Draft — the text below is written from the platform's rules and awaits legal review. Until then it says what the platform does; it is not legal advice.
Who processes
The controller is the entity operating FacPractica (identification details to be filled in at launch). Write to us through contact with any question about your data.
What data and why
| Data | Why | Basis |
|---|---|---|
| Name, e-mail, password (stored as a hash), language, date of birth | the account, the age check (18+), signing in | performance of the contract; legal obligation for the age |
| The profile: studies, fields, city, skills, languages, experiences, achievements, "about me", the photo, the uploaded résumé | so you can apply and a company can assess you | performance of the contract; the photo and wider visibility - consent |
| Applications: the message, the copy of the profile at the time of applying, the company's answers | the recruitment for that placement and your history | performance of the contract |
| Company data: name, registration number, website, the team members | checking the company and publishing listings | performance of the contract; legitimate interest for the check |
| IP address, signed-in devices, the account's action log | security, abuse prevention | legitimate interest |
| E-mail preferences (alerts, newsletter) | we send only what you asked for | consent, withdrawn any time |
Who sees what
- Your profile is seen only by the companies you apply to, while the application is open and for 30 days after it ended. You can choose in the settings to be findable by checked companies or to have a public profile; we then never show the e-mail, the date of birth or the phone.
- Companies see a copy of the profile and résumé from the moment of applying, not the current version.
- Text you wrote may be machine-translated into the site's other language only through a service we set and describe here before it is used for student text.
How long we keep
- An account whose address is not confirmed is deleted after 14 days.
- The personal content of an ended application (message, profile copy, résumé) is deleted after 12 months; only the fact that an application existed, and how it ended, remains.
- An account with no sign-in for 12 months is told by e-mail and deleted 30 days later.
- When you delete your account, the profile, the files and the personal content of applications go at once.
- Technical logs: the visit statistics and the action log (with the IP address) are deleted after 12 months; messages sent through the contact form after 3 years.
Who we share with
The hosting and the e-mail provider (processors, in the EU), the public trade register for company checks (the registration number only), and - for signing in with an outside account - Google or LinkedIn, only if you choose that way. We do not sell or hand over data.
Your rights
Access, rectification, erasure, restriction, portability, objection and withdrawal of consent - most of them directly from the account ("my data", "delete the account", the e-mail settings), the rest through contact. You may also address the National Supervisory Authority for Personal Data Processing (ANSPDCP).
Cookies
We use only necessary cookies: the session, "remember me" if you choose it, the language and the display mode. No tracking or advertising cookies.
Version: draft, 2026-10-08.