Next scheduled review: 28 February 2027 — and in every case before any new script, tag or embed ships. See §11.
1. Who we are
This policy explains how S.R.L. “UNQENERGY” (IDNO 1020600034949), trading as “TalentSync” (“we”, “us”), registered in the Republic of Moldova, registered office at MD-2005, Chișinău Rîșcani, mun. Chișinău, Colina Pușkin 18, ap. (of.) 1, Republic of Moldova, uses cookies and similar technologies on https://talentsync.eu (the “Site”).
It sits alongside our privacy policy, which covers everything else we do with personal data — including candidate and client data.
Questions go to Victor Uncuta at victor@talentsync.eu. We have not appointed a representative in the European Union under Article 27 GDPR. We are assessing whether one is required and will publish the name, address and email here once appointed; until then, contact us directly, and see §10 for the authorities you can complain to.
2. What cookies and similar technologies are
A cookie is a small text file a website asks your browser to store, and which the browser sends back on later visits. Cookies are how a site recognises a returning browser.
“Similar technologies” means anything else that stores information on, or reads information from, your device:
| Technology | What it is |
|---|---|
| Cookies | Small text files stored by your browser and returned to the server on each request. |
| Local storage / session storage | Browser storage the site can read and write with JavaScript. Not sent automatically to a server. Local storage persists until cleared; session storage dies when the tab closes. |
| Pixels / web beacons | A 1×1 image or script whose only job is to tell a third party that you loaded a page. |
| Device fingerprinting | Building an identifier from your browser’s characteristics (fonts, screen size, timezone) without storing anything. |
| Server logs | Records the web server keeps of requests it receives, including IP addresses. Not stored on your device, but still personal data. |
European law — Article 5(3) of the ePrivacy Directive 2002/58/EC as implemented across the EU/EEA, and regulation 6 of PECR in the UK — requires your consent before storing anything on your device or reading anything from it, unless it is strictly necessary to deliver the service you asked for. That rule applies to all of the storage technologies above, not just cookies, and it applies whether or not the data is personal. Separately, the EU GDPR, the UK GDPR and Moldova’s Law No. 195/2024 govern what we then do with any personal data involved.
3. Current status — one necessary record, and analytics only if you accept
As of 21 September 2026, this Site stores exactly one item of its own without asking: ts_consent, the local-storage record of the choice you make on the consent banner. It is created only after you choose, it contains nothing but that choice and its date, and it exists so we do not ask you again on every page (Table A).
Everything else is optional and off until you say otherwise. We use Google Analytics 4 to understand which pages visitors find useful. It is not loaded when you arrive: no Google script is on the page, no request leaves your browser to Google, and no analytics cookie exists until you click Accept analytics. If you click Reject analytics, close the banner or press Escape, nothing changes — the Site works identically and Google is never contacted.
There is no advertising technology on this Site, no cross-site tracking, no data broker, no marketing pixel, no chat widget, no heatmap, no session recording, no A/B testing tool and no social embed. Google Analytics runs with every advertising signal switched off (see §5).
4. Strictly necessary vs. everything else
- Strictly necessary items are those without which the Site cannot do what you asked. They do not require consent, but we still tell you about them.
- Everything else — analytics, personalisation, advertising, social plugins — requires your prior, specific, informed and freely-given consent. Consent is never bundled into “continuing to browse”, and refusing costs you nothing: every part of this Site works identically whether you accept or refuse. We do not operate a cookie wall.
One thing on this Site falls into the second category — Google Analytics 4 — and that is what the banner on your first visit asks about. Refusing is exactly as easy as accepting: the same banner, two identical buttons, one click, no pre-ticked boxes, and Reject analytics comes first in the keyboard order. Closing the banner, or pressing Escape, counts as a refusal and is remembered as one.
5. Inventory — what is on this Site
Table A — Stored on your device
The first row is strictly necessary and needs no consent. Every row after it is set only after you click Accept analytics, and is never set if you refuse.
| Name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
ts_consent | TalentSync (first party) | Records your cookie choice — accepted or rejected — and the date you made it, so we do not ask again on every page. Created only after you make a choice. Contains no identifier for you. | Local storage, strictly necessary | Until you clear it, or 6 months, whichever comes first — then we ask again |
_ga | Google Analytics 4 — distinguishes one browser from another; the core analytics identifier. | Third-party cookie, analytics — only after you accept | 2 years | |
_ga_4D9N8H4S48 | Google Analytics 4 — persists session state for our data stream (measurement ID G-4D9N8H4S48). | Third-party cookie, analytics — only after you accept | 2 years |
That is the complete list. Google Analytics 4 does not set the legacy _gid or _gat_* cookies and we have not enabled anything that would. No other cookie, pixel or storage item is set by this Site.
What Google Analytics records once you accept: the pages you view, the page you came from, your device and browser type, approximate location derived by Google from your IP address (Google does not store the IP itself), and three click events — booking a call, opening an email link, opening a phone link — each tagged only with the section of our page the link sat in, never with anything you typed. It runs in Consent Mode v2, basic mode: before you choose, the script is not on the page at all; when you accept, only the analytics-storage signal is granted, and the advertising signals (ad storage, ad user data, ad personalisation) stay denied permanently. We use no Google Ads, no remarketing and no advertising features. Google holds the event data for 2 months, the shortest retention its settings offer.
Table B — Not cookies, but data still leaves your browser
These store nothing on your device, so they need no consent. They do involve processing your IP address, so we disclose them.
| What | Provider | What is transmitted | Legal position | Retention |
|---|---|---|---|---|
| Web fonts | TalentSync | None. The Montserrat typeface is downloaded at build time and served from talentsync.eu itself. No request is made to fonts.googleapis.com or fonts.gstatic.com, and no third party learns your IP address from loading our type. | No transfer occurs | n/a |
| Server logs | TalentSync, hosted by Railway Corp. | Our web server records the requested URL, timestamp, IP address, user agent and referrer. | Legitimate interests, Art 6(1)(f), in security and availability | 30 days |
| Calendly link-through | Calendly LLC | When you click “Book a call” you leave this Site for calendly.com. Nothing is transmitted to Calendly until you click. Once you arrive, Calendly’s own cookies apply under Calendly’s cookie notice — they are not set by us and we cannot switch them off. | Calendly is the controller on its own site; our processor for the booking record it returns to us | Per Calendly |
mailto: / tel: links | none | Clicking these hands off to your own mail or phone app. No request is made to any server. | n/a | n/a |
Table C — Conditional: not present, would require consent
Nothing below is on the Site. Each row names the exact decision that would create it. If any of them ships, this policy is updated first, the consent banner asks about it separately, and nothing is stored until you accept it.
| Name | Provider | Purpose | Type | Duration | Trigger |
|---|---|---|---|---|---|
_gcl_au | Conversion Linker — attributes an ad click to a later action. | Third-party cookie, advertising | 90 days | Only if we run Google Ads or link AdSense | |
__cf_bm | Cloudflare (for Calendly) | Bot management for the Calendly widget. | Third-party cookie, strictly necessary to Calendly | 30 minutes | Only if we embed Calendly instead of linking to it |
_calendly_session | Calendly | Maintains the booking session inside the widget. | Third-party cookie, functional | Session / per Calendly’s notice | Only if we embed Calendly |
bcookie | Browser identifier used by LinkedIn services. | Third-party cookie, advertising | 1 year | Only if we add the LinkedIn Insight Tag | |
bscookie | Secure browser identifier. | Third-party cookie, advertising | 1 year | Only with the LinkedIn Insight Tag | |
lidc | Data-centre routing. | Third-party cookie, functional | 24 hours | Only with the LinkedIn Insight Tag | |
li_sugr | Probabilistic identity matching for advertising. | Third-party cookie, advertising | 90 days | Only with the LinkedIn Insight Tag | |
UserMatchHistory | LinkedIn Ads ID synchronisation. | Third-party cookie, advertising | 30 days | Only with the LinkedIn Insight Tag | |
AnalyticsSyncHistory | Stores when a visitor was synced with LinkedIn’s member data. | Third-party cookie, advertising | 30 days | Only with the LinkedIn Insight Tag | |
li_gc | Stores your consent choice for LinkedIn’s non-essential cookies. | Third-party cookie, strictly necessary to LinkedIn | 6 months | Only with the LinkedIn Insight Tag |
Google Search Console and Bing Webmaster Tools are search-engine reporting tools. We verify ownership of the domain using a DNS TXT record — a change to our domain’s DNS settings, not to your browser. Neither tool sets any cookie on this Site and neither observes your visit. (Google Search Console can also be verified by piggy-backing on a Google Analytics tag. We deliberately do not use that method: it would tie Search Console to a consent choice.)
6. What happens when you click an external link
The Site links to calendly.com, linkedin.com, and mailto: / tel: addresses. Once you follow an external link you are on someone else’s website under their privacy and cookie policies, which we do not control:
- Calendly — calendly.com/legal/cookie-notice
- LinkedIn — linkedin.com/legal/cookie-policy
We add campaign parameters (utm_source=talentsync.eu and similar) to our Calendly links so that Calendly can tell us which page a booking came from. Those parameters describe the page, not you, and contain no identifier for you.
7. Changing or withdrawing your consent
Consent must be as easy to withdraw as it was to give. Here is how it works on this Site:
- On your first visit to any page, a banner titled “We value your privacy” appears at the foot of the screen, before any analytics loads and whatever you click. It offers Accept analytics and Reject analytics with identical prominence, and links to this policy and the privacy policy. Nothing is stored until you choose.
- A “Cookie settings” link sits in the footer of every page. Click it and the banner reopens showing your current choice; change it and the change takes effect immediately.
- Withdrawing consent stops collection at once. We tell Google Analytics that analytics storage is denied and stop sending events. A script Google has already served in the page you are on cannot be unloaded, but it records nothing further, and it is not loaded on any later page.
- Refusal is remembered. We do not re-prompt visitors who have refused, other than once your recorded choice is more than 6 months old.
- Clearing your browser’s storage for
talentsync.euerases thets_consentrecord and you will be asked again on your next visit. - Cookies already set by Google before you withdrew are not deleted by withdrawing — withdrawal stops the collection. Use the browser instructions in §8 to delete what is already there. Cookies set by a third party on its own site — Calendly’s, if you book a call there — are not ours and are not deleted by anything we do.
8. Controlling cookies in your browser
Every major browser lets you block or delete cookies, and block third-party cookies specifically. Blocking all cookies will break many websites; this one will keep working.
- Google Chrome (desktop): ⋮ → Settings → Privacy and security → Third-party cookies (and → Delete browsing data to clear existing ones). Help
- Chrome (Android): ⋮ → Settings → Privacy and security → Third-party cookies.
- Safari (macOS): Safari → Settings → Privacy → Prevent cross-site tracking; Manage Website Data to remove stored data. Help
- Safari (iOS/iPadOS): Settings app → Apps → Safari → Prevent Cross-Site Tracking; Clear History and Website Data. Help
- Mozilla Firefox: ☰ → Settings → Privacy & Security → Enhanced Tracking Protection (set to Strict) and Cookies and Site Data. Help
- Microsoft Edge: ⋯ → Settings → Cookies and site permissions → Manage and delete cookies and site data. Help
- Brave: ☰ → Settings → Shields → Block cookies (third-party cookies are blocked by default).
- Opera: ☰ → Settings → Privacy & security → Cookies and other site data.
Global Privacy Control and Do Not Track. We do not track you across websites, and the only thing these signals could switch off here — Google Analytics — is already off until you accept it. Blocking third-party cookies in your browser also prevents the _ga cookies from being set, whatever you answer on the banner.
9. What we do not do
We do not sell your personal data. We do not share it with advertising networks or data brokers. We do not track you across other websites. We run analytics only with your consent, with every advertising signal denied, and we do not use analytics data to profile you or to make decisions about you. We do not fingerprint your device. We do not use a cookie wall or make access conditional on consent.
10. Your rights
Under the GDPR, the UK GDPR and Moldova’s Law No. 195/2024 you have the rights of access, rectification, erasure, restriction, portability, and objection to processing based on legitimate interests, plus the right to withdraw consent at any time. Exercise them at victor@talentsync.eu; see the privacy policy for the detail.
You can also complain to a supervisory authority:
- Moldova — Centrul Național pentru Protecția Datelor cu Caracter Personal (CNPDCP), 48 Serghei Lazo Street, MD-2004 Chișinău · +373 22 820 801 · centru@datepersonale.md · datepersonale.md
- EU/EEA — the data protection authority of the country you live or work in. The list is at edpb.europa.eu. You do not have to contact us first.
- United Kingdom — the Information Commissioner’s Office, ico.org.uk
11. Changes and review
This policy is reviewed on a fixed schedule and on every relevant change:
- Scheduled review: every six months. Next review: 28 February 2027.
- Event-driven review — mandatory, before deployment: adding any new analytics tool, tag manager, advertising pixel, chat widget, A/B testing tool, video embed, map embed, font CDN, or embedded (as opposed to linked) Calendly widget. The rule for the engineering team is simple: if a new third-party domain appears in the network tab, this page is out of date and must be updated before release.
Material changes are announced by updating the effective date and version at the top of this page. Where a change requires consent, we ask for it before the change takes effect.
Version history: v1.0 — 30 August 2026 — first publication. v1.1 — 21 September 2026 — Google Analytics 4 enabled behind a consent banner; ts_consent and the two GA4 cookies added to Table A; §3, §4, §7, §8 and §9 rewritten to match.