Privacy Policy

1. Data Controller

2. What Data We Collect

• Identity data: full name, job title, company name (from forms)
• Contact data: email address, phone number, LinkedIn profile URL
• CV and professional data: work history, skills, salary expectations (from candidate submissions)
• Technical data: IP address, browser type, device, pages visited
• Usage data: how you interact with the site
• Cookie data: see our Cookie Policy

3. How We Use Your Data

• To respond to candidate and employer enquiries
• To match candidates with relevant job opportunities
• To share candidate profiles with prospective employers (with explicit consent)
• To send service communications
• To comply with legal obligations
• To improve site performance via analytics

4. Legal Basis (GDPR Article 6)

• Contractual necessity: responding to job applications and employer enquiries
• Legitimate interests: site analytics, fraud prevention
• Explicit consent: sharing candidate profiles with third-party employers
• Legal obligation: compliance requirements

5. Data Sharing

We do not sell your data. We may share with:

• Prospective employers and clients (only with your explicit consent given on the candidates page)
• Google LLC (analytics) — Standard Contractual Clauses (SCCs) in place
• Email service provider (Resend)
• Legal/compliance advisors under NDA

6. International Transfers

Data may be processed outside the EEA (e.g. USA via Google and Resend). Transfers are protected by EU Standard Contractual Clauses (SCCs) per GDPR Chapter V.

7. Data Retention

• Candidate profiles: 24 months from submission (as stated at point of collection)
• Employer enquiries: 3 years from last contact
• Analytics data: 26 months (GA4 default)

8. Your Rights (GDPR)

You have the right to:

To exercise any right, email info@hrfinease.com — response within 30 days.

9. Complaints

You may lodge a complaint with your local supervisory authority.

• Cyprus users: Office of the Commissioner for Personal Data Protection
• EU users: Your national Data Protection Authority (DPA)

10. Changes

We may update this policy. Material changes will be communicated via the website.