Privacy Policy

1. Data Controller

OptimizatuCV.es is a service offered by KUTECH 101 S.L., with its registered office at 08003 Barcelona, Spain.

Tax ID: B10947687

Contact Email: hello@kulturo.tech

2. Personal Data Collected

To provide our services, we collect the following personal data:

• Registration Information: Email address.
• Uploaded CV Information: First name, last name, work experience, and education details.

We do not collect sensitive data such as gender, nationality, religion, or other protected categories.

3. Purpose of Processing

We process personal data to:

• Provide the service of tailoring CVs to job postings.
• Allow users to save and review their CVs.
• Fulfill our legal and security obligations.

4. Legal Basis for Processing

The processing of personal data is based on:

• User consent when registering and uploading their CV.
• The necessity of processing to provide the requested service.

5. Data Retention

Data will be retained as long as the user maintains an active account. Upon account deletion, all personal data and associated files will be permanently deleted.

6. Use of Third-Party Services

We use external services to ensure the proper functioning of OptimizatuCV.es:

• Vercel: Handles hosting and infrastructure management. Personal data is stored and processed exclusively on servers located within the European Union, in compliance with the General Data Protection Regulation (GDPR).
• OpenAI: Provides CV analysis and adaptation services. OpenAI complies with GDPR through the use of Standard Contractual Clauses (SCCs) approved by the European Commission.
• Stripe: Processes payments (if applicable). Only the email address is shared, and Stripe complies with GDPR and SCCs for international data transfers.

7. User Rights

Users have the right to:

• Access, rectify, or delete their personal data.
• Withdraw their consent at any time.
• Request data portability.
• File a complaint with a data protection authority (e.g., the Spanish Data Protection Agency - AEPD).

Users can exercise these rights by:

• Deleting their account directly from the application.
• Contacting us via email at hello@kulturo.tech

8. International Data Transfers

Although data is primarily processed within the EU, international transfers to Stripe and OpenAI are protected by Standard Contractual Clauses (SCCs) and other legal safeguards in compliance with GDPR.

9. Data Security

We have implemented technical and organizational measures to protect personal data against unauthorized access, loss, alteration, or disclosure. This includes data encryption and strict access controls.

10. Changes to the Privacy Policy

This policy may be updated to reflect changes in our services or applicable regulations. Users will be notified of significant changes before they take effect.

11. Contact

For questions about this policy or how we handle personal data, contact us at hello@kulturo.tech