Privacy Policy

Australia (APPs): we collect only what is reasonably necessary (APP 3), use/disclose for the primary purpose or a related purpose you reasonably expect (APP 6), and keep it secure (APP 11).

4) How we collect

• Directly from you in the App/Site;

• Automatically via cookies/SDKs/logs;

• From an identity provider you choose (e.g., Google) for sign-in.

5) Disclosures (who we share with)

• Service providers (processors) for hosting, storage, analytics, email delivery, error reporting, and support—bound by confidentiality and processing only on our instructions.

• Identity providers (e.g., Google) when you choose those sign-in methods.

• Legal/compliance when required by law or to protect rights, safety, or security.

• Corporate transactions (e.g., merger/sale), with appropriate protections.

6) International transfers

Your data may be processed outside your country (e.g., EU, UK, US, AU).

• For EU/EEA/UK users we rely on Standard Contractual Clauses (SCCs) and, where needed, the UK Addendum plus access controls and encryption. Details available on request.

7) Security

We use administrative, technical, and physical safeguards (encryption in transit, restricted access, secure coding, monitoring). No method is 100% secure; we continually improve our measures.

8) Retention

“We keep your account and CV data until you delete it or ask us to delete it. When you request deletion, we remove it from our active databases. Residual technical logs kept by our providers may persist for a limited time (typically ≤ 90 days) but are not used for any other purpose.”

9) Your rights

EU/EEA & UK (GDPR)

You can access, rectify, erase, restrict, port, and object to processing, and withdraw consent at any time. You may lodge a complaint with your local data protection authority (e.g., for AT/RO/other EU states or the ICO in the UK). We respond within one month (extendable for complex requests).

Australia (APPs)

You can access and request correction of your personal information. If you’re dissatisfied, you may complain to the Office of the Australian Information Commissioner (OAIC).

How to exercise rights (all regions)

Use in-app settings where available or email desy-app@mail.com with subject “Privacy Request”. We may ask for verification.

10) Marketing choices

Service messages are essential. We send marketing only with your consent (where required). Opt out via in-app settings or the unsubscribe link in emails.

11) Cookies & analytics (Site)

We use cookies/SDKs for essential functions, preferences, analytics, and (if consented) marketing. You can request deletion of data here: https://desy.bloom-design.ro/delete-data/

12) Account & data deletion

Delete your account/data in the App: Settings → Account → Delete account, or email desy-app@mail.com. Some records may be retained if required by law (e.g., security logs, billing records).
Public Delete Account help page: Deletion URL 

13) Data breaches

• EU/EEA & UK: if a breach is likely to risk your rights and freedoms, we will notify the relevant authority within 72 hours and inform affected users without undue delay as required.

• Australia (NDB): if a breach is likely to cause serious harm, we will notify affected individuals and the OAIC.

14) Children

The App is not intended for children under 13 in the US, 16 (EU/UK) or 16 (AU). If you believe a child has provided personal data, contact us to remove it.

15) Region-specific notes

• Austria, Romania, and other EU countries: we follow the GDPR and applicable national laws.

• Australia: if the small business exemption applies to you now, you may still choose to comply with the APPs. If an exception applies or you grow past thresholds, the APPs/NDB will apply; this policy is designed to meet those standards.

15A) United States & California (CPRA)

Notice at Collection (what we collect & why).
We collect the following categories from you or your device to operate the App:

Sale/Share.
We do not sell or share your personal information (no cross-context behavioral advertising).

Sensitive data.
We do not intentionally process sensitive personal information (as defined by CPRA). If you place such info in your CV, it is processed only to provide the service you request.

Your rights (California & other US state laws).
You may request access, correction, or deletion of your personal information. You may also ask for details about categories of personal information collected, sources, purposes, and disclosures. We honor state rights that are substantially similar (e.g., VA/CO/CT/UT).
Submit requests in-app or email desy-app@mail.com

16) Changes to this policy

We may update this policy. We’ll post changes on the Site/App, update the “Last updated” date, and, for material changes, provide a prominent notice.

17) Contact

Sinziana Cristea
Email: desy-app@mail.com
Postal: Sirenelor 90, Bucharest, Romania