GDPR Compliance

1. Our Commitment

We respect your right to privacy and are committed to protecting your personal data. We have implemented robust technical and organizational measures to ensure that your data is processed securely and in accordance with the GDPR.

2. Data Controller

For the purposes of the GDPR, HiJob.ai acts as the Data Controller for the personal information you provide when creating an account and using our platform.

3. Legal Basis for Processing

We process your personal data under the following legal bases:

• •Consent: When you explicitly agree to our processing of your data (e.g., subscribing to newsletters).
• •Contract Performance: When processing is necessary to provide you with our AI job preparation services.
• •Legitimate Interests: When necessary for our legitimate business interests, such as improving our AI models and preventing fraud, provided those interests are not overridden by your rights.

4. Your GDPR Rights

Under the GDPR, you have the following rights regarding your personal data:

• ✓Right to Access: You can request a copy of the personal data we hold about you.
• ✓Right to Rectification: You can request that we correct inaccurate or incomplete data.
• ✓Right to Erasure ("Right to be Forgotten"): You can request the deletion of your personal data.
• ✓Right to Restrict Processing: You can ask us to suspend the processing of your data.
• ✓Right to Data Portability: You can request your data in a structured, commonly used, machine-readable format.
• ✓Right to Object: You can object to our processing of your data under certain circumstances.

5. Data We Process

We process data necessary to provide our services, including account details (name, email), uploaded resumes, mock interview recordings/transcripts, and usage analytics. For a full breakdown, please refer to our Privacy Policy.

6. International Data Transfers

HiJob.ai operates globally. When we transfer your data outside the EEA, we ensure it is protected by appropriate safeguards, such as Standard Contractual Clauses (SCCs) approved by the European Commission, or by transferring to countries deemed to have adequate data protection laws.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. Upon account deletion, your data is permanently erased or anonymized within 30 days.

8. Data Breach Notification

In the unlikely event of a data breach that poses a high risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach, in accordance with GDPR requirements.