Privacy policy

Last updated: 2026-09-22

This document explains what personal data we collect about you, why, who receives it and what you can ask of us. It is written to comply with Law no. 195/2024 of the Republic of Moldova on the protection of personal data, in force since 23 August 2026. We have tried to write it to be read, not merely filed.

1. Who processes the data

The controller of your data is the company below. Address any question or request about your personal data to it.

Name: FISHERWAY SRL

IDNO: 1024607006442

Address: Strada Luceafărul 3/8, Soroca, Republica Moldova

E-mail for personal data matters: office@alexfisherway.com

Telephone: +4748659911

We are not legally required to appoint a data protection officer, because we do not systematically monitor people on a large scale and do not process special categories of data. Requests are handled by the person designated internally, at the e-mail address above.

2. What we collect and when

We collect only what you give us or what follows directly from using the site. We do not buy contact lists and we do not gather information about you from other sources.

You create an account

Name, e-mail address, telephone, preferred language, password (stored only as a cryptographic hash — we cannot read it).

You buy a product

The billing details you enter, the product bought, the amount, the time of payment and the transaction identifier from the bank. Card details never reach us — you enter them directly on the bank's secure page.

You fill in the CV form

Name, e-mail, telephone, WhatsApp, country, citizenships, your photograph, education, work experience, certificates, skills and the free text you write. This is the most detailed data we hold about you.

You apply to the fish factory

Name, sex, e-mail, telephone, whether you hold an EU passport, English level, the CV you upload and your comments.

You tell your story

Name, e-mail, telephone, place and country of work, the experience you describe, a link to a social network if you give one, and any attached files.

You book a consultation

Name, telephone, e-mail, the slot you chose and, for group consultations, the language of the session.

You subscribe to the newsletter

E-mail address, language and the moment you confirmed the subscription.

You are only browsing

Your IP address is used at the moment of the request to determine the country (so we can offer the right telephone prefix) and to limit abuse. We do not store it for ordinary visitors. We store the IP address only for requests identified as indexing crawlers, and for at most 180 days.

3. On what legal basis

Every processing operation needs a legal basis. Ours differs from purpose to purpose:

  • Performance of the contract — to deliver the product you bought, give you access to your account, generate your CV and hold your consultation. Without this data the service cannot be provided, so supplying it is mandatory in order to buy.
  • Your consent — for the newsletter, analytics cookies, sending your CV to employers and filling in company contact forms automatically. You may withdraw it at any time, and withdrawing is as simple as giving it.
  • Legal obligation — for keeping the accounting and tax records attached to orders.
  • Legitimate interest — for site security, abuse prevention and keeping the record of consents that the law requires us to be able to demonstrate.

4. Who receives your data

We do not sell data to anyone. We do pass it to the providers that make the services you bought work. We name them, because you are entitled to know exactly who sees your data:

OpenAI (United States)

The content of your CV, to rewrite it professionally and to draft the covering letter. Your photograph is not sent.

Employers in Norway, Ireland, the United Kingdom and Denmark

Your complete CV, photograph included, when you start a sending campaign. Only with your explicit consent and only at your request.

The automatic form-filling service

Your name, e-mail, telephone and CV as a PDF, submitted to fishing companies' contact forms, if you bought and activated that service.

findafishingboat.com

Your name, the temporary e-mail address created for you and the enquiry text, when you use automatic applications to adverts.

maib (Moldova Agroindbank)

The amount, the order identifier and your IP address, to process the payment. Card details are entered directly at the bank and do not pass through us.

SendGrid (Twilio, United States)

Your e-mail address and the content of the messages we send you.

Our own bulk mail service

Recipients' addresses and campaign content, hosted on our own infrastructure.

Cloudflare

Your IP address, at the moment of the anti-bot check on the sign-in and registration forms.

Google (Google Analytics)

Aggregate browsing data — but only if you accepted analytics cookies. If you refused, the script is not loaded at all.

Jitsi Meet

The name you type into the video room and the content of the group consultation, for the duration of the session.

Beyond these, we may disclose data to public authorities where the law requires it. We do not do so on anyone's mere request, but only on a verifiable legal basis.

5. Transfers outside the Republic of Moldova

Some of the providers above are in the United States or the European Union, and the employers you send your CV to are in the European Economic Area and the United Kingdom. This means your data crosses the border.

For transfers to countries without an adequacy decision we rely on the standard contractual clauses included in our contracts with those providers. For sending your CV to employers the basis is your explicit consent, given when you start the campaign — and that transfer is the very purpose for which you bought the service.

6. How long we keep data

We do not keep data "just in case". Every category has a period:

Account and profile data

For as long as the account exists. When you ask for deletion, it is anonymised immediately.

CVs and generated files

For as long as the account exists, or until you delete them.

Orders and accounting records

The period required by tax and accounting law, even if you delete your account. They remain without your identifying details.

Fish factory applications

2 years from submission.

Story interview requests

2 years from submission.

Free consultation requests

1 year.

Newsletter subscription

Until you unsubscribe.

The record of consents

Cookie choices: 15 months. Consents given in forms are kept for as long as we might need to prove that the processing was lawful.

Crawler traffic logs

180 days.

7. Your rights

The law gives you the following rights, and we are obliged to honour them free of charge:

  • The right of access — to learn what data we hold about you and receive a copy of it.
  • The right to rectification — to correct data that is wrong or incomplete.
  • The right to erasure — to ask us to delete your data, so far as the law does not require us to keep it.
  • The right to restriction — to ask that processing be suspended while something is being disputed.
  • The right to portability — to receive your data in a format you can take elsewhere.
  • The right to object — to object to processing based on our legitimate interest.
  • The right to withdraw consent — at any time, without affecting the lawfulness of processing before that.
  • The right not to be subject to an automated decision with significant effects on you.

How to exercise them

Two of them you can exercise yourself, from your account: on the profile page you can download all the data we hold about you and ask for your account to be deleted. For the rest, write to the e-mail address in section 1.

We answer within one month of receiving the request at the latest. If the request is complex we may extend that by a further two months, but in that case we will tell you within the first month and explain why. To make sure we do not hand your data to somebody else, we may ask you to confirm your identity.

What deleting your account actually does

Your name, e-mail address, telephone, CVs, photograph, generated files and the temporary e-mail address created for you are deleted. The order remains as an accounting record, without your identifying details, because tax law requires us to keep sales documents. The account can no longer be used, and the operation cannot be undone.

8. Automated processing

The CV generator uses an artificial intelligence model that rewrites your experience in a professional form and proposes three design variants. It is automated processing, but it makes no decision about you: the result is shown to you, you choose the variant and you decide whether to send it on. We do not assess candidates automatically and we reject nobody by algorithm.

We do not profile for advertising purposes and we take no automated decisions with legal effects on you.

9. Minimum age

Our services are aimed at adults looking for work in the maritime fishing industry. Under Law no. 195/2024, consent for online services is valid from the age of 14; below that age the consent of a parent or legal representative is required. If we learn that we have collected a child's data without it, we delete it.

10. How we protect data

The site runs exclusively over an encrypted connection. Passwords are stored as cryptographic hashes, never in the clear. CVs and uploaded files are not public: they sit on a private disk, and every download checks that you own the file. Administrative access is limited to those who need it.

If a security incident nonetheless occurs that could affect your rights, we notify the National Centre for Personal Data Protection within 72 hours, and we notify you as well if the risk is high.

11. Cookies

Cookies are dealt with separately, with the full table of files used and the means to change your choice: Cookie policy

12. Changes to this policy

When something substantive changes — a new purpose, a new recipient — we update the document, raise its version and, if the change concerns cookies, ask for your choice again. The date and version in force are shown at the top of the page.

13. If you are not satisfied

Write to us first — most things are settled faster that way. But you always have the right to go directly to the supervisory authority:

Centrul Național pentru Protecția Datelor cu Caracter Personal

str. Serghei Lazo 48, MD-2004, Chișinău, Republica Moldova

centru@datepersonale.md

+373 22 820 801

https://datepersonale.md