Legal Protocols

1. Data Controller Identity. HarborFusionLabs, registered at 127661, Str. Primaverii nr. 30, Sat Oreavul, Romania, is the data controller responsible for the processing of personal data collected through this digital platform in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation).

2. Categories of Personal Data Processed. We collect and process the following categories of personal data: (a) identification data including full name and email address submitted via contact forms; (b) technical data including IP address, browser type, operating system, and device identifiers automatically collected during system access; (c) usage data including page navigation patterns, session duration, and interaction timestamps logged for operational analytics.

3. Legal Basis for Processing. Personal data processing is grounded in the following lawful bases under Article 6(1) GDPR: (a) consent provided through explicit user action via contact form submission (Article 6(1)(a)); (b) performance of a contract or pre-contractual measures at the data subject's request (Article 6(1)(b)); (c) legitimate interest in maintaining system security and service optimization (Article 6(1)(f)).

4. Purpose Limitation. Personal data is collected and processed exclusively for the following stated purposes: responding to inquiries and project proposals, delivering requested services, maintaining system integrity and security, and fulfilling legal obligations under applicable Romanian and EU law. Data shall not be repurposed beyond these defined objectives without obtaining renewed consent.

5. Data Retervation Period. Contact form submissions are retained for a maximum period of 24 months from the date of submission. Technical logs are retained for 12 months. Session data is purged upon session termination. Upon expiration of the retention period, data is permanently deleted from all active and backup storage systems within 30 calendar days.

6. Data Recipients and Third-Party Disclosure. Personal data may be shared with the following categories of recipients: (a) hosting infrastructure providers engaged as data processors under written agreements; (b) payment processing services for transaction execution; (c) analytics providers operating under data processing agreements with EU Standard Contractual Clauses. Personal data is not sold, rented, or disclosed to third parties for marketing purposes.

7. International Data Transfers. Where personal data is transferred outside the European Economic Area, we ensure appropriate safeguards are in place, including EU Standard Contractual Clauses (SCCs) adopted by the European Commission, adequacy decisions, or binding corporate rules as required under Chapter V of the GDPR.

8. Data Subject Rights. Under Articles 15-22 GDPR, you have the following rights: (a) right of access to your personal data; (b) right to rectification of inaccurate data; (c) right to erasure ("right to be forgotten"); (d) right to restriction of processing; (e) right to data portability; (f) right to object to processing; (g) right not to be subject to automated decision-making. To exercise any of these rights, contact our Data Protection Officer at [email protected].

9. Data Security Measures. We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including: encryption of data in transit and at rest, access controls with role-based permissions, regular security assessments, and incident response procedures aligned with Article 32 GDPR.

10. Supervisory Authority. You have the right to lodge a complaint with the Romanian Data Protection Authority (Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal) if you believe your data protection rights have been infringed.

1. Cookie Classification. This platform deploys the following categories of cookies: (a) Strictly Necessary Cookies — essential for basic platform functionality including session management, load balancing, and security token validation. These cookies cannot be disabled without compromising core service delivery. (b) Functional Cookies — enable personalized features such as language preference retention and interface customization. (c) Analytics Cookies — collect aggregated, anonymized usage statistics to improve platform performance and user experience.

2. Consent Mechanism. In compliance with Directive 2002/58/EC and the ePrivacy Regulation framework, analytics and functional cookies are only activated upon receiving explicit, informed consent through our interactive Cookie Consent Banner. You may accept or decline optional cookies at any time. Strictly necessary cookies are deployed based on legitimate interest under Article 6(1)(f) GDPR.

3. Cookie Inventory. The following cookies are deployed: (a) hfl_cookie_consent — stores your cookie preference selection (localStorage, 12-month expiry); (b) session identifiers for load balancing and security; (c) anonymous analytics identifiers for aggregated usage tracking.

4. Third-Party Cookie Providers. Analytics cookies may be served by third-party providers operating under data processing agreements. All third-party providers are contractually obligated to process data in compliance with EU GDPR and maintain adequate security measures.

5. Cookie Management. You may revoke consent at any time by clearing your browser cookies and localStorage, or by revisiting this platform where the consent banner will reappear. Browser-level cookie controls can be configured through your browser settings to block or delete cookies as needed.

1. Service Commencement and Cancellation. Upon acceptance of a service proposal and receipt of initial payment, HarborFusionLabs commences resource allocation and project planning. Cancellation by the client within 48 hours of payment receipt entitles the client to a full refund minus administrative processing fees of 5% of the total service value.

2. Milestone-Based Refund Structure. For projects structured across multiple delivery milestones: (a) cancellation prior to the first milestone completion entitles a refund of 75% of the remaining project balance; (b) cancellation after the first milestone but before the second entitles a refund of 50% of the remaining balance; (c) cancellation after the second milestone entitles a refund of 25% of the remaining balance. All completed milestone deliverables remain the property of HarborFusionLabs until full payment is received.

3. Defective Delivery. If deliverables fail to meet the specifications outlined in the approved project scope document, HarborFusionLabs shall, at its option: (a) remedy the deficiency within a reasonable timeframe not exceeding 30 calendar days; (b) provide a proportional price reduction reflecting the scope of deficiency; (c) issue a partial refund calculated based on the proportion of non-conforming deliverables.

4. Force Majeure. Neither party shall be liable for failure to perform obligations due to circumstances beyond reasonable control, including but not limited to natural disasters, government actions, cyberattacks, or infrastructure failures. In such events, both parties shall negotiate in good faith to reach an equitable resolution.

5. Refund Processing. Approved refunds are processed within 14 business days via the original payment method. Refund requests must be submitted in writing to [email protected] with supporting documentation. HarborFusionLabs reserves the right to deduct reasonable administrative costs from refund amounts.

1. Scope of Agreement. These Terms of Service govern the provision of digital engineering, design, and consulting services by HarborFusionLabs, registered at 127661, Str. Primaverii nr. 30, Sat Oreavul, Romania, to clients engaging our services through this platform or via written agreement. By submitting a contact form, accepting a proposal, or engaging our services, the client agrees to be bound by these terms.

2. Service Delivery. HarborFusionLabs shall deliver services in accordance with the specifications outlined in individual project proposals. Deliverables, timelines, and acceptance criteria are defined in each project's scope document, which forms an integral part of the service agreement. Timelines are estimates subject to change based on scope modifications or force majeure events.

3. Intellectual Property. Upon receipt of full payment, all intellectual property rights in the final deliverables transfer to the client. HarborFusionLabs retains ownership of pre-existing tools, frameworks, methodologies, and general knowledge developed independently of client projects. HarborFusionLabs reserves the right to reference the project in portfolio materials unless otherwise agreed in writing.

4. Confidentiality. Both parties agree to maintain strict confidentiality regarding proprietary information exchanged during the engagement. This obligation survives termination of the service agreement for a period of 24 months. Confidential information includes but is not limited to business strategies, technical architectures, source code, and financial data.

5. Payment Terms. Invoices are issued according to the milestone schedule defined in the project proposal. Payment is due within 14 calendar days of invoice date. Late payments incur a statutory interest rate of 8 percentage points above the European Central Bank base rate as per Directive 2011/7/EU on late payment in commercial transactions.

6. Limitation of Liability. HarborFusionLabs's total aggregate liability under any service agreement shall not exceed the total fees paid by the client for the specific project giving rise to the claim. HarborFusionLabs shall not be liable for indirect, consequential, or incidental damages including but not limited to loss of profits, data, or business opportunities.

7. Governing Law and Jurisdiction. These terms are governed by the laws of Romania and applicable European Union regulations. Any disputes arising from or in connection with these terms shall be submitted to the exclusive jurisdiction of the courts of Bucharest, Romania, without prejudice to the consumer's right to bring proceedings in their country of residence under Article 18 of Regulation (EU) No 1215/2012.

8. Amendments. HarborFusionLabs reserves the right to amend these terms at material intervals. Clients shall be notified of significant changes via email communication to the address provided during the engagement. Continued use of services following notification constitutes acceptance of amended terms.

9. Severability. If any provision of these terms is found to be invalid or unenforceable by a court of competent jurisdiction, the remaining provisions shall continue in full force and effect. The invalid provision shall be replaced by a valid provision that most closely reflects the original intent.