1. Data Controller Information

HR Job Portal (the "Platform") is operated by [Your Company Name], located at [Your Business Address]. We are the data controller responsible for your personal data. For data protection inquiries, contact our Data Protection Officer at privacy@hrjobportal.com.

2. Information We Collect

We collect the following categories of personal data:

• Account Information: Username, email address, password (encrypted)
• Profile Data: Name, professional title, bio, skills, experience, availability
• Contact Information: Email, phone number, location
• Professional Information: Work history, education, portfolio links, GitHub profile
• Job Data: Job descriptions, budgets, requirements, applications
• Communication Data: Messages between users, support communications
• Technical Data: IP address, browser type, device information, usage patterns
• LinkedIn Integration Data: Profile information imported from LinkedIn (with your consent)

3. Legal Basis for Processing (GDPR)

We process your personal data based on the following legal grounds:

• Consent (Art. 6(1)(a) GDPR): LinkedIn integration, marketing communications, non-essential cookies
• Contract (Art. 6(1)(b) GDPR): Account creation, service provision, job matching, communications between users
• Legal Obligation (Art. 6(1)(c) GDPR): Compliance with tax laws, data retention requirements
• Legitimate Interests (Art. 6(1)(f) GDPR): Platform security, fraud prevention, service improvement, analytics

4. LinkedIn Integration

When you choose to connect your LinkedIn account:

• What we access: Basic profile information, professional experience, skills, and email address
• Why we access it: To auto-populate your HR Job Portal profile and provide better matching
• Your control: You can disconnect LinkedIn access at any time in your account settings
• LinkedIn's privacy: Your use of LinkedIn integration is also governed by LinkedIn's Privacy Policy

5. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Create and manage your account
• Match clients with suitable talent
• Facilitate communication between users
• Send important notifications about your account
• Ensure platform security and prevent fraud

6. Information Sharing and Third-Party Transfers

We do not sell your personal information. We may share your information in the following circumstances:

• With other users: Profile information necessary for platform functionality (name, professional details, job information)
• Service providers: Cloud hosting (PostgreSQL), email services, LinkedIn API - all under strict data processing agreements
• Legal compliance: When required by law, court order, or to protect rights and safety
• Business transfers: In connection with merger, acquisition, or asset sale (with notice to users)
• With your consent: Any other sharing will require your explicit consent

International Transfers: Your data may be processed outside the EU/EEA. We ensure adequate protection through appropriate safeguards such as Standard Contractual Clauses.

7. Data Security and Protection

We implement appropriate technical and organizational measures including:

• Technical measures: Encryption of data in transit and at rest, secure authentication, regular security updates
• Organizational measures: Access controls, staff training, incident response procedures
• Data minimization: We collect and process only necessary data for specified purposes
• Privacy by design: Data protection is considered in all system designs and processes

Note: No method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

8. Data Retention

We retain your personal data according to the following schedule:

• Active accounts: Data retained while account is active and for 30 days after account deletion request
• Job data: Retained for 3 years after job completion for legal and business purposes
• Communication records: Retained for 2 years for support and dispute resolution
• Legal compliance: Some data may be retained longer to comply with legal obligations (e.g., tax records: 7 years)
• Marketing data: Retained until you withdraw consent or 3 years of inactivity

You can request earlier deletion of your data, subject to our legal obligations.

9. Your Rights Under GDPR

If you are in the EU/EEA, you have the following rights regarding your personal data:

• Right of Access (Art. 15): Request copies and information about your personal data processing
• Right to Rectification (Art. 16): Request correction of inaccurate or incomplete data
• Right to Erasure (Art. 17): Request deletion of your personal data ("right to be forgotten")
• Right to Restrict Processing (Art. 18): Request limitation of processing in certain circumstances
• Right to Data Portability (Art. 20): Request transfer of your data in a machine-readable format
• Right to Object (Art. 21): Object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent (Art. 7): Withdraw consent at any time where processing is based on consent
• Right to Lodge a Complaint: Contact your local data protection authority if you believe your rights have been violated

To exercise these rights, contact us at privacy@hrjobportal.com. We will respond within 30 days.

10. Cookies and Tracking Technologies

We use the following types of cookies and similar technologies:

• Strictly Necessary Cookies: Essential for platform functionality (login sessions, security)
• Functional Cookies: Remember your preferences and settings
• Analytics Cookies: Help us understand platform usage (with your consent)
• Third-Party Cookies: LinkedIn integration (only when you use LinkedIn login)

Your Cookie Choices:

• Essential cookies cannot be disabled as they are necessary for the platform to function
• You can manage other cookies through your browser settings or our cookie preference center
• Disabling cookies may affect platform functionality

11. Third-Party Links and Services

Our platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies.

12. Users Under 18

Our services are not intended for users under 18 years of age. We do not knowingly collect personal information from users under 18.

13. Changes to This Policy

We may update this privacy policy periodically to reflect changes in our practices or legal requirements. We will:

• Notify users of material changes via email or platform notification
• Update the "Last updated" date at the top of this policy
• Obtain new consent where required by law
• Provide 30 days notice for significant changes affecting your rights

Continued use of our platform after changes constitutes acceptance of the updated policy.

14. Contact Us and Data Protection Officer

For privacy-related inquiries, data subject rights requests, or complaints:

EU Data Protection Authorities: If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local data protection authority.