Privacy Policy
Last updated: 23 September 2026
1. General information
This policy explains how “SHARLLY” S.R.L. (“Megawatt”) processes personal data in connection with megawatt.md and requests sent through it. It is prepared in accordance with the Republic of Moldova's Law No. 195/2024 on the protection of personal data.
The controller is “SHARLLY” S.R.L., 38 Drumul Viilor Street, Chișinău, MD-2021, Republic of Moldova, IDNO 1016600036069. For privacy enquiries, contact legal@megawatt.md.
2. Data we collect
2.1 Information you provide
Our contact, quotation and callback forms may collect your name, phone number, email address, project address and any details you choose to provide. Please do not include sensitive information in free-text fields unless it is needed for your request.
2.2 Technical and browsing data
The server may record your IP address, date and time, page visited, browser and information needed for security and website operation. Optional tools described below may process usage data only according to your cookie choices.
3. Purposes, legal bases and retention
3.1 Requests and services
We use submitted data to answer questions, prepare quotations and provide services. The legal basis is taking steps at your request before entering a contract or performing a contract under Article 6(1)(b) of Law No. 195/2024.
3.2 Marketing messages
We send newsletters or offers only if you give separate consent. You may withdraw it at any time using the unsubscribe link or by writing to legal@megawatt.md. Accepting this policy or submitting a form does not automatically subscribe you.
3.3 Operation, security and improvement
We process strictly necessary technical data to provide and protect the website, based on legitimate interests where permitted by law. The Geoapify-powered projects map appears when its page loads. Chat, the Google map on the Contact page and advertising activate only according to your choices under Section 4. At the time of this update, we did not identify an active Google Analytics tool on the website.
3.4 Retention
We keep request data for as long as needed to respond and, if a contract follows, throughout the relationship and applicable statutory record-keeping periods. Marketing contact data is kept until consent is withdrawn or an applicable legal obligation expires. The cookie storing your choice lasts 180 days; other periods depend on the purpose and provider described below.
4. Cookies and similar technologies
You may accept all categories, reject optional cookies or choose “Functional” and “Advertising” separately. Optional categories are not preselected. You can change your choice at any time using the cookie icon in the bottom-left corner of the screen. Withdrawal stops subsequent loading of optional tools; it does not undo earlier lawful processing. The website removes optional cookies on its own domain but cannot directly delete cookies already stored on third-party domains; you can remove those in your browser settings.
4.1 Strictly necessary cookies
The website uses a Grav session cookie (its name starts with “mw-”) for forms and a first-party “mw_cookie_preferences” cookie to remember your choice for 180 days. These remain active when optional categories are rejected. The projects map requests Geoapify resources when its page loads; in our tests these did not set cookies, although the provider may receive technical data such as your IP address. Cloudflare Turnstile loads only when you try to submit a form, to prevent abuse. Cloudflare may use the security cookie “cf_clearance” if its pre-clearance feature is enabled; it is not used for advertising.
4.2 Performance cookies
We do not ask for a separate traffic-analytics choice because, at the time of this update, we did not identify an active Google Analytics implementation. If we later add a non-essential analytics tool, we will place it in an optional category and update this policy before enabling it.
4.3 Functional cookies
With functional consent, Tawk.to chat and the Google map on the Contact page load. Tawk.to may use identifiers such as “tawkuuid*” and “TawkConnectionTime”; Google Maps may process your IP address and use its own storage. Without this consent, chat and the Google map do not load; the projects map remains available and you can still contact us through the website forms.
4.4 Advertising cookies
With advertising consent, Google Ads and Google Tag Manager load, including Meta (Facebook) Pixel activated through the manager. These services measure conversions and may help display relevant ads. Examples of identifiers observed on the live site are “_gcl_au” (set on our domain by Google technology), “_fbp” (set on our domain by Meta Pixel) and “test_cookie” (on the DoubleClick domain). These tools do not load without advertising consent.
4.5 Third-party cookies
The providers identified are Google (Ads, Tag Manager, Maps and DoubleClick), Meta (Facebook) Pixel, Tawk.to, Geoapify and Cloudflare Turnstile. Google Ads, DoubleClick and Meta belong to “Advertising”; Tawk.to and the Google map on the Contact page to “Functional”; Geoapify supplies the projects map shown on page load and did not set cookies in our tests; Turnstile loads only on form submission for security. Google Tag Manager is a tag manager, not a separate cookie, but can load Meta Pixel after consent. Associated cookies and identifiers may include “_gcl_au”, “_fbp”, “IDE”, “test_cookie”, “tawkuuid*”, “TawkConnectionTime” and, for security, “cf_clearance” where applicable. Some appear on megawatt.md, while others appear on a provider domain. Names, technical purposes and expiry times can vary with provider and browser settings. Rejecting optional categories prevents optional tools from loading; the projects map and necessary cookies remain.
Provider policies: Google; Meta; Tawk.to; Geoapify; Cloudflare.
5. Recipients and transfers
To the extent necessary, data may be accessed by hosting, technical and communications providers, and by the providers in Section 4 when you activate the relevant category. We conclude processing agreements with providers acting as processors; some providers may also act as independent controllers under their own policies. We disclose data to public authorities only where required by law. International transfers take place with the safeguards required by Law No. 195/2024.
6. Data security
We apply technical and organisational measures proportionate to the risks to protect data from unauthorised access, loss or alteration. If a security breach occurs, we notify the authority and affected people when required by law.
7. Your rights
Subject to Law No. 195/2024, you may request access, rectification, erasure, restriction and portability of your data, object to processing based on legitimate interests or direct marketing, and withdraw consent. Withdrawal does not affect processing carried out lawfully before it.
Send requests to legal@megawatt.md. We normally respond within one month; for complex cases, this may be extended by up to two months and we will inform you. You may complain to the National Centre for Personal Data Protection, 48 Serghei Lazo Street, Chișinău, MD-2004, phone (022) 820 801, centru@datepersonale.md, www.datepersonale.md, or bring a claim before a court.
8. Direct marketing
If you subscribed to commercial messages, you can unsubscribe free of charge at any time using the link in the message or by writing to legal@megawatt.md. Change advertising-cookie choices separately through “Cookie settings”.
9. Changes
We may update this policy when our practices, providers or legal requirements change. We publish the new version on this page and show the updated date.
10. Contact
For questions about personal-data processing: legal@megawatt.md.