Privacy Policy

This policy explains, in plain terms, what happens to your data when you use My Perfect CV, the free résumé builder and résumé rating tool published by Briefly Recruiting. It is written to match how the site actually works today. There is no user account on this site, no login, no subscription and no payment, so none of the data that normally comes with those things exists here.

Who is responsible

Controller within the meaning of Art. 4(7) GDPR:
Robert Dembinski, Briefly Recruiting
Waldstraße 52, 45525 Hattingen, Germany
Email: info@brieflyrecruiting.com

Full publisher details are in the imprint. Data protection questions can be sent to the same address with the subject line "Data protection inquiry"; we answer within 30 days as required by Art. 12(3) GDPR.

What we process, and why

1. Résumé content you enter or upload

When you type into the builder, dictate an answer, or upload a PDF or Word file, that content is held in your browser tab while you work. To generate, rewrite or score a document, the text is transmitted to our server and from there to a language-model provider that produces the result, which is returned to your browser. We do not save your résumé to a database, we do not build a profile from it, and the text is not used to train models. Reloading the page or pressing "Start over" clears the draft. Legal basis: Art. 6(1)(b) GDPR — performing the service you requested.

2. Job postings you paste or link

If you paste a job advertisement, its text is processed in the same way as your résumé content. If you supply a link instead, our server fetches the public page through a website-retrieval provider so the posting can be read as text. Legal basis: Art. 6(1)(b) GDPR.

3. Messages you send us

The contact form asks for your name, email address, a subject and a message. Those are delivered to our mailbox by our email provider and kept for as long as needed to deal with your request, and afterwards for the statutory retention periods that apply to business correspondence. Legal basis: Art. 6(1)(b) and Art. 6(1)(f) GDPR — answering your enquiry.

4. Server logs

Our hosting provider records standard technical information for each request: IP address, timestamp, requested URL, referrer, browser and operating system. These logs exist to keep the service available and to detect abuse; they are short-lived and are not combined with anything you type into the builder. Legal basis: Art. 6(1)(f) GDPR — legitimate interest in a secure, functioning site.

5. Aggregate usage counters

We count how many résumés have been created, downloaded and rated in total. These are plain numbers with no personal identifier attached and cannot be traced back to a visitor.

Cookies and similar technologies

No advertising or analytics cookies are set before you agree to them. When you first arrive, a banner asks for your decision, and Google Consent Mode v2 is initialised with ad_storage, ad_user_data, ad_personalization and analytics_storage all set to denied.

• Strictly necessary: a single entry in your browser's local storage records your cookie choice so we do not ask again. No consent is required for this (§ 25(2) TTDSG).
• Advertising and analytics: set only after you press "Accept cookies". Legal basis: Art. 6(1)(a) GDPR and § 25(1) TTDSG.
• Withdrawing consent: use the "Cookie settings" link in the footer at any time. Withdrawal takes effect immediately and does not affect processing that already happened.

Advertising (Google AdSense)

The site is free and is financed in part by display advertising delivered through Google AdSense, operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

• Before consent: advertising storage stays denied, so ads are served without advertising cookies and without personalisation.
• After consent: Google and its partners may set cookies or use similar technologies to select ads, limit repetition and measure performance.
• Data Google may process: IP address, device and browser information, the pages you view on this site and your interactions with ads.
• Your résumé is never shared: the content of your documents, uploads and generated files is never passed to advertising partners.
• More information: how Google uses cookies in advertising and Google's privacy policy. You can switch off personalised advertising in Google Ad Settings or opt out of third-party vendor cookies at aboutads.info/choices.

Analytics (Google Analytics 4)

We use Google Analytics 4 to see how many people use the tool and which pages they read. Measurement only starts after you accept cookies; if you decline, no analytics cookies are set and no analytics data is collected. IP addresses are shortened by Google before processing, and we never attempt to identify individual visitors. Legal basis: Art. 6(1)(a) GDPR.

Processors we work with

The following providers process data on our behalf under agreements meeting Art. 28 GDPR. We do not sell, rent or trade personal data.

• Hosting and application platform — serving the site and running the functions that build and score documents.
• Language-model provider — generating, rewriting and scoring résumé text for the length of each request; content is not retained for training.
• Website-retrieval provider — fetching a job posting when you paste a link.
• Email delivery provider — sending contact-form messages to our mailbox.
• Google Ireland Limited — advertising and analytics, after consent.

International transfers

Some of these providers are based in, or process data in, the United States. Those transfers are covered by the EU Standard Contractual Clauses under Art. 46(2)(c) GDPR and, where applicable, by the provider's certification under the EU-US Data Privacy Framework, together with encryption in transit and access controls.

How long data is kept

• Résumé and job-posting text: processed for the duration of the request and not stored afterwards; the working draft lives only in your browser tab.
• Contact messages: kept while your enquiry is open, then for the statutory retention period for business correspondence.
• Server logs: deleted or anonymised shortly after collection.
• Cookie choice: stored in your browser until you clear it or change it.

Security

All traffic runs over HTTPS. Access to the systems behind the site is limited to the people who operate it and protected by strong authentication. Uploaded files are processed in memory for the request and are not written to long-term storage.

Your rights

Under the GDPR you can request access to your data (Art. 15), correction (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), portability (Art. 20), and you can object to processing based on legitimate interest (Art. 21) or withdraw consent at any time (Art. 7(3)). Because the builder stores nothing about you, most requests will concern contact-form correspondence. Write to info@brieflyrecruiting.com.

You also have the right to complain to a supervisory authority (Art. 77 GDPR). The competent authority for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2-4, 40213 Düsseldorf, www.ldi.nrw.de.

Automated processing

The rating tool applies a scoring rubric to the document you supply and returns suggestions. It makes no decision about you, has no legal effect, and is not used by any employer to filter candidates. Every result is advice for you to accept or ignore.

Children

The site is intended for people old enough to apply for work. We do not knowingly process data from children under 16.

Changes to this policy

If the way we handle data changes, we update this page and the date at the top. Please check back occasionally; the current version always applies.