and personal data processing
This Policy explains how SCP PARSEC S.R.L. (the "Company", "we") collects, uses, stores, transmits, and protects personal data through the website www.parsec.md, electronic forms, email addresses, social media, event registration forms, and other digital channels managed by the Company. This Policy is prepared in accordance with Law No. 195/2024 on Personal Data Protection and other applicable laws of the Republic of Moldova.
The Policy applies to website visitors, persons contacting us, candidates, clients, potential clients, suppliers, partners, and their representatives, insofar as their data is collected or transmitted to the Company.
This Policy is an information notice regarding data processing. It does not transform website access into general consent and does not replace the distinct agreements that may be necessary for certain optional processing activities.
This Policy primarily refers to data collected through the website, forms, emails, and other public or digital channels associated with the website. Processing carried out within employment relationships — including access monitoring, CCTV, facial recognition, employee call recording, performance evaluation, medical and occupational safety and health (OSH) data — is additionally governed by separate internal notices and documents, communicated to the data subjects according to their category.
Technical details regarding the security architecture, system configurations, internal access rules, and audit logs are not published in full to avoid creating additional security risks. These are managed through the Company's internal regulations and registers.
In relation to the data collected through the website and the channels managed by the Company, SCP PARSEC S.R.L. generally acts as a data controller, as it determines the purposes and means of the processing.
In certain situations, the Company may process data as a data processor, based on the instructions of a client or contractual partner. In such cases, the processing may also be governed by the notices or policies of that respective controller.
We do not request the submission of sensitive data unless strictly necessary, there is a legal basis, and they are used in accordance with applicable legislation. Individuals are kindly requested not to submit through forms or email any medical data, banking data, data about criminal convictions, or other sensitive information that is not explicitly requested.
For projects involving minors, personal data and image use are processed only after appropriate information has been provided and, where required by law, with the consent of a parent or legal representative or on another applicable legal basis.
Data is generally collected directly from the data subject when they fill out a form, send an email, a CV, a document, or interact with the website. To the extent permitted by law, data may also originate from representatives of an organization, clients, partners, suppliers, professional platforms, public sources, or authorized service providers.
When data is not collected directly from the data subject, the Company will provide the necessary information under the conditions and within the timeframe provided by law, except in situations where a legal exception applies.
Depending on the actual activity, the channel used, and the relationship with the person, data may be processed for the following purposes:
The list above is a list of possible purposes, not an automatic authorization to use all data for all purposes. The Company will activate and use only those processing activities that are actually necessary for the business and documented in its internal registers and procedures.
We may process technical data, such as IP address, session identifiers, and browser data, for operation, security, and abuse prevention. The legal basis can be technical necessity and/or the legitimate interest of the Company. Refusing non-essential cookies does not prevent access to the core content of the website.
If you send us a question, report, or complaint, we use the data to identify your request, communicate with you, and formulate a response. Providing the necessary data is voluntary, but failing to do so may make it impossible to respond or resolve the request.
Data may be processed to initiate, negotiate, and execute the contractual relationship, provide services, manage communications, invoicing, support, security, and defend the Company's rights. The legal basis is, as applicable, the contract, a legal obligation, or legitimate interest. Providing the necessary data may be a condition for concluding or executing the contract.
The data from the CV, message, and recruitment communications are processed to evaluate the application, verify professional information, organize interviews, and communicate the result. The legal basis may be taking steps prior to entering into a contract, legitimate interest, or consent, as the case may be. Failure to provide necessary data may prevent the evaluation of the application.
Retaining the CV for future opportunities is a separate and optional processing activity. Refusing it does not affect the current application.
Contact data may be used to send commercial information only in accordance with the law and, where applicable, based on consent. Providing data for this purpose is voluntary and you can opt out of communications at any time.
Data may be processed for supplier selection and evaluation, contract management, payments, communications, audit, security, and compliance with legal obligations. The legal basis may be the contract, a legal obligation, or the legitimate interest of the Company.
We may process contact and participation data, your image, voice, and materials in which you appear in order to organize and deliver the activity, communicate with participants, document the project, and publish materials, as applicable. The legal basis may be a contract, a legal obligation, legitimate interest, or consent, depending on the context and the specific use.
Depending on the situation, processing may be based on:
The Company will not use consent as a legal basis when the processing can be legally carried out based on the execution of a contract, a legal obligation, or a documented legitimate interest.
Accessing the website does not constitute consent for any type of processing and does not grant the Company the right to use the data for unlimited purposes. By browsing the website, technical data strictly necessary for its operation and security may be processed.
The voluntary submission of a message, email, CV, photograph, or other document allows the Company to receive and use that data to review the request, communicate with the person, and carry out related steps. This submission does not authorize the use of the data for incompatible, unlimited, or unforeseen purposes in this Policy.
Data may be accessed or disclosed, as appropriate, to:
The Company does not sell personal data.
If a supplier processes data on behalf of the Company, they will act only based on documented instructions and contractual obligations regarding confidentiality and security.
Some services used by the Company may involve storing or accessing data outside the Republic of Moldova, including through cloud services, email, hosting, web analytics, advertising, social media platforms, security applications, VPNs, or IT providers.
International transfers are carried out only when necessary for the Company's activity and in compliance with applicable legislation, based on adequate contractual, technical, and organizational safeguards. The list of providers and applied mechanisms is managed in the Company's internal registers.
Data is kept only as long as necessary for the purpose of collection, contract execution, compliance with legal obligations, dispute resolution, or defending the Company's rights.
| Category | Indicative period |
|---|---|
| Messages and requests | 24 months from the last communication |
| CVs for current recruitment | 12 months, unless there is a legal reason for a longer period |
| CVs for future opportunities | 12 months or the period indicated in the person's agreement |
| Contractual and accounting data | the period provided by applicable legislation |
| Technical and security logs | up to 36 months, depending on necessity and risk |
| Cookies | according to the Cookie Policy |
| Event data and media materials | for the duration of the project and thereafter in accordance with the contract, consent, documented legitimate interest, or applicable legal obligations |
Upon expiration of the period, data is deleted, anonymized, or archived, according to applicable legislation and internal procedures.
Under the law, the individual may request:
The request can be submitted to contact@parsec.md or at the Company's headquarters. To protect data, the Company may request additional information to verify the applicant's identity.
The Company applies reasonable technical and organizational measures to protect data, including access control, individual accounts, passwords and appropriate authentication, limiting access to what is strictly necessary, backups, incident monitoring, staff training, and breach response procedures.
No method of electronic transmission or storage can be guaranteed to be absolutely secure. Individuals are kindly requested not to send via email or forms data that is not necessary for the purpose of the request.
The Company may use automated tools or artificial intelligence solutions for administrative operations, analysis, security, recruitment, support, or service improvement.
Confidential or sensitive data will not be inputted into unauthorized AI tools. Automated tools will not be used to make decisions with legal effects or significant impact on a person without assessing the legality, transparency, proportionality, and the possibility of human intervention.
The website www.parsec.md uses strictly necessary cookies and may use analytics cookies, including Google Analytics 4 (GA4), marketing cookies, and similar technologies only after a valid choice has been made.
Strictly necessary cookies are used for the operation and security of the website. Analytics, marketing, or third-party cookies are activated only after a valid choice, where required by law. Preferences may be withdrawn or changed through the cookie management mechanism.
The Company may send commercial information, offers, or news only under the conditions permitted by applicable legislation. The individual can opt out of commercial communications at any time by using the unsubscribe option or by sending a request to the indicated contact address.
If the individual believes that the processing of their data violates the legislation, they can contact the Company at contact@parsec.md. The individual also has the right to file a complaint with the National Center for Personal Data Protection of the Republic of Moldova.
The Company may update this Policy to reflect legislative, technical, or organizational changes. The updated version will be published on the website and will indicate the date of the modification. In case of substantial changes, the Company may use additional means of information when necessary.