Outplacement pack: your privacy and our terms

1. The short version

• Only you get your documents. Your employer sees only whether your code has been used.
• We use your CV only to make your pack. We never use it to train AI models, and we never sell it.
• We delete your CV, your email address and your documents 30 days after we send you your pack.
• You must be 18 or over.
• You must be in the United States, Australia and New Zealand when you use it.

2. Who we are

We are Pavel Valynets PR Beograd, trading as Resume Banger (Resume Banger Hiring), a business registered in Serbia, with our seat at Jurija Gagarina 231, 11073 Beograd. Contact: [email protected]. Our full details are on the company details page. For your CV and your pack we are the controller: we decide how they are used, under this notice. Your employer paid for the service but does not control your data.

We have not appointed a data protection officer, because the law does not require one for what we do, and, for the people this notice covers, we have no representative in the UK or the EU.

3. Using the service

• The service is free to you: your employer has paid for it.
• You must be 18 or over, and you may upload only your own CV or LinkedIn profile export.
• You must be located in the United States, Australia and New Zealand when you upload it. Choose the country you are in. We cannot take CVs from people in the United Kingdom and Ireland yet.
• You get a rewritten CV (Word and PDF), a LinkedIn headline and About section, and a one-page 30-day search plan, by email, within 48 hours of opting in.
• We write only from your own CV: nothing is added to it that is not in your source. Read your documents before you use them, and change anything you want to.
• We cannot promise that the pack gets you an interview or a job.
• We do the work with reasonable care and skill. Nothing in these terms takes away your rights as a consumer.
• If something goes wrong, write to [email protected]. We acknowledge every complaint within 30 days and answer it as fast as we can.

4. What we collect

• the code your employer gave you;
• your email address, to send you your pack;
• the CV or LinkedIn PDF you upload, with everything in it, and its file name;
• the documents we make for you;
• your answer, if you click one of the "was this useful" links in our email.

5. Why, and our legal basis

We use your data to make your pack and send it to you. The legal basis is the contract between you and us for the service (Article 6(1)(b) of the UK GDPR and the EU GDPR, and Article 12(1)(2) of Serbia's Law on Personal Data Protection). If you are in Australia or New Zealand, we handle your data to the standard of the Australian Privacy Principles and the New Zealand Information Privacy Principles, and in the United States we honour requests to see or delete your data whatever your state's law says. We use your answer to "was this useful" to improve the service, based on our legitimate interest in knowing whether the packs help (Article 6(1)(f)).

Please leave out of your CV anything about your health, religion or beliefs, ethnic origin, trade union membership, sex life or sexual orientation, political opinions or criminal record. If your CV contains such details anyway, we use them for nothing but your pack, and delete them with everything else.

6. What your employer sees

Your employer's page shows only whether your code has been used. Your employer never sees your CV, your documents or your email address, and we never tell your employer anything else about you.

Our terms with your employer promise the same, in these words: "HR never sees an employee's documents. Nothing is added to a CV that is not in the employee's own source."

7. How your pack is made

Your documents are written with the help of an AI model, Google's Gemini, on Google's Paid Services: Google does not use your CV to improve its products, and keeps it for a limited period only to detect abuse. We check every employer, job title, date and qualification in your documents against your own CV before anything is sent. If a check fails, your pack is held for a person to review, and nothing goes out until it is right.

We make no decision about you by automated means that has a legal or similarly significant effect on you.

8. Who else sees your data

• Google (United States): the Gemini model that reads your CV and writes your documents.
• Cloudflare (United States): the network in front of our site, its measurement of page loads (Cloudflare Web Analytics, without cookies), and the storage for your files.
• Hetzner (Finland): our server and database.
• Zoho (Zoho Mail, EU data centre): sends you the email with your documents.

They act only on our instructions. Nobody else sees your data, and we never sell it.

9. Where your data goes

We are in Serbia. Our server is in Finland and our mailbox in Zoho's EU data centre. Cloudflare and Google are in the United States and are certified under the EU-US Data Privacy Framework and its UK Extension, and Google may process data briefly in any country where it operates. Serbian law allows transfers to EU countries and the UK, and for Cloudflare and Google we rely on the EU's recognition of the Data Privacy Framework. Your files are stored with Cloudflare in a place it aims to keep in Eastern Europe, without guaranteeing the EU; we plan to move them to Cloudflare's storage that stays in the EU.

10. How long we keep it

We delete your CV, your email address and your documents 30 days after we send you your pack. Our terms with your employer promise the same, in these words: "Documents go only to them and are deleted after 30 days."

If we cannot make your pack, we tell you and delete what you uploaded within 30 days.

Any database backup rolls over within 7 days, so a deleted record can stay in a backup for up to 7 more days. Google keeps its abuse-monitoring logs for a limited period under its terms.

11. Your rights

You can ask for a copy of your data, to correct it, to delete it at once, to restrict our use of it, or to receive it in a portable form. Write to [email protected]. We answer within one month.

You can complain to a data protection regulator: in the UK, the Information Commission (ico.org.uk); in the EU, the authority in your country; in Serbia, the Commissioner for Information of Public Importance and Personal Data Protection (poverenik.rs). We would like the chance to put things right first: we acknowledge every complaint within 30 days and answer it as fast as we can.

If you are in Australia, you can also complain to the Office of the Australian Information Commissioner (oaic.gov.au). If you are in New Zealand, you can complain to the Office of the Privacy Commissioner (privacy.org.nz); our privacy officer for New Zealand is reachable at the address above. If you are in the United States, you can write to us and, if you are not satisfied, to your state attorney general.

12. Changes to this page

We update this page when what we do changes, and change the date at the top. A change never applies to a pack you have already asked for without your agreement.