Privacy & RODO

Provisional operator

Aurelis Recruitment is the provisional business name. The business is not registered; legal controller identity, registered address and registration details remain unconfirmed.

Demo contact: contact@aurelis-recruitment.com. This inbox is not verified or confirmed operational. Do not send CVs, identity documents or privacy requests to it. A working privacy contact is required before public recruitment use.

Your profile stays private

Aurelis stores your account and professional profile, including name, photo, skills, employment evidence, location, languages and any CV you upload. Public matching demonstrations contain fictitious identities only. Being open to work does not authorize disclosure.

Who can see your data

Only your account and separately authorized, signed-in recruitment managers can access your profile. Recruitment-manager access requires your optional sharing permission, which starts off. This permission covers authorized managers using Aurelis to assess recruitment opportunities, including your name, photo, profile and current CV. It does not authorize public publication or onward submission to an employer. A separate, informed approval naming the recipient is required before external disclosure.

Withdraw sharing in your profile’s Privacy & consent section. New reads and CV access are then blocked. Material already downloaded or disclosed cannot be recalled automatically; existing short-lived CV links may remain valid for up to two minutes.

Optional AI matching

AI permission is separate from recruiter sharing. Structured professional information is sent through Lovable AI Gateway to the configured model to compare skills and evidence with role requirements. Names, photos and contact links are not included in structured-profile matching. Recruitment managers supplying ad-hoc CVs must confirm candidate permission for AI processing; the uploaded document itself may contain identifying data. These ad-hoc uploads are not saved by the application.

AI reports may contain errors or bias. They show evidence, gaps and suggested interview questions, not a guarantee of fit. No AI output automatically hires or rejects you. Recruitment managers must independently review evidence and make decisions; protected characteristics must not be used to rank candidates. Declining AI permission leaves your account and manual profile review available.

Consent records, security and analytics

Terms acknowledgement and changes to sharing and AI permission are recorded with a policy version and server timestamp. CVs use private storage, owner-scoped access and short-lived links. Recruitment reports are restricted to their author and currently consenting candidates. Engagement events record counts, file types and sizes rather than CV contents, names or search keywords. Authorized service operators and contracted providers may process data as required to operate the service; provider agreements and transfer safeguards must be finalized before production use.

Your rights and retention

You can correct your profile, withdraw optional permissions and download your profile and consent record in the app. Depending on the legal basis and circumstances, GDPR provides rights of access, rectification, erasure, restriction, portability and objection, and safeguards around significant automated decisions. Withdrawal does not affect earlier lawful processing.

You may complain to the competent data-protection authority, including Poland’s UODO where applicable. Account erasure, human-review requests and other rights need a verified operator contact; that contact is not yet configured. The demo contact is not a rights-request channel; no retention periods have been approved. The operator must document retention criteria for profiles, CVs, reports, consent records and backups, implement deletion, and confirm the request-handling process before launch.