Privacy policy

The data controller is [Legal name SRL], registered office at [Registered address], tax ID [RO00000000], Trade Register no. [J00/0000/2026].

Data Protection Officer (DPO): [DPO name / firm], email [dpo@domeniu.ro], postal address [DPO address].

• Account data: name, email, preferred language. Your password is stored hashed by the authentication provider; we never see it.
• Professional profile: experience, education, skills, foreign languages, city, target role, work preferences.
• Documents: the resumes and files you upload or create on the platform.
• Results: answers and scores in assessments, the Employability Index and its history.
• Applications: the jobs you apply to and messages exchanged with employers through the platform.
• Technical data: IP address, device and browser type, security and error logs.
• Usage data: pages visited and actions in the app, only if you accept analytics cookies.
• Payment data: [to complete once the processor is chosen]. Card details are processed directly by the payment processor; we never see them.

Special categories of data. Information about health or disability (for example, for reasonable accommodation at work or inclusion tracks) is processed only if you choose to provide it and only with your explicit consent, asked for separately (Art. 9(2)(a) GDPR). You can withdraw consent at any time and the data is deleted. We do not process biometric data and do not use emotion recognition.

We only work with providers that have signed a data processing agreement (DPA) with us. We do not sell personal data or share it for advertising.

Employers. When you apply to a job or make your profile visible to recruiters, the employer receives the data you choose to send and becomes a separate controller for it, with its own GDPR obligations.

• Account and profile: for as long as your account is active.
• After a deletion request: a 30-day grace period in which you can change your mind; then the data is permanently deleted. Backups are overwritten within [35] days at most.
• Inactive accounts: after [24] months without activity we notify you and, if you do not return, delete the account.
• Job applications: [12] months after the ad closes, then anonymised.
• Security logs: [12] months.
• Billing data: 10 years, under Accounting Law no. 82/1991.
• Proof of consent: for as long as we need to demonstrate it, even after withdrawal.

• Right of access: find out what data we hold about you.
• Right to rectification: correct wrong data, directly from your profile.
• Right to erasure: delete your account from Settings → Data.
• Right to restriction: ask us to pause processing temporarily.
• Right to data portability: download your data in a structured format, from Settings → Data.
• Right to object: object to processing based on legitimate interest.
• Right to withdraw consent at any time, as easily as you gave it.
• Right not to be subject to a decision based solely on automated processing.

For any request, write to [dpo@domeniu.ro]. We reply within one month; for complex requests this can be extended by two more months, in which case we let you know.

If you think we process your data incorrectly, you can write to us first. You always have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), 28-30 G-ral. Gheorghe Magheru Blvd., Sector 1, Bucharest, anspdcp@dataprotection.ro.

• ANSPDCP: dataprotection.ro

• We use AI for: text suggestions in resumes and letters, explaining your match with a job, explaining the Index and recommending courses. AI-generated content is labelled as such.
• Text you send to an AI feature is treated as data, not as instructions, and is sent to the AI provider only as far as needed for the answer.
• Employer features that rank or filter candidates are high-risk under Regulation (EU) 2024/1689 (AI Act). Therefore: a human always makes the decision, there are no automated rejections, we log usage, monitor for possible discrimination and inform you when an employer uses such features on your application.
• We do not use emotion recognition, nor face or voice analysis.
• You can always ask for a recommendation about you to be reviewed by a human, at [dpo@domeniu.ro].

The Employability Index and recommendations are calculated automatically, but they are information for you only: they have no legal effect and decide nothing in your place. No hiring or rejection decision is made solely by automated means (Art. 22 GDPR).

Data is encrypted in transit and at rest. Database access is restricted at row level (each user sees only their own data), and team access is minimal and logged. If a security breach affects you, we notify you as the law requires.

CareerLab is intended for people aged at least [16]. If you learn that a minor under that age has created an account, write to us and we will delete it.

If we change anything important in this policy, we notify you by email or in the app before the change applies. Questions: [dpo@domeniu.ro].