Privacy Policy

Introduction

CVwisely (“cvwisely", "we", “us" or "our") is committed to protecting and respecting the data subject’s (“data subject”, “you”, “your”) privacy. This Privacy Policy, the principles of which cvwisely follows, provides detailed information on the personal data collected by cvwisely about you, the purposes this data is used for and who has access to the data. Please take the time to read this Privacy Policy and feel free to contact cvwisely at support@cvwisely.com directly with any questions or suggestions concerning this Privacy Policy.

Like most of companies, cvwisely collects data when you visit our website cvwisely.com. However, please be aware that we do use cookies on our websites. Please review our Cookie Policy to find out more information about how and what kind of cookies we use.

We process personal data in compliance with applicable personal data protection laws, including the Regulation of the European Parliament and the Council (EU) 2016/679 (“GDPR”) as well as the Personal Data Protection Act of Estonia.

Please be aware that we can update our Privacy Policy and in that case we will notify you about the changes. You can always find the current version of the Privacy Policy from the [link] page.

Terms and definitions

The Privacy Policy of cvwisely (company name CV Wisely OÜ) is based on the GDPR. The Privacy Policy we apply must be clear and understandable to the visitors of our websites as well as to our contractual customers and to our partners. In order to ensure that all the parties understand their rights in the same way, we explain the most important terms here.

Data subject: Identified or identifiable natural person whose data is processed;

Personal Data: Any information concerning an identified or identifiable natural person (“data subject”); identifiable natural person means a person who can be identified directly or indirectly, in particular on the basis of identifying attribute, including name, personal identification code, location information, network identifier, or on the basis of one or more physical, physiological, genetic, mental, economic, cultural or social characteristics of the natural person;

Processing of Personal Data: Automated or non-automated operation or set of operations, including collection, documentation, organizing, structuring, storing, customizing and modifying, querying, reading, using, transferring, distributing, or making otherwise available, joining or combining, restricting, deleting or destructing of personal data or set of them;

Profile analysis: Any automated processing of personal data involving the use of personal data for the assessment of certain personal aspects of the natural person. In particular, for analyzing or forecasting aspects related to the performance, financial situation, health, personal preferences, interests, reliability, behaviour, location or movement of the natural person concerned;

Controller: Natural or legal person, public entity, agency or other body which alone or in cooperation with others determines the objectives and means of the processing of personal data; if the objectives and means of such processing are determined in the law of the Union or the Member State, the specific criteria for the Responsible Processor or for assigning the one may be established in the law of the Union or the Member State;

Processor: Natural or legal person, public entity, agency or other body processing personal data on behalf of the controller;

Recipient: Natural or legal person, public entity, agency or other body to whom personal data is disclosed, whether or not it is a third party. The public entities which can obtain personal data as a result of specific inquiry in accordance with the law of the Union or the Member State, are not deemed to be recipients; these public entities process such data in accordance with applicable data protection standards in the basis of the processing purposes;

Third Party: Natural or legal person, public entity, agency or body, excluding the Data Subject, Controller, Processor and persons who can process personal data under the direct responsibility of the Controller or Processor;

“Consent” of the Data Subject: Voluntary, specific, conscious and unambiguous statement by which the Data Subject in the form of an application or by explicit consent, agrees with the processing of his/her personal data.

Data controller

Company name: CV Wisely OÜ

Address: Laeva tn 7, 10151, Tallinn, Estonia

E-mail: support@cvwisely.com

Website: cvwisely.com

We can be contacted by e-mail at support@cvwisely.com.

What kind of personal data cvwisely collects and how is the data used?

Cvwisely may collect the following personal data about the data subjects if you open an account and use our services:

First name and surname

Password

Date of birth and age

Email address

Address

Phone number

Education

Previous places of employment

IP aadress(es) and geographical location

Bank account details

Payment data

Nationality

Gender

URL of your LinkedIn profile

URL of any website entered by the user

Interests and hobbies

Skills

Languages

Courses and certifications

Purposes and legal bases for data processing

We process your personal data only for the purpose(s) for which we have collected the personal data. If you object to the processing of your personal data that is based on statutory or contractual basis, you may not be able to access our services.

Recipients of personal data

In certain cases, cvwisely may disclose your personal data to third parties. For example, to the service providers (such as payments, IT, accounting and others) who cvwisely uses and if its is necessary for them to access your personal data to perform their assignments. In all cases when cvwisely uses external service providers, cvwisely does this based on a data processing agreement.

In certain cases, when a public authority asks cvwisely to provide personal data to them, if this is required by law, cvwisely may disclose your personal data to public authorities. In those cases, cvwisely will carefully assess the case to determine whether the disclosure of your personal data is an obligation arising from the law.

Transfer of personal data

Cvwisely will keep all disclosed personal data strictly confidential and protected from being unlawfully disclosed to third parties.

Cvwisely implements appropriate technical and organisational measures to make sure your personal data is protected, taking into account the nature, scope, context and purposes of processing personal data, as well as the risks to the rights and freedoms of the natural person.

Data retention

Personal data is retained by cvwisely for how long as necessary to fulfil the purposes for which the personal data is processed. We may need to retain personal data in accordance with the time limits set out in applicable legislation. When we no longer need to retain personal data, we delete it or make it anonymous. Cvwisely retains personal data for the periods set out below:

When closing a customer account, personal data will be erased 3 years after the closure of the customer account.

In the case of disputes related to payments and consumer disputes, personal data is retained until the claim is fulfilled or the limitation period expires.

Personal data required for accounting will be stored for seven years according to § 12 of the Accounting Act.

Automated-decision making, including profiling

Cvwisely does not carry out automated decisions or profiling regarding data subjects.

Sources of personal data

Cvwisely collects information about the data subject from the following sources:

Personal data provided by you to us directly.

Personal data provided to cvwisely by a third party service provider. For example, when the data subject decides to use Google Login to sign in to access the service.

What are your rights and how you can exercise them

By contacting cvwisely, you can exercise the following rights:

The right to view and access your personal data;

The right to correct your personal data;

The right to delete your personal data;

The right to transfer your personal data;

The right that you will not be judged solely on the basis of automated data processing;

The right to withdraw your consent.

In certain cases, you have the right to demand restriction for processing of your personal data and the right to object processing of your personal data.

You can exercise your rights in accordance with the terms and conditions based on GDPR and other local regulations.

If you believe that your privacy has been compromised, please contact us by the email address below. You also have the right to file a complaint to the data protection supervisory authority of the country of your residence. In Estonia, this is the Estonian Data Protection Inspectorate.

With any questions, please feel free to contact us at support@cvwisely.com.