Privacy Policy
This Privacy Policy sets out how personal data of Users, necessary for the provision of services via electronic means through the Service, is collected, processed, and stored.
Definitions
- Behired, us
- Behired Sp. z o.o., located in Walendów, ul. Koncertowa 14, 05-830 Walendów, KRS: 0001095382, NIP: 5342677197, REGON: 528148478, under which we provide the Subscription service.
- Service
- The internet service located at behired.net, owned by Behired sp. z o.o.
- GDPR
- Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
- Terms and Conditions
- Terms and Conditions of providing services electronically when using the Service.
- User (You, Your)
- An adult individual who has registered in the Service and uses the Services.
- Subscription
- A service consisting of providing ongoing access to job offer analysis or resume based on artificial intelligence (AI), then generating a personalized cover letter based on the analysis, suggesting questions that may be asked during the interview, analyzing fit for the position including strengths and weaknesses of the User, and recommendations for resume changes. As part of the Subscription, the User agrees to make a Payment.
- Payment
- The payment that the User agrees to make in the amount indicated on the Service to use the Subscription.
- Account
- A collection of settings enabling the User to manage the Subscription.
- EEA
- European Economic Area.
1. Data Controller
The Data Controller of your personal data processed for the purpose of providing the Subscription is Behired. If you have any questions regarding the processing of your personal data or wish to exercise the rights indicated in section 5 below, you can contact us by sending an email to: support@behired.net.
2. Purposes, scope of personal data, and the basis for processing
| Processing purpose | Data scope | Legal basis for processing |
|---|---|---|
| Account creation and login process | Email address, password | Article 6(1)(b) GDPR — necessity for the performance of the Subscription service agreement or to take actions at your request before entering into the agreement. |
| Providing the Subscription service | Email address, job offer information, CV content, cover letter content, payment information, transaction history | Article 6(1)(b) GDPR — necessity for the performance of the Subscription service agreement or to take actions at your request before entering into the agreement. |
| Payment processing | Email address, payment confirmation information (Stripe Inc. is the administrator of other data related to the payment) | Article 6(1)(c) GDPR — fulfilling legal obligations, including tax and accounting regulations. |
| Website usage statistics | Data on Service activity (e.g., user behavior analysis on the website, IP address, browser, and operating system information) | Article 6(1)(f) GDPR — the legitimate interest of the administrator in improving the operation and usability of the Service. |
| Legal claims | Email address, data on the use of the Subscription | Article 6(1)(f) GDPR — the legitimate interest of the administrator in establishing, pursuing, and defending against claims. |
| Communication (responses to inquiries, handling complaints) | Contact data provided in correspondence or complaints, content of correspondence, data on Service use in the scope related to the complaint | Article 6(1)(f) GDPR — the legitimate interest of the administrator in improving the Service operation and building positive relationships with Users. |
| Social media use | If using our social media (Facebook, Instagram, LinkedIn), we may process data obtained through these media, e.g., name, surname, username, avatar (profile photo), information in posts and comments | Article 6(1)(f) GDPR — the legitimate interest of the administrator in building relationships with Users and marketing our products and services. |
3. Recipients of personal data
Your personal data may be transferred to service providers we use, such as:
- Hosting services and “no-code” platforms: Kylos Sp. z o.o. (location: EEA Poland); Bubble Group Inc. (location: outside EEA United States); Microsoft Inc. (Azure) (location: EEA Ireland, the United Kingdom, France, Germany, the Netherlands).
- Email messaging: AC PM LLC. (location: outside EEA, United States).
- Payment services: Stripe Inc. (location: outside EEA United States).
- IP geolocation: IPInfo Inc. (location: outside EEA United States).
- Artificial intelligence (Chat GPT): OpenAI Ireland Limited (location: EEA Ireland).
- Website traffic measurement: Google LLC. (Google Analytics) (location: outside EEA United States).
- Traffic measurement and analysis of the use of the Service: Microsoft Corporation (Clarity) (location: outside EEA United States).
- Tracking and advertising analytics: Meta Platforms, Inc. (Meta Pixel) (location: outside EEA United States).
Some of the service providers to whom we transfer personal data are located outside the EEA. Therefore, we have ensured that these providers guarantee a high level of personal data protection. The transfer of personal data outside the EEA may be based on:
- Commitment to the use of standard contractual clauses adopted by the EU Commission;
- Decisions by the Commission (EU) confirming an adequate level of data protection (e.g., Privacy Framework regarding the transfer of personal data to the United States).
Your personal data may also be transferred to authorized state authorities upon request, such as the Prosecutor's Office, Police, President of the Personal Data Protection Office, etc.
4. Period of personal data retention
Your personal data is processed for the duration of having an Account, and thereafter, until the expiration of the statute of limitations for claims related to our contract (generally a three-year limitation period). In the case of processing personal data for marketing purposes, we will process your data until you object to such processing or withdraw consent to receive marketing information. If the processing of your personal data is based on your consent, we will process it until you withdraw your consent. In specific cases required by law, we may process your data longer. To fulfill tax and accounting obligations, we process your personal data for 5 years from the end of the tax year in which the tax liability was due.
5. Rights of the data subject
In connection with the processing of your personal data, you have the following rights:
- The right to access your personal data and to receive a copy of it.
- The right to rectify and delete your personal data.
- The right to restrict the processing of your personal data. You have the right to request the restriction of the use of your personal data when:
- You contest their accuracy — in this case, we will restrict their use for the time needed to verify the accuracy of your data;
- The processing of your data is unlawful, and instead of deleting the data, you request the restriction of their use;
- The personal data are no longer needed for the purposes for which they were collected or used, but they are required by you for the establishment, exercise, or defense of legal claims;
- You have objected to the use of your data — in this case, the restriction occurs for the time needed to consider whether the protection of your rights and freedoms outweighs our interests in processing your personal data.
- The right to object to the use of personal data, including profiling, if we process your data based on our legitimate interest, e.g., in connection with the analysis of Service usage statistics. If your personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data for such marketing, including profiling, to the extent that the processing is related to such direct marketing. If we have no other legal basis for processing those personal data, we will delete your data against which you have objected.
- The right to data portability. You have the right to receive your personal data, which you have provided to us, in a structured, commonly used, and machine-readable format, and you have the right to transmit those data to another controller. You also have the right to request that personal data be transferred directly by us to another controller, where technically feasible.
- The right to withdraw consent (if we process your personal data based on consent).
- The right to lodge a complaint with the President of the Personal Data Protection Office.
6. How we protect personal data
We care about the security of Users' personal data by applying appropriate technical and organizational measures of protection, such as data encryption (SSL).
7. Changes to the privacy policy
We may introduce changes or supplements to the Privacy Policy at any time if there is a need to make such changes or supplements. Any changes to the privacy policy will be published on the behired.net page along with the date of its entry into force.