Privacy Policy of TheCloserFit.com

Your privacy matters to us

The Closer Fit is committed every day to pursuing its mission: helping talents to prepare for the delicate moments of job interviews. To achieve this, we need to collect and process a set of data provided by the user in full transparency, with the goal of helping the same user achieve their career goal. On this page, you will find all the answers you are looking for regarding the privacy of your data: the data controller, your rights regarding the information provided, the purpose of the data processing, and more. The Closer Fit complies with current regulations by applying the GDPR in an analytical manner to ensure maximum transparency in terms of security.

Owner and Data Controller

The Closer Fit
Owner contact email: info@thecloserfit.com

Types of Data Collected

TheCloserFit.com collects the following data when users use the platform: GitHub Username, and all the data connected to the GitHub authentication (if the users connect via GitHub), the extracted text from the uploaded resume, (the particular data here depends on the content of the resume that the user uploads (it can vary from users to users); the information about the job (job description) for which the user wants to use our service; the audio responses recorded during the mock interview questions that our service generates based on the text of the CV and of the job description data.

Data provided by the user is used to deliver personalized interview feedback tailored to their information contained in the resume and the job they wish to apply for, and the way they answer the mock questions. Failure to provide this data limits the services offered by the platform.

Unless otherwise specified, all data requested by this platform is mandatory. If the User refuses to provide it, it may be impossible for this platform to provide the requested services. In cases where this platform indicates some data as optional, users are free to refrain from providing such data without any impact on the availability or functionality of the service. Users who have doubts about which data is mandatory are encouraged to contact the Data Controller.

The use of cookies – or other tracking tools – by this platform or by the owners of third-party services used by this platform, unless otherwise specified, is intended to provide the essential services requested by the user, in addition to other purposes described in this document and in the Cookie Policy, if available.

The User assumes responsibility for the personal data of third parties obtained, published, or shared through this website and guarantees they have the right to communicate or disclose it, releasing the Data Controller from any liability toward third parties.

Methods of Data Processing

Processing Methods

The Data Controller adopts appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of Personal Data. Processing is carried out through IT and/or telematic tools, including automated ones, with organizational methods and logic strictly related to the stated purposes. In addition to the Data Controller, in some cases, other individuals involved in the organization of this platform (such as administrative, sales, marketing personnel, legal advisors, system administrators) or external parties (such as third-party technical service providers, hosting providers, IT companies, communication agencies) may have access to the Data, acting as Data Processors if necessary, as appointed by the Data Controller. The updated list of Data Processors can always be requested from the Data Controller.

Legal Basis for Processing

The Data Controller processes the user's personal data if one of the following conditions applies:

  1. The user has given consent for one or more specific purposes related to the processing.
  2. Processing is necessary for the execution of a contract with the user or to implement pre-contractual measures.
  3. Processing is required to fulfill a legal obligation to which the Data Controller is subject.
  4. Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller.
  5. Processing is necessary for the legitimate interests pursued by the Data Controller.

It is always possible to request clarification from the Data Controller about the specific legal basis for each type of processing and whether the processing is based on legal requirements, contract provisions, or necessary to conclude a contract.

Location of Data Processing

Data is processed at the operational offices of the Data Controller and in any other location where the parties involved in the processing are located. For further information, contact the Data Controller.

The user's Personal Data may be transferred to a country different from the one where the user is located. To obtain further information about the location of data processing, users can refer to the section detailing the processing of Personal Data. The user has the right to obtain information about the legal basis for transferring data outside the European Union or to an international organization governed by public international law or constituted by two or more countries, as well as about the security measures adopted by the Data Controller to protect the Data.

The user can verify whether any of these transfers take place by reviewing the relevant section of this document or by requesting information from the Data Controller using the contact details provided.

Retention Period

Data is processed and stored for as long as necessary for the purposes for which it was collected. Specifically:

At the end of the retention period, Personal Data will be deleted. Therefore, after the expiration of this period, the right to access, delete, rectify, and the right to data portability can no longer be exercised. Practically, data is retained until users choose to delete their data. Users can delete their account at any time through the platform, which will also remove all associated data from our system.

Purposes of Data Processing

The user's data is collected to allow the Data Controller to provide the service, comply with legal obligations, respond to requests or enforce actions, protect its own rights and interests (or those of users or third parties), identify any fraudulent or malicious activities, and for the following purposes: contacting the user, registration and authentication on this platform, managing support requests, hosting and backend infrastructure, transferring data outside the EU, collecting privacy preferences, managing user databases, registration and authentication, linking data, testing content and feature performance, and creating and managing this website.

Detailed Information on Data Processing

Registration and Authentication

By registering or authenticating, the User allows this platform to identify them and grant access to dedicated services. Depending on what is stated below, registration and authentication services may be provided with the assistance of third parties. When this occurs, this platform may access certain Data stored by the third-party service used for registration or identification.

For more information, please refer to the description of each service.

Vercel

Vercel Inc. is a U.S.-based cloud platform for static sites and serverless functions, headquartered in San Francisco, California.

OpenAI

OpenAI is a nonprofit artificial intelligence research organization with the goal of promoting and developing friendly AI for the benefit of humanity.

Data Transfer Within and Outside the EU

The Data Controller may transfer Personal Data collected within the EU to third countries (i.e., all countries outside the EU) only in compliance with a specific legal basis. Therefore, such Data transfers are carried out based on one of the legal grounds described below. Users may request information from the Data Controller regarding the specific legal basis applicable to each service.

Data Transfer to Countries Ensuring European Standards

When this is the legal basis, the transfer of Personal Data from the EU to third countries occurs based on an adequacy decision adopted by the European Commission. The European Commission adopts adequacy decisions with respect to specific third countries that it considers to provide a level of protection for Personal Data comparable to that of European legislation. Users can view the updated list of adequacy decisions on the European Commission’s website.

Management of Support and Contact Requests

This type of service allows the platform to manage support and contact requests received via email or other communication tools. The Personal Data processed depends on the information provided by the user in their messages and the tool used for communication (such as an email address).

Hosting and Backend Infrastructure

This type of service is designed to host data and files that allow this website to function, enabling distribution and providing a ready-to-use infrastructure to deliver specific functionalities of this website.

Collection of Privacy Preferences

This type of service allows the platform to collect and store users’ preferences regarding the collection, use, and processing of their personal information, as required by applicable privacy legislation.

User Database Management

This type of service enables the Data Controller to create user profiles starting from an email address, name, or any other information provided by the user on this platform, as well as to track user activities through statistical features. These Personal Data may also be combined with publicly available information about the user (such as social network profiles) and used to create private profiles that the Data Controller can view and use to improve this platform.

Security Measures

While we take reasonable steps to protect Users personal information, we currently do not implement specific encryption measures. We are actively working on improving our security infrastructure to better safeguard Users data.

User Rights

Users can exercise certain rights regarding their Data processed by the Data Controller. In particular, within the limits of the law, the User has the right to:

Details on the Right to Object

When Personal Data is processed for a public interest, in the exercise of official authority vested in the Data Controller, or for the legitimate interest of the Data Controller, Users have the right to object to such processing based on grounds related to their particular situation. Users are informed that if their Data is processed for direct marketing purposes, they can object to that processing at any time, without any cost and without providing any reason. If Users object to processing for direct marketing purposes, the Personal Data will no longer be processed for such purposes. To find out whether the Data Controller processes Data for direct marketing purposes, Users can refer to the relevant sections of this document.

Exercising User Rights

To exercise their rights, Users can send a request to the contact details provided by the Data Controller in this document. Requests can be made free of charge, and the Data Controller will respond as quickly as possible, providing all information required by law. Any corrections, deletions, or restrictions on processing will be communicated by the Data Controller to each recipient, if any, to whom the Personal Data was transmitted unless this proves impossible or involves a disproportionate effort. The Data Controller will inform the User of those recipients upon request.

Cookie Policy

This website makes use of tracking tools. For more information, Users can refer to the cookie policy.

Additional Information

Do Not Track

This platform does not support "Do Not Track" requests.

Changes to this Privacy Policy

The Data Controller reserves the right to make changes to this privacy policy at any time by notifying Users on this page and, if possible, within this platform and, where technically and legally feasible, by sending a notification to Users via one of the contact details held by the Data Controller. If the changes affect processing activities that rely on the User's consent, the Data Controller will collect new consent from the User, where required.

User Rights and Control

Cookies and Trackers

TheCloserFit.com does not use cookies or other tracking tools for analytics or advertising purposes.

Children’s Data

TheCloserFit.com is not intended for minors, and we do not knowingly collect personal data from children.

Changes to this Privacy Policy

We reserve the right to update this Privacy Policy at any time. Users will be notified of any significant changes either through the platform or via the contact information provided.

Cookie Policy

Cookie policy