Version 1.1 · Updated 09.09.2026
The welldone.md website is operated by “PARTSHUB S.R.L.”, IDNO 1025600068392, registered office at MD-2068, bd. Moscova 11, ap. 472, mun. Chișinău, Republica Moldova. The repair workshop is located at 13 Petru Zadnipru Street, Chișinău. “PARTSHUB S.R.L.” is the data controller for personal data collected through this website, within the meaning of Law No. 195/2024 on the protection of personal data.
For any question or request about your personal data, write to us at welldone.service.md@gmail.com or call +373 68 311 003. We have not appointed a separate Data Protection Officer — requests are handled directly by the company's management.
Through the request forms on the site we collect the name and phone number you enter, optionally a description of the problem (or your specialty, on the technician recruiting page), the page and language the request was sent from, and the submission date/time. If you arrive from an ad, we may also receive UTM parameters from the page URL (utm_source, utm_medium, utm_campaign, utm_term, utm_content) indicating which campaign you came from. We do not store the full IP address in the consent log, we do not request payment details on the site, and we do not collect special categories of data (health, ethnic origin, etc.).
We use the form data to call you back, clarify the fault or the cooperation you are requesting, and arrange the technician's visit or the repair. The minimal technical data (page, language, date) helps us understand where requests come from and improve the site. If you enable the analytics or marketing cookie categories, this data is used, through Google, for traffic statistics and, respectively, for targeted advertising.
We process your name and phone number on the basis of steps taken at your request prior to entering into a contract (Art. 6 of Law 195/2024, corresponding to Art. 6(1)(b) GDPR — steps necessary before concluding a service agreement) and subsequently for the performance of the repair agreement. Retention of service/warranty documents and accounting data is based on the controller's legal obligations. Security measures (such as anti-spam protection on the form) are based on the controller's legitimate interest in protecting the site and client data. Analytics and marketing cookies, as well as any commercial communication, are based exclusively on your explicit consent, given through the cookie banner.
Name and phone number are mandatory — without them we cannot contact you or process a repair or cooperation request. The problem description is optional. The only consequence of not filling in the mandatory fields is that we will not be able to act on your request through the form; you can always call us directly.
Requests submitted through the form currently reach our team via Telegram (access restricted to management and to the staff who handle requests) and are kept as a local backup on the server hosted on Railway (Railway Corporation), which provides the hosting and storage infrastructure for the requests file. Integration with an external CRM (SalesDrive) and email notifications are prepared in the code but are not active at this time — they will be enabled and separately described if and when they go live. If you enable the analytics or marketing cookie categories, browsing data (not the name/phone from the form) is sent to Google (Google Ireland Limited / Google LLC) via Google Tag Manager, for traffic analysis and, respectively, advertising. We do not sell your data and do not share it with other third parties for marketing purposes.
Railway, Telegram, and Google may process data outside the Republic of Moldova, potentially including outside the European Economic Area. Any such transfer takes place only where an applicable legal basis exists and only with the safeguards required by law for the international transfer of personal data (for example standard contractual clauses or another recognised transfer mechanism).
Requests saved locally (the backup file) are kept for 24 months from the date received, after which they are automatically deleted. Request messages sent to the team's Telegram group are kept there for no more than 90 days under the company's internal rule, after which they are removed. The technical cookie-choice log (without name, phone, or full IP) is kept for 3 years. Documents related to completed repairs, warranty records, and accounting documentation may be kept separately and for longer, as required by applicable accounting and tax legislation in the Republic of Moldova, independently of the data from the web form.
As a data subject you have the right to access your data, the right to rectification of inaccurate data, the right to erasure (“the right to be forgotten”), the right to restrict processing, the right to object to processing based on legitimate interest, the right to data portability (for data processed automatically, on the basis of consent or contract), and the right to withdraw, at any time, your consent to analytics/marketing cookies, without affecting the lawfulness of processing carried out before the withdrawal.
You can exercise any of these rights by sending a request to welldone.service.md@gmail.com, indicating which right you wish to exercise and the information needed to identify you. We will respond within one month of receiving the request; if the request is complex or we have many requests to process, this period may be extended by up to two further months, in which case we will inform you of the extension and the reasons within the first month.
If you believe the processing of your data breaches data-protection legislation, you have the right to lodge a complaint with the National Center for Personal Data Protection of the Republic of Moldova (CNPDCP), datepersonale.md, without prejudice to any other administrative or judicial remedy available to you.
We do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you. Every request submitted through the form is reviewed and handled by a member of our team.
We do not use the data from the contact form (name, phone, description) for advertising purposes. If you choose to accept the marketing cookie category, Google may use browser identifiers (not the form data) to show you targeted ads or remarketing on other websites; this processing takes place only after your explicit consent and can be switched off at any time from “Cookie settings”.
Our services are intended for adults. We do not knowingly request or collect data from minors through the site's forms. If you become aware that a minor has sent us data without a legal guardian's consent, please contact us so we can delete it.
The site is served exclusively over HTTPS. The requests file is written atomically (removing the risk of a corrupted file on failure), and access to the hosting server is restricted to the technical team. Access to the Telegram group receiving requests is limited to management and the staff who actually handle requests. The form is protected against automated (spam) submissions, request-rate limiting, and validation of submitted data. We do not publish or publicly display request data on the site.
The site uses cookies and similar technologies (such as localStorage) according to the categories you can manage from the cookie banner or the “Cookie settings” link in the site footer. Full details on each category, its purpose, and its retention period are in the Cookie Policy, available in the site footer.
We may update this policy when the way we process data changes. Any significant change is marked with a new version number, and the cookie banner will ask for your consent again if the cookie policy has changed. Current version: 1.1, updated 09.09.2026.