GDPR — personal data protection

If you are in the European Union, European Economic Area or United Kingdom, the processing of your data is governed by the General Data Protection Regulation (GDPR, EU Regulation 2016/679) and UK GDPR. Below is a brief overview of how CV-Sender complies with it. Full list of data and purposes — in Privacy Policy.

1. Data Controller

FOP Pavlenko Dmytro Sergiiovych (RNOTPR 3335908633, Ukraine). Data protection contact: info@cv-sender.com.

2. Legal grounds (Art. 6 and 9 GDPR)

• Contract performance (Art. 6(1)(b)) — CV distribution, CV and cover letter drafting, account management, payment processing.
• Consent (Art. 6(1)(a)) — sharing your CV with companies from your selected database, CV recognition, Telegram notifications. Health data (medical documents if you uploaded them) is processed only with your explicit consent (Art. 9(2)(a)) and only for CV drafting.
• Legitimate interest (Art. 6(1)(f)) — website protection from fraud and spam.
• Legal obligation (Art. 6(1)(c)) — accounting of payments.

3. Your rights

• Access (Art. 15) — find out what data we store and get a copy.
• Correction (Art. 16) — correct inaccurate data (much can be changed yourself in your account).
• Deletion — 'right to be forgotten' (Art. 17) — delete your data if there is no lawful reason to keep it.
• Restriction of Processing (Art. 18).
• Portability (Art. 20) — receive your data in a machine-readable format (JSON or CSV).
• Objection (Art. 21) — against processing based on legitimate interest.
• Withdrawal of Consent (Art. 7(3)) — at any time, without affecting the lawfulness of processing before withdrawal.
• Complaint (Art. 77) — to the data protection authority of the EU country where you live or work.

To exercise your right, write to info@cv-sender.com from the email address provided in your order. We will respond within one month (Art. 12(3)) free of charge.

4. Recipients and International Transfer

The purpose of our service is to send your CV to companies in different countries, including outside the EEA. Such transfer happens at your initiative, based on your explicit consent and for the performance of the contract concluded with you (Art. 49(1)(a) and (b) GDPR). Service contractors (hosting, email, payments, CV recognition) receive data under data processing agreements, including EU Standard Contractual Clauses (SCC).

5. Automated Decision-Making

We do not make decisions about you based solely on automated processing that produce legal effects (Art. 22). Auto-filling the form from your CV is only a suggestion: you review and correct all fields yourself.

6. Storage Period and Security

Storage periods and security measures are described in sections 6 and 8 Privacy Policy. In case of a serious data breach, we will notify you and the supervisory authority within the required timeframe (Art. 33–34).

7. Consent at Order

When placing an order, you check the box "I agree with the Privacy Policy and the processing of my personal data according to GDPR". Without this consent, we cannot send your CV to companies, so the order cannot be processed.

Last updated: 03.11.2026