Privacy statement
1. Preface
CVmaker B.V., located at Piet Heinkade 221, 1019 HM Amsterdam, in the Netherlands (hereinafter: “we” or “CVmaker”), is the controller, as referred to in the General Data Protection Regulation (GDPR). We are responsible for the processing of personal data collected through the use of our website - www.cvmaker.uk - unless otherwise indicated. We respect the privacy of users by processing and securing personal data provided to us, in accordance with applicable privacy laws. In this privacy statement, we explain which personal data we collect, use, and for what purpose. We recommend that you read it carefully.
For any questions, please contact [email protected]. Even if something is unclear, we ask you to contact us. This privacy statement covers the collection and processing of your personal data. Where this privacy statement refers to ‘personal data’ it is referring to data about you from which you could be identified – such as your name, your date of birth, your contact details and even your IP address.
We reserve the right to revise or amend this privacy statement at any time to reflect changes to our business or changes in the law. It is your responsibility to check this privacy statement before each use of our website or services.
Our website is not intended for children under the ages of 13 and we do not knowingly collect personal data relating to children under the age of 13.
This privacy statement was last modified on December 2020.
2. Use of personal data
2.1 Our service - Creating a CV In order to use our service, you must enter personal data on our website, by means of a step-by-step plan. As soon as you have completed the first step and clicked through to the second step, we will save all the data you have entered. In the first step, we ask you for the following personal data:
First and last names*;
E-mail address*;
Phone number*;
Address*;
Profile picture;
Date and place of birth;
Whether you have a driving license;
Nationality;
Sex;
Marital status;
URL of your LinkedIn profile;
URL of any website to be added.
The personal data marked with an asterisk is necessary to use our services. You only provide the other information to complete your CV. In the next step of our service, you will be asked to provide the following information:
Education data, such as training, internships, courses, and certificates (including period and institution);
Work experience data, such as position and employer;
Interests and extra-curricular activities;
Skills and level;
Languages.
After filling in the above information, the user can design a CV in Step 3 and use the option of taking out a (immediately cancellable) subscription at CVmaker for (a monthly) payment. By means of that service, the user can continuously view, download, and edit the CV that he or she has completed and designed. The user can use all other functions, such as making unlimited application letters, sending applications, and looking for (matching) jobs.
2.2 Payment details In order to properly arrange payment for the aforementioned subscription, we use the services of third parties, such as (but not limited to) Adyen, Paypal, Stripe, and Mollie Payments (“Payment Providers”). You provide your payment details directly to the Payment Providers and not to CVmaker. It may be that that Payment Providers shares certain information about you (such as your bank details) so that we can check whether you have paid. We never receive and store credit card information. The aforementioned Payment Providers are independent controllers of your data and are responsible for the data they process for the payments of users. Please review their privacy policies for more information.
2.3 Email Marketing We may use your personal data to contact you about our latest deals, news, our products or our services (we call this marketing).
You will receive marketing communications from us if you have:
subscribed to receive marketing communications from us; or
purchased our products or services, and you have not opted out of receiving marketing from us when providing us with your e-mail address.
To unsubscribe from marketing emails at any time, please click on the unsubscribe link at the bottom of any marketing email, or you can contact us.
We will also seek your express opt-in consent before we share your CV in a secure manner with other recruiters so that they contact you about any roles or opportunities you might be interested in.
We will get your express opt-in consent before we share your personal data to any third party for its own marketing purposes.
2.3 Other purposes for use of data
In addition to the purposes set out above, we process your personal data for the following purposes:
Contact details and CV data in order to create and/or manage your account.
CV data in order to optimise your CV and your use of our services.
Contact details to contact users in connection with the conclusion and/or performance of the agreement, billing.
Contact details to, if users have given CVmaker consent (and pay for it), link their personal CV to relevant jobs offered by third parties through CVmaker, we will send users emails with job vacancies selected by us based on their personal CV.
Payment details to action billing.
Usage data to grow our business and/or improve our services. For more information on this please refer to our section on Cookies below.
3. Sharing of personal data
We do not provide your personal data to third parties, unless this is necessary in the context of the execution of the agreement that you conclude with us, or if this is required by law. This concerns the following processors:
Payment providers, as described in "2.2 Payment details";
IT service providers;
Review platforms;
Email service for sending emails;
Research agencies and analytical software to improve our services and website, including Google Analytics;
Ticket, Live Chat and Customer Support help platforms.
The processors who gain access to your personal data from us may only use it to provide you with a service on behalf of CVmaker. If you provide additional information to these processors yourself, we are not responsible for this.
We may also disclose your personal data to third parties in the following events:
if we were to sell or buy any business or assets, in which case we might disclose your personal data to the prospective seller or buyer of such business or assets as part of that sale;
if CV Maker or substantially all of its assets are acquired by a third party, in which case personal data held by us about our customers will be one of the transferred assets;
if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or if we are asked to provide your details to a lawful authority in order to aid in the investigation of crime or disorder; and/or
in order to enforce or apply our website’s terms; or to protect the rights, property, or safety of our company, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
4. Principles for the processing of personal data
We process personal data in order to carry out our service - the preparation of a professional CV - in the best possible way. We only process personal data if we have a legal basis for this. We process personal data on the following grounds:
User Agreement: In order to properly execute the agreement that you enter into with CVmaker, we must process the aforementioned personal data of users. This includes data entered by users for creating a CV and stored for this in their (temporary) account, but also payment details. See above.
Legal obligation:Where we need to process personal data to comply with a legal or regulatory obligation. For example, we have to keep certain financial information, such as payment invoices, for seven years under tax law.
Where it is necessary for our legitimate interests and your fundamental rights do not override those interests. For example, to send marketing communications to you if when you sign up to use our services you do not opt out of receiving marketing communications from us. Please refer to our marketing section for more information.
Consent: We will ask consent from users if the processing of personal data does not fall under the aforementioned basis. Users can always withdraw their consent by notifying us in writing.
5. Retention periods
We only keep the personal data entered by users after you click through to Step 2 of our service. If you have not subsequently taken out a subscription, CVmaker will save the data you have entered for up to one month after CVmaker has sent you a second e-mail, asking whether you want to complete your CV and take out a subscription. In case you do not respond or reject it, your personal data will be deleted after a month. In case you have taken out a subscription, we keep the personal data you provide until you indicate to us that the (and which) personal data must be removed. In any case, we will send you a message one year after your last activity via our service, asking if we should keep your data. We may however retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you. In the absence of a response, we will delete your data one month after the last email. We are obliged to keep administrative personal data such as invoices with your invoice, payment, and order data for 7 years.
6. Cookies
Cookies are small, simple text files that your computer or mobile device stores when you use our website. Because we want to guarantee your privacy and improve the user-friendliness of your visit(s) to our website, we think it is important that you know why we use cookies. By placing cookies, you do not always have to enter the same information and, for example, you can finish your CV at a later time. In addition, they help us understand how you use the website and how we can make the website more consumer-friendly. In addition, cookies (by third parties) are placed for marketing or analytical purposes, and these third parties are the parties responsible for the processing of the data concerned.
6.1 Cookie settings If you want to make optimal use of our website, you need to accept our cookies. You can do this by clicking 'Accept' in the cookie notification on your first visit. Of course, we are very careful with the data we collect from you. For more detailed information about the cookies we place or to change your cookie settings, please visit the ‘Cookies’ page.
6.2 Functional cookies We place functional cookies to ensure that the website functions optimally. These are required for the website to work (properly). For example, you do not have to enter the same data again and again when creating your CV. In addition, these cookies ensure that the website is evenly loaded and continues to function both quickly and properly. The following functional cookies are placed by third parties:
Postmark
Postmark provides our email service. All emails sent from CVmaker are sent by Postmark. By using Postmark, we can ensure that (important) e-mails always arrive in your mailbox. We have a processing agreement with this party. To deliver its service, Postmark receives email addresses from users and email content from CVmaker. Postmark will never use that information for its own purposes. Personal data is stored securely by Postmark. Postmark does not place cookies during your visit to the website, but only uses (tracking) cookies in the sent emails and other technologies that make it clear whether, and when, emails are opened and read, and at which IP location. The data is stored in the US (under the Privacy Shield) and deleted after 60 days.
More information about data processing can be found in the Postmark Privacy Policy.
6.3 Analytical cookies
With analytical cookies, we (with the help of third parties) collect statistics and information about how our website is used. By measuring website usage, we can continuously optimise our website to increase user-friendliness. For example, we use these cookies to track the number of visitors to the website and to measure how long a visit lasts. The following data, among others, are stored:
IP address (anonymised);
Technical characteristics, such as the browser used (for example: Google Chrome, Safari, Firefox), screen resolution, language preference, and which device you use;
Surf and scroll behaviour and general use of the website;
Which pages you visit on the website and from which page you came to the website.
The following analytical cookies are placed by third parties:
Google Analytics
With Google Analytics, we measure your aforementioned website usage. We have entered into a processor agreement with Google. Google does not share (anonymous) data with third parties. These cookies are automatically deleted after a maximum of 2 years. More information on data processing can be found in the Google Privacy Policy.
Hotjar
With Hotjar, we measure your scroll and click behaviour anonymously. With this information, we can detect errors in the website and continue to improve both our services and website optimally. We have concluded a processing agreement with Hotjar. Hotjar does not share (anonymous) data with third parties. These cookies are automatically deleted after a maximum of 1 year. More information about data processing can be found in the Hotjar Privacy Policy.
Tawk
Tawk offers chat services. CVmaker only collects the contact details of the person being chatted with and the content of the conversations. This information is used to help you when you contact us through our live chat. That data is stored in the US and the data is deleted after 30 days. Tawk does not share (anonymous) data with third parties. More information about data processing can be found in the Tawk Privacy Policy.
Tapffiliate
This service can place a cookie to measure whether you come to our website from a partner. This data is used to measure the campaign from which your visit originated. Tapfilliate does not share (anonymous) data with third parties. These cookies are automatically deleted after a maximum of 90 days. More information about data processing can be found in the Tapfilliate Privacy Policy.
6.4 Marketing cookies We place these cookies for marketing purposes. This way we can send you personalised offers via partner sites and on social media. The following marketing cookies are placed by third parties:
Google Remarketing and DoubleClick
These cookies keep track of which pages you view, so we can show relevant advertisements on (partner) sites. We can track whether you click ads and whether you place orders after you see, or click on, an ad. This way, you will not miss any personal offers and you will not see advertisements more often if you are not interested in them. Google sometimes shares anonymous data with third parties. These cookies are automatically deleted after a maximum of 2 years. More information about data processing can be found in the Google Privacy Policy.
Microsoft Advertising
These cookies keep track of which pages you view, so we can show relevant advertisements on (partner) sites. We can track whether you click ads and whether you place orders after you see, or click on, an ad. This way, you will not miss any personal offers and you will not see advertisements more often if you are not interested in them. Microsoft shares anonymous data with third parties. These cookies are automatically deleted after a maximum of 90 days. More information about data processing can be found in the Microsoft Privacy Policy.
These cookies keep track of which pages you view, so we can show relevant advertisements on Facebook. This way, you will not miss any personal offers and you will not see advertisements more often if you are not interested in them. Facebook does not share anonymous data with third parties. The cookies are automatically deleted after a maximum of 2 years. More information about data processing can be found in the Facebook Privacy Policy.
These cookies keep track of which pages you view, so we can show relevant advertisements on Pinterest. This way, you will not miss any personal offers and you will not see advertisements more often if you are not interested in them. Pinterest does not share anonymous data with third parties. The cookies are automatically deleted after a maximum of 1 year. More information about data processing can be found in the Pinterest Privacy Policy.
6.5 Delete or disable cookies
Of course, you can always delete or disable our cookies. You can also disable the use of JavaScript, however, you must keep in mind that our website may not function optimally without it. How to disable or delete cookies is explained below for the most commonly used browsers:
7. International Transfers and Security, and protection of personal data
We may transfer your personal data outside of the United Kingdom (“UK”) and the European Economic Area (“EEA”) (together known as the “UKEEA”). Whenever we do transfer your personal data outside of the UKEEA, we ensure that a similar degree of protection is afforded to it by ensuring that in most cases at least one of the following safeguards is implemented:
We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission (in the case of transfers outside of the EEA) or the ICO (in the case of transfer outside of the UK); and/or
Where we use certain service providers, we will use specific contracts approved by the European Commission (in the case of transfers outside of the EEA) or the ICO (in the case of transfers outside of the UK) which gives personal data the same protection it has in Europe.
If following the UK’s exit from the European Union, additional protections are required in respect of transfers of personal data from the EEA to the UK and vice versa, then we shall implement them.
CVmaker takes many measures to treat and secure your personal data carefully. We have therefore taken appropriate technical and organisational security measures to protect your personal data. We use SSL technology to encrypt transmission of sensitive information or personal data to us, such as account passwords and other payment-related identifiable information. In addition, all sensitive information is stored encrypted. Moreover, this information can only be consulted by employees for whom it is necessary that they work with it. Beyond all comprehensive security measures, we would like to point out that absolute security for sending or storing personal data via the internet cannot always be guaranteed.
8. Rights of users
Users have the right to access and (if there is a reason to) change the personal data we have collected from them. Users have the right to object to the processing of their personal data. In certain cases, users may also ask us to restrict, adjust, send, transfer to another controller, or have the processing of their personal data removed. This can be done by sending a request to [email protected]. Users receive an overview of their personal data, or a response to the request, within a month of the request. Personal data can also be deleted by clicking on the "Delete data" button in the emails sent by us. Right to file a complaint: Users can file a complaint about the processing of personal data. If CVmaker does not comply with the request for access, correction, objection, limitation, deletion, or transfer of personal data, a complaint can be submitted to the Dutch Personal Data Authority via telephone number + 3188-1805 250 or via the online form of the Dutch Data Protection Authority.
9. Disclaimer
This privacy statement does not apply to third-party internet sites that are linked to this website by links. We are not responsible for how these third parties handle personal data. We therefore recommend that you read the privacy statements of these websites before using them.
We are not liable for damage resulting from illegally-obtained access to computers or files by third parties, viruses spread through advertisements, or other unlawful programs or files.
10. Questions and complaints
If there are questions about this privacy statement and/or the way in which we use personal data, please contact:
CVmaker B.V. Piet Heinkade 221 1019 HM Amsterdam The Netherlands CoC: 70894027 E-mail address: [email protected]
Changes to the privacy statement
We may adjust this privacy statement from time to time by posting an updated version on the website. That is why we recommend that you check the website regularly. Dutch law applies to this privacy statement.