Version 2.0 · Effective 22 October 2026

In short

Who is responsible

FusionWorks is the trading name of SC AG Computer SRL, registered in the Republic of Moldova, 170/2 Columna street, 3rd floor, Chișinău. We are the controller of the personal data described here.

Privacy contact: security@fusionworks.md. Requests go to our CTO, who is responsible for privacy and information security. We have not appointed a Data Protection Officer: the GDPR and Moldovan law do not require one for our processing.

What we collect and why

SituationDataPurposeLegal basisKept for
You contact us: contact or quote form, email, a call booked via CalendlyName, email, company, project type, your message, meeting timeTo reply, discuss your project and prepare an offerOur legitimate interest in answering you; steps you ask for before a contract12 months after our last exchange. If we sign a contract: its term plus the legal limitation period
You apply for a job or internshipEmail, message, CV and what it containsTo assess your applicationSteps you ask for before an employment contract12 months after the hiring decision; longer only with your consent (talent pool)
You work with us as a client, partner or supplierName, job title, business contact details, project communication, invoicing dataTo deliver the contract and keep accountsContract; legal obligation (accounting, tax)Contract term plus the legal limitation period; accounting records as long as Moldovan law requires
We see your company as a potential clientName, job title, company, business email, public professional profile (e.g. LinkedIn)To offer services relevant to your businessOur legitimate interest in business-to-business marketingUntil you object, and no longer than 24 months after our last contact
You browse the site — analytics (Google Analytics, Microsoft Clarity)Pages viewed, clicks and scrolling, device and browser, approximate location from IP; Clarity session replays with form inputs maskedTo understand how the site is used and improve itYour consentUp to 14 months
You browse the site — advertising (Google Ads, Meta Pixel)Cookie identifiers, pages visited, conversions such as a sent formTo measure our ads and show them to relevant peopleYour consentCookies up to 3 months; Google and Meta keep ad data under their own policies
Any visit — security and server logsIP address, browser, requested page, timeTo keep the site secure and availableOur legitimate interest in security, required by our ISO/IEC 27001 controls30 days; security events up to 90 days, archived longer (up to 7 years) only when needed for an incident

Giving us data is voluntary, but without an email address we can’t reply. Please don’t send sensitive data such as health information; if a CV contains it, we don’t use it.

Cookies

Strictly necessary cookies are always on. Analytics and advertising cookies are set only after you accept them in the cookie banner. You can change your choice at any time with the cookie icon at the bottom left of every page.

CookieSet byPurposeLifetime
cookieyes-consentfusion.worksRemembers your cookie choice (necessary)1 year
_ga, _ga_*Google AnalyticsTells visitors apart for statistics2 years
_clck, _clsk; CLID, MUID on clarity.msMicrosoft ClarityVisitor and session IDs for statistics and session replayUp to 13 months; _clsk 1 day
_gcl_auGoogle AdsMeasures ad conversions3 months
_fbpMetaMeasures ad conversions and builds ad audiences3 months

Staff who log in to manage the site also get WordPress login cookies; visitors don’t.

Embedded content — Google Maps on the Contacts page, the virtual office tour on Careers, and Calendly — works as if you visited those sites: they may set their own cookies and collect data under their own policies.

Who receives your data

Only our staff who need it, and providers that run parts of our site and business under contracts that oblige them to protect it:

We don’t sell or rent personal data.

Transfers outside your country

We work from Moldova; the website is hosted in Germany. Moldova’s Law No. 195/2024 on personal data protection is aligned with the GDPR. Providers that process data in the USA rely on the EU-U.S. Data Privacy Framework or the European Commission’s Standard Contractual Clauses. Write to us for a copy of the safeguards that apply to your data.

How we protect it

Personal data falls under our information security management system, run to ISO/IEC 27001:2022 and audited by TÜV Austria. In practice: HTTPS on every page, access only for staff who need it with multi-factor authentication, encrypted company devices, central security logging and monitoring, confidentiality obligations and security training for every employee.

If a personal data breach is likely to put your rights at risk, we notify the supervisory authority within 72 hours of learning about it, and we tell you directly when the risk to you is high.

Your rights

Under the GDPR and Moldovan Law No. 195/2024 you can:

Write to security@fusionworks.md. We may ask you to confirm your identity. We reply within one month; complex requests may take up to two months more, and we’ll tell you why. It’s free, unless a request is clearly unfounded or excessive.

If you’re unhappy with our answer, you can complain to the National Center for Personal Data Protection of the Republic of Moldova (datepersonale.md) or to the data protection authority where you live or work in the EU/EEA. We’d appreciate the chance to fix it first.

Data we process for our clients

When we build or support software for a client, the client decides how personal data in it is used, and we process it only on the client’s documented instructions. If you use such a product, contact the client first. If you write to us, we forward your request to the client without delay.

Children

This site is for businesses and job seekers. We don’t knowingly collect data from children under 16. If you believe we have, write to us and we’ll delete it.

Changes to this policy

We review this policy at least once a year and whenever our processing changes. The version and date at the top show the latest update.

Document control

Version2.0
Effective22 October 2026
OwnerCTO, privacy contact
Approved byCEO
Next reviewOctober 2027
BasisISO/IEC 27001:2022, Annex A 5.34; GDPR; Moldovan Law No. 195/2024
Changes2.0 — full rewrite: controller, purposes, legal bases, retention, recipients, transfers, rights, contact. 1.0 — WordPress default text.