ResumeWorld

Skip to main content
GDPR Compliance

Your Data, Your Rights

We're committed to protecting your personal data and complying with the General Data Protection Regulation (GDPR).

Last updated: October 30, 2026EU/EEA Residents
On this page

What is GDPR?

The General Data Protection Regulation (GDPR) is a comprehensive data protection law that came into effect on May 25, 2018. It applies to all organizations operating within the European Union (EU) and the European Economic Area (EEA), as well as organizations outside these regions that offer goods or services to EU/EEA residents.

GDPR gives individuals greater control over their personal data and establishes strict rules for how organizations can collect, process, store, and share this data.

Key principles of GDPR:

  • Lawfulness, fairness, and transparency
  • Purpose limitation - data collected for specific purposes
  • Data minimization - only collect what's necessary
  • Accuracy - keep personal data accurate and up to date
  • Storage limitation - don't keep data longer than needed
  • Integrity and confidentiality - ensure appropriate security
Articles 12-23

Your Rights Under GDPR

GDPR grants you significant rights over your personal data. We are committed to respecting and facilitating these rights.

Right to Access

Art. 15
Request a copy of all personal data we hold about you

Right to Rectification

Art. 16
Request correction of inaccurate or incomplete data

Right to Erasure

Art. 17
Request deletion of your personal data ('Right to be Forgotten')

Right to Restrict

Art. 18
Request restriction of processing your data

Right to Portability

Art. 20
Receive your data in a portable, machine-readable format

Right to Object

Art. 21
Object to processing based on legitimate interests
Article 6

Legal Basis for Processing

Under GDPR, we must have a valid legal basis to process your personal data. Here are the legal bases we rely on:

Consent

You have given clear consent for processing

Contract

Processing is necessary for a contract

Legal Obligation

Required to comply with the law

Legitimate Interest

Necessary for our legitimate business interests

We will always inform you of the legal basis we rely on when we collect your data. You can withdraw consent at any time.

Data We Collect

We collect and process the following categories of personal data in compliance with GDPR:

Identity Data

Name, username, job title, and other identifiers you provide

Contact Data

Email address, phone number, and postal address

Professional Data

Resume content, work history, education, skills, and qualifications

Technical Data

IP address, browser type, device information, and usage patterns
Article 5(1)(e)

Data Retention

We only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including satisfying any legal, accounting, or reporting requirements.

Retention periods:

Account data
Until account deletion + 30 days
Resume data
Until deletion or 2 years of inactivity
Analytics data
26 months
Transaction records
7 years (legal requirement)
Support communications
3 years

You can request deletion of your data at any time by contacting our Data Protection Officer.

Articles 44-49

International Data Transfers

When we transfer your personal data outside the EEA, we ensure appropriate safeguards are in place to protect your data.

Safeguards we use:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Transfers to countries with adequate data protection laws
  • Binding Corporate Rules for intra-group transfers
  • Certification mechanisms and codes of conduct

All our cloud service providers maintain GDPR-compliant data processing agreements and appropriate security measures.

Article 32

Data Security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk.

Security measures include:

  • End-to-end encryption for data in transit (TLS 1.3)
  • AES-256 encryption for data at rest
  • Regular security audits and penetration testing
  • Access controls and authentication mechanisms
  • Employee security training and awareness programs
  • Incident response and breach notification procedures

In the event of a data breach that poses a risk to your rights, we will notify you and the relevant supervisory authority within 72 hours.

Article 77

Complaints & Supervisory Authority

If you believe that we have not complied with your data protection rights, you have the right to lodge a complaint.

Step 1: Contact Us First

We recommend contacting our DPO first at [email protected]. We'll try to resolve your concern promptly.

Step 2: Supervisory Authority

You can contact the data protection authority in your country of residence, place of work, or where the alleged infringement occurred.

Find your local Data Protection Authority

Policy Updates

We may update this GDPR compliance page periodically to reflect changes in our practices or regulatory requirements.

  • We will post any changes on this page
  • The "Last updated" date will be revised
  • For material changes, we will notify you via email
  • Significant changes require your renewed consent where applicable

We recommend reviewing this page periodically to stay informed about how we protect your data under GDPR.

Contact Us

For any questions about this GDPR compliance page or to exercise your data protection rights, please contact us.

Data Protection Officer

[email protected]

General Inquiries

[email protected]

Exercise Your Rights

Contact our Data Protection Officer to exercise any of your GDPR rights.

Contact DPOPrivacy Policy