Privacy Policy

POLICY ON PERSONAL DATA PROCESSING

Document version: 2.0

Last updated: 12.06.2026

Respecting your privacy is one of our fundamental commitments and, therefore, we pay the utmost attention to the processing of your personal data, in accordance with the applicable law.

CV30 WORLDWIDE GROUP SRL, headquartered in 26 G-RAL BARBU VLĂDOIANU STREET, ATTIC, ROOM NO. 1, Bucharest, District 1, fiscal identification code 33994135, registered with the Trade Registry Office under no. J40/588/2015 ("CV30 WORLDWIDE GROUP SRL", "we") processes, as an operator, your personal data ("Personal Data"). The purpose of this document ("Policy") is to detail how CV30 WORLDWIDE GROUP SRL processes your Personal Data.

1. PROCESSED PERSONAL DATA, PROCESSING PURPOSES AND PROCESSING GROUNDS

A. Using the Platform

a. Sending notifications

Personal data processed: name, surname, e-mail address, telephone number.

b. Posting on the Platform

Platform posts are public and can be viewed by users who have an account on the Platform ("Members") and users without an account ("Visitors"). For more details on the rules for posting on the Platform, please see the Terms and Conditions available here.

Personal data processed: any information that may represent personal data included in the content posted on the Platform.

c. Interaction with other users’ posts

The user's actions within the Platform are public, both Members and Users being able to see the comments and endorsement reactions that the user posts. For more details on the rules for posting on the Platform, please see the Terms and Conditions available here.

Personal data processed: name, surname, any information representing personal data in the comment.

d. Applying for job postings

Personal data processed: name, surname, address, e-mail address, telephone number, C.V. (curriculum vitae).

B. Contacting the User

a. Contacting the User

Personal data processed: name, surname, e-mail address, telephone number.

C. User account

a. Creating the User account

Processed personal data: name, surname, home address, position, employer.

b. Filling in the user profile

Personal data processed: image (avatar, cover photo), date of birth, gender, phone number, personal description, university, faculty, specialisation, year of study, graduating class, employer, position, work experience, education, skills, career plan, ideal job, C.V. (curriculum vitae), social media links (Instagram, Facebook, X/Twitter, TikTok, LinkedIn), username (@handle).

D. Marketing (Newsletter, promotions, offers)

a. Commercial messages

Personal data processed: name, surname, telephone number, e-mail address.

E. Dispute resolution

a. Litigation

Personal data processed: name, surname, home address.

F. Location data

a. Location verification for contests (geofencing)

Personal data processed: approximate GPS coordinates at the time of participation.

The coordinates are used exclusively to validate participation and are not stored as a movement history.

b. Community map

Personal data processed: the coordinates of the points ("pins") voluntarily created by you on the map, attendance intention ("Going").

Please note: pins created on the map are publicly visible, together with your name and avatar.

c. Dormitory location (optional)

Personal data processed: the "I live in a dormitory" flag and, optionally, the approximate coordinates of the dormitory.

You can enable the "hide exact location" option; in this case the precise coordinates are not displayed to other users. You can delete this data at any time from your profile.

G. Private messaging (Chat)

Personal data processed: the content of messages, attached files (images, videos), reactions, read receipts, date and time of transmission.

Private messages are visible exclusively to the participants in the conversation. CV30 does not monitor the content of private messages; they may be accessed by authorised personnel only in exceptional cases (abuse reports, legal obligation). Messages are retained until deleted by the sender or until the account is deleted.

H. Listings published by users (Noticeboard)

Personal data processed: the content of the listing, the contact details you choose to include (phone, WhatsApp, Instagram), view statistics.

Please note: the contact details included in a listing become visible to the users to whom the listing is displayed. You include them at your own risk and you can remove them at any time by editing or closing the listing.

I. Public profile

Your profile (name, username, avatar, cover photo, description, education, work experience, social media links) is publicly accessible at cv30.app/u/[username] and may be indexed by search engines (e.g. Google). You control the visibility of your email address, phone number and date of birth through the privacy settings in your profile (these are hidden by default). Posts in Groups remain visible only to the members of the group.

2. PROVISION OF PERSONAL DATA

You may refuse to provide certain Personal Data, but in such a case you may not be able to benefit from certain services provided by us, as described in this Policy.

3. ABOUT THE LEGAL GROUNDS

The legal grounds for processing differs depending on the factual situation and the Personal Data processed.

In the situations in which we process your Personal Data on the basis of consent, we will request your free, informed, specific and unequivocal consent for such processing. By expressing your consent, you agree that we may collect, use, disclose, process and transfer Personal Data in accordance with this Policy.

4. SOURCE OF PERSONAL DATA

The source of the Personal Data: the Data subject, the online user.

5. AUTOMATIC PROCESSING OF PERSONAL DATA

We use automated processing to personalise content: the order of posts in the Feed and the listings displayed in the Noticeboard are determined automatically based on the information in your profile (university, faculty, year of study, graduating class, approximate location). Eligibility for certain events may also be checked automatically based on your profile fields.

This processing does not produce legal effects on you and does not significantly affect you within the meaning of art. 22(1) of the GDPR – it determines exclusively the relevance of the content displayed. We do not make decisions based solely on automated processing that produce legal effects on you.

6. TERM OF PROCESSING

The duration for which we process Personal Data differs depending on the specific processing operation:

In certain circumstances, we may retain Personal Data for longer periods of time in order to have an accurate record of your relationship with us in the event of any complaints or if we reasonably believe that there is a prospect of litigation.

7. TRANSFER OF PERSONAL DATA

We may transfer the Personal Data, to the extent necessary, to the following categories of recipients: processors providing technical infrastructure services, employers (where you apply for a job posting), event organisers (exclusively for attendance validation), as well as state authorities, upon request, in accordance with the law.

The main processors currently used are:

*Transfers to the USA are carried out on the basis of the EU–U.S. adequacy decision (EU–U.S. Data Privacy Framework) or, as applicable, the standard contractual clauses issued by the European Commission.

Event organisers and persons authorised to validate attendance also have access to the data strictly necessary to confirm your identity and attendance at the events for which you have registered (first name, last name, registration status).

These recipients may be located in the European Union and / or in the European Economic Area, as well as outside them, including in countries that are not recognized as providing an adequate level of protection, in which case the transfer of Personal Data is carried out only if there are appropriate guarantees, in accordance with applicable law (such as standard contractual clauses issued by the European Commission). You can request a list of recipients from third countries, as well as a copy of the agreed provisions that ensure an adequate level of protection of Personal Data.

8. SECURITY OF PERSONAL DATA

The security of your Personal Data is important to us. Therefore, your Personal Data will be processed by applying reasonable technical and organizational measures to protect it, such as limiting access to Personal Data, encrypting or anonymizing Personal Data, storage on secure media. However, despite our best efforts, we cannot always guarantee the effectiveness of the security measures implemented, and therefore we cannot guarantee the security of Personal Data at any time.

9. THE RIGHTS REGARDING THE PERSONAL DATA PROCESSING

Right of access: You have the right to obtain confirmation from us that your Personal Data are processed by us, as well as information on the specifics of the processing such as: purpose, categories of Personal Data processed, their recipients, period for which they are kept, their source, if we transfer them abroad and how we protect them, your rights, the right to lodge a complaint with the supervisory authority.

Right of rectification: You may ask for the rectification of your Personal Data, provided that the applicable legal requirements are complied with. In case of any errors, after notification, we will immediately correct your Personal Data.

Right of erasure: In some cases, you may request the deletion of Personal Data, such as when: (i) they are no longer necessary for the purposes for which they were collected and processed; (ii) you have withdrawn your consent to the processing of Personal Data and we can no longer process Personal Data on other legal grounds; (iii) Personal Data are processed against the law; (iv) exercise a legal right to object. We have no obligation to comply with your deletion request if the processing of Personal Data is necessary to comply with a legal obligation, or to establish, exercise or defend a right in court. There are also other circumstances in which we are not obliged to comply with this request to delete Personal Data.

Restriction of processing: You may request that we restrict the processing of your Personal Data in the following situations: (i) if you challenge the correctness of the Personal Data, for a period that allows us to verify the accuracy of the Personal Data in question; (ii) if the processing is illegal, and you object to the deletion of the Personal Data, requesting in return the restriction of their use; (iii) if we no longer need the Personal Data for the purpose of processing, but you request it for a lawsuit; (iv) if you objected to the processing, for the period during which it is verified that our legitimate rights as an operator prevail over those of the data subject. We may continue to use Personal Data following a request for restriction, if: (i) we have your consent; (ii) to establish, exercise or ensure the defense of a right in court; or (iii) to protect the rights of another natural or legal person.

Right to data portability: To the extent that the Personal Data is processed on the basis of your consent or for the performance of the contract and the processing is done by automatic means, you have the right to have your Personal Data provided to you in a structured, commonly used format which can be read automatically and you have the right to transmit this Personal Data to another operator. This right does not adversely affect the rights and freedoms of others.

Right to oppose: In certain situations, such as when we process your Personal Data on the basis of a legitimate interest, you have the right to object to the processing of your Personal Data by us. In case of unjustified opposition, CV30 WORLDWIDE GROUP SRL is entitled to further process Personal Data. You may also object to the processing of your Personal Data for the purpose of sending commercial messages.

Consent withdrawal: To the extent that we process your Personal Data on the basis of your consent, you may revoke your consent at any time, without affecting the lawfulness of the processing based on your consent before it is withdrawn.

Automated individual decision making: You have the right not to be subject to a decision based solely on automatic processing, including profiling, which has legal effects on you or similarly affects you to a significant extent. This right shall not apply if the decision: (i) is necessary for the conclusion or performance of a contract between you and us; (ii) is authorized by law to provide adequate safeguards for your rights and freedoms; (iii) is based on your explicit consent.

Right to address to the supervisory authority: You have the right to file a complaint with the National Authority for the Supervision of Personal Data Processing ("ANSPDCP") in connection with any violation of your rights regarding the processing of your Personal Data. The contact details of ANSPDCP are: 28-30 G-ral. Gheorghe Magheru Blvd., District 1, postal code 010336 Bucharest, ROMANIA; e-mail: anspdcp@dataprotection.ro.

To exercise the rights mentioned above, please contact us at the e-mail address: contact@cv30.co.

10. COOKIES AND SIMILAR TECHNOLOGIES

The cv30.app website uses exclusively cookies strictly necessary for its operation:

We do not use marketing cookies, advertising profiling cookies or third-party analytics cookies. As we use exclusively strictly necessary cookies, they do not require prior consent under the applicable law.

11. CONTACT

If you have any questions or concerns regarding this Policy or its implementation, you may contact us:

Email: contact@cv30.co

Address: CV30 WORLDWIDE GROUP SRL, Str. G-ral Barbu Vlădoianu No. 26, Attic, Room 1, Sector 1, Bucharest, Romania