Version 2.0 · Effective 22 October 2026
FusionWorks is the trading name of SC AG Computer SRL, registered in the Republic of Moldova, 170/2 Columna street, 3rd floor, Chișinău. We are the controller of the personal data described here.
Privacy contact: security@fusionworks.md. Requests go to our CTO, who is responsible for privacy and information security. We have not appointed a Data Protection Officer: the GDPR and Moldovan law do not require one for our processing.
| Situation | Data | Purpose | Legal basis | Kept for |
|---|---|---|---|---|
| You contact us: contact or quote form, email, a call booked via Calendly | Name, email, company, project type, your message, meeting time | To reply, discuss your project and prepare an offer | Our legitimate interest in answering you; steps you ask for before a contract | 12 months after our last exchange. If we sign a contract: its term plus the legal limitation period |
| You apply for a job or internship | Email, message, CV and what it contains | To assess your application | Steps you ask for before an employment contract | 12 months after the hiring decision; longer only with your consent (talent pool) |
| You work with us as a client, partner or supplier | Name, job title, business contact details, project communication, invoicing data | To deliver the contract and keep accounts | Contract; legal obligation (accounting, tax) | Contract term plus the legal limitation period; accounting records as long as Moldovan law requires |
| We see your company as a potential client | Name, job title, company, business email, public professional profile (e.g. LinkedIn) | To offer services relevant to your business | Our legitimate interest in business-to-business marketing | Until you object, and no longer than 24 months after our last contact |
| You browse the site — analytics (Google Analytics, Microsoft Clarity) | Pages viewed, clicks and scrolling, device and browser, approximate location from IP; Clarity session replays with form inputs masked | To understand how the site is used and improve it | Your consent | Up to 14 months |
| You browse the site — advertising (Google Ads, Meta Pixel) | Cookie identifiers, pages visited, conversions such as a sent form | To measure our ads and show them to relevant people | Your consent | Cookies up to 3 months; Google and Meta keep ad data under their own policies |
| Any visit — security and server logs | IP address, browser, requested page, time | To keep the site secure and available | Our legitimate interest in security, required by our ISO/IEC 27001 controls | 30 days; security events up to 90 days, archived longer (up to 7 years) only when needed for an incident |
Giving us data is voluntary, but without an email address we can’t reply. Please don’t send sensitive data such as health information; if a CV contains it, we don’t use it.
Strictly necessary cookies are always on. Analytics and advertising cookies are set only after you accept them in the cookie banner. You can change your choice at any time with the cookie icon at the bottom left of every page.
| Cookie | Set by | Purpose | Lifetime |
|---|---|---|---|
| cookieyes-consent | fusion.works | Remembers your cookie choice (necessary) | 1 year |
| _ga, _ga_* | Google Analytics | Tells visitors apart for statistics | 2 years |
| _clck, _clsk; CLID, MUID on clarity.ms | Microsoft Clarity | Visitor and session IDs for statistics and session replay | Up to 13 months; _clsk 1 day |
| _gcl_au | Google Ads | Measures ad conversions | 3 months |
| _fbp | Meta | Measures ad conversions and builds ad audiences | 3 months |
Staff who log in to manage the site also get WordPress login cookies; visitors don’t.
Embedded content — Google Maps on the Contacts page, the virtual office tour on Careers, and Calendly — works as if you visited those sites: they may set their own cookies and collect data under their own policies.
Only our staff who need it, and providers that run parts of our site and business under contracts that oblige them to protect it:
We don’t sell or rent personal data.
We work from Moldova; the website is hosted in Germany. Moldova’s Law No. 195/2024 on personal data protection is aligned with the GDPR. Providers that process data in the USA rely on the EU-U.S. Data Privacy Framework or the European Commission’s Standard Contractual Clauses. Write to us for a copy of the safeguards that apply to your data.
Personal data falls under our information security management system, run to ISO/IEC 27001:2022 and audited by TÜV Austria. In practice: HTTPS on every page, access only for staff who need it with multi-factor authentication, encrypted company devices, central security logging and monitoring, confidentiality obligations and security training for every employee.
If a personal data breach is likely to put your rights at risk, we notify the supervisory authority within 72 hours of learning about it, and we tell you directly when the risk to you is high.
Under the GDPR and Moldovan Law No. 195/2024 you can:
Write to security@fusionworks.md. We may ask you to confirm your identity. We reply within one month; complex requests may take up to two months more, and we’ll tell you why. It’s free, unless a request is clearly unfounded or excessive.
If you’re unhappy with our answer, you can complain to the National Center for Personal Data Protection of the Republic of Moldova (datepersonale.md) or to the data protection authority where you live or work in the EU/EEA. We’d appreciate the chance to fix it first.
When we build or support software for a client, the client decides how personal data in it is used, and we process it only on the client’s documented instructions. If you use such a product, contact the client first. If you write to us, we forward your request to the client without delay.
This site is for businesses and job seekers. We don’t knowingly collect data from children under 16. If you believe we have, write to us and we’ll delete it.
We review this policy at least once a year and whenever our processing changes. The version and date at the top show the latest update.
| Version | 2.0 |
| Effective | 22 October 2026 |
| Owner | CTO, privacy contact |
| Approved by | CEO |
| Next review | October 2027 |
| Basis | ISO/IEC 27001:2022, Annex A 5.34; GDPR; Moldovan Law No. 195/2024 |
| Changes | 2.0 — full rewrite: controller, purposes, legal bases, retention, recipients, transfers, rights, contact. 1.0 — WordPress default text. |