Legal
Privacy notice
Short version: an email address you confirmed, whatever you chose to write in a form, and nothing you did not hand us. No third-party trackers unless you allowed analytics.
Last updated 2026-09-11.
Who is responsible
ГО "ДСЦА" / NGO RDAI. Contact for any privacy question or request: the contact form.
What we collect, and why
| Data | Why | Kept for |
|---|---|---|
| Email address | To send the confirmation link, then programme emails you asked for. | Until you unsubscribe or ask for deletion. |
| Name (optional) | So emails and replies address you properly. | Same as the email address. |
| What you wrote in a form | To answer you usefully and to route you to the right track. | 24 months, then deleted. |
| Checker result summary | To email you the result and follow up about the matching session. | 12 months, then deleted. |
| Uploaded CV file | To produce your result page, and to test and improve the Checker against real CVs. Never shown to employers, never shared. | 24 months, then deleted. Sooner on request. |
| LinkedIn profile basics | Name, email and profile URL, only if you log in with LinkedIn. | While your account exists. |
| Consent record | Proof of when and how you agreed, as the law requires. | 3 years after consent ends. |
Double opt-in
When you submit a form we record a pending entry and email you one confirmation link. If you never open it, the pending entry is deleted after 7 days and you receive nothing further. You are only on a list after you confirm.
Unsubscribing
Every email carries a one-click unsubscribe link, and the standard
List-Unsubscribe headers so your mail client can do it for you. One click
is enough — no login, no confirmation step, no "are you sure". You can also use
the unsubscribe page.
Cookies and analytics
One Google tag runs on this site — Google Analytics 4 and Google Ads conversion measurement on the same tag — and it is served from this domain rather than a Google one.
Until you choose "Allow analytics" every page tells that tag it may not store anything: no cookies, no identifiers, ad click identifiers stripped. Choose to allow and we record the choice in one cookie, after which the tag may use cookies. Details in the cookie notice.
Where data is stored
Website delivery runs on Cloudflare. Participant records and email delivery run on Amazon Web Services in an Asia-Pacific region. Both are processors acting on our instructions. Google is a processor only for analytics, only after you consent.
A CV you submit to Checker is held in private object storage in that same region, encrypted at rest, reachable only by RDAI and never listed or served publicly. Uploads are add-only: a new submission is written under a new name, so nothing you sent before can be overwritten or silently replaced. We keep it to test the diagnostic against real CVs; we do not show it to employers and we do not share it.
Your rights
- Ask what we hold about you, and get a copy.
- Correct anything wrong.
- Have it deleted.
- Withdraw consent at any time, without giving a reason.
- Object to how we use it.
Use the contact form. We answer within 30 days. Deletion requests are carried out, not negotiated.
Children
The programme is for adults. We do not knowingly collect data from anyone under 18. If that has happened, tell us and we delete it.
Changes
Material changes are announced by email before they take effect. The date at the top of this page reflects the current version.