Applicant Privacy Notice

Last updated: June 2026 · Draft pending legal review

⚠️ Draft — not legal advice. This notice must be reviewed and the controller details / retention periods confirmed before the apply flow goes live.

This notice explains how DataFortify handles the personal data you share when you apply for a role with us. We take it seriously — protecting data is literally our business.

Who is responsible

The data controller is VGUARD Capital S.L. ("DataFortify"). For any privacy question or request, contact privacy@datafortify.cloud.

What we collect

Your name and email address
The role you applied for and the confirmations you ticked
A short description of how you use AI in your work
Your CV and anything else you send when you reply to our confirmation email
Basic technical data (IP address) used only to verify you're human and prevent abuse

Why we use it (lawful basis)

To assess your application — taking steps at your request prior to entering a contract, and our legitimate interest in recruiting.
To keep your application on file for future roles — only if you give us explicit consent via the optional checkbox. You can withdraw that consent at any time.

How long we keep it

By default: we delete your application 6 months after you apply.
If you opt in: we keep it for up to 24 months to consider you for future roles, then delete it.

Who can see it

Your data is seen by DataFortify's hiring team only. We use a small number of trusted processors to operate the service — currently Cloudflare (hosting, bot protection) and Resend (email delivery). We never sell your data or use it for advertising.

Where it's processed

Data is processed on EU/EEA infrastructure where possible. Where a processor operates outside the EEA, appropriate safeguards (such as Standard Contractual Clauses) apply.

Your rights

You can ask us to access, correct, or delete your data, to restrict or object to processing, or to receive a copy in a portable format. To exercise any of these, email privacy@datafortify.cloud. You also have the right to complain to your local data protection authority.

Automated decisions

We do not make hiring decisions by automated means — a human reviews every application.