the IP address is truncated (anonymised).

Legal basis: your consent, which may be withdrawn at any time.

Storage period: as a rule, up to 14 months.

4.4. MARKETING

Used to display personalised advertising on our website and on external platforms, to cap ad frequency and to measure campaign effectiveness (remarketing). Data about your browsing behaviour may be shared with partners acting as independent or joint controllers: Google (Google Ads), Meta Platforms (Facebook, Instagram), TikTok. They may combine this data with other information they hold.

Legal basis: your consent only, which may be withdrawn at any time.

Storage period: as a rule, up to 13 months.

5. INTERNATIONAL DATA TRANSFERS

The use of Google, Meta and TikTok services may involve the transfer of personal data to third countries, including the United States of America. Such transfers are protected by appropriate safeguards: standard contractual clauses approved by the European Commission and/or certification of partners under the EU–U.S. Data Privacy Framework, in accordance with the requirements of Article 32 of Law No. 133/2011 on cross-border data transfers.

6. HOW TO MANAGE YOUR CONSENT

On your first visit, a banner allows you to choose: “Accept all”, “Necessary only” (strictly necessary cookies only) or “Customise” (individual settings by category).

You may change or withdraw your consent at any time by clicking the cookie settings icon permanently displayed in the interface.

The withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

In addition, you can delete or block cookies in your browser settings (Chrome, Safari, Firefox, Edge). Please note that blocking strictly necessary cookies may affect how the website works.

7. YOUR RIGHTS

In accordance with Law No. 133/2011 and, where applicable, the GDPR, you have the following rights: the right of access to data, the right to rectification, the right to erasure, the right to object, the right to restriction of processing, the right to data portability, the right not to be subject to automated individual decision-making, and the right to withdraw your consent at any time.

To exercise these rights, you may contact us at [EMAIL CONTACT]. We will respond to your request within a maximum of 30 days.

If you believe that your rights have been infringed, you have the right to lodge a complaint with the National Centre for Personal Data Protection of the Republic of Moldova (NCPDP): Chișinău municipality, 48 Serghei Lazo Street, MD-2004; www.datepersonale.md.

8. CHANGES TO THIS POLICY

We reserve the right to update this policy periodically. The updated version is published on this page, indicating the date of the last update. Significant changes will be communicated through a prominent notice on the website and, where necessary, by requesting new consent.

TO BE COMPLETED:

1. Alliance of Local Producers → exact legal name of the organisation
2. 4 Albișoara Street, floor 10, Chișinău → registered office in Chișinău
3. office@alegelocal.md → email address (for example: contact@apl.md)