Privacy Policy

Your data security is the foundation of our elite network.

1. Data Controller

The data controller responsible for your personal information is Mgr. Marek Bilek. We process data in accordance with the GDPR and other local data protection laws.

Contact: info@careerspal.com
Operator details: provided on invoice or available on request.

2. Information We Collect

We collect and process the following categories of data:

Profile Information: Name, email, professional role, and Notion/system expertise.
Professional Credentials: Resumes, portfolios (Notion sites), and work history provided for the Talent Pool.
Employer Data: Company details, VAT numbers (for billing), and job descriptions.
Technical Data: IP address, browser type, and usage patterns via essential cookies.

3. Purpose of Processing

We process your data exclusively to:
- Connect elite Notion architects with high-growth companies.
- Facilitate job applications and talent matching.
- Send curated newsletters and platform updates (only with consent).
- Prevent fraud and maintain a secure ecosystem.

4. Legal Basis

We process personal data based on consent (newsletter, alerts), legitimate interest (platform security, analytics, product improvement), and contract performance (job postings, employer tools, candidate services).

5. Data Retention

We keep personal data only as long as necessary for the purpose it was collected for, and longer where we have legal obligations (e.g., accounting).

Retention overview (typical)

Account profile: while your account is active; deleted upon request or after prolonged inactivity (typically up to 24 months), unless we must retain certain records.
Candidate profile / CV / portfolio links: while you keep the profile active; deleted upon request (we may retain minimal audit/security logs).
Employer job listings: while live + archived history for operational recordkeeping (typically up to 24 months), unless deletion is requested and not required by law.
Payment records: retained for legal/financial compliance (typically up to 7 years, depending on jurisdiction).
Email delivery logs: typically up to 12 months for deliverability, abuse prevention, and troubleshooting.
Security/audit logs: typically up to 12–24 months (fraud prevention, incident response).

Exact retention may vary based on legal requirements and the nature of your request (e.g., disputes, fraud prevention).

6. Processors & Data Transfers

We use vetted service providers (“processors”) to run the platform. Where applicable, they act under a Data Processing Agreement (DPA) and contractual safeguards (e.g., Standard Contractual Clauses for cross‑border transfers).

Main subprocessors

Supabase — database, storage, authentication.
Vercel — hosting, CDN, serverless compute.
Stripe — payments and invoicing.
Resend — transactional and alert emails.
Google — OAuth sign‑in (if you use Google login) and AI features (Gemini) when explicitly triggered.

Some providers may process data outside the EEA/UK. We rely on appropriate safeguards and contractual controls to protect your data.

7. Cookies & Analytics

We use essential cookies to maintain sessions and security. We also collect basic analytics for site performance. You can disable non-essential cookies in your browser.

8. Your Rights

You have the right to access, correct, delete, or export your personal data, and to object or restrict certain processing (subject to legal limitations).

DSR process (access / delete / export)

Email your request to info@careerspal.com from the address linked to your account.
We may ask for additional verification to protect your data.
Acknowledgement SLA: typically within 2 days.
Completion target: we aim to complete requests within 30 days (GDPR standard), or sooner where possible.

GDPR

SSL