4 ms·

You need a privacy policy!

by rafzzz 3y ago

tagyro 3y ago
I'll second this. I would like to give this a try (been job hunting for the past 6 months), but I'm also a bit paranoid in sharing a lot of data, especially with a service that has no privacy policy.
- SCUSKU 3y ago
  Very fair point! Not to put the onus on you but do you happen to have any pointers on where I can get started? As it stands, I am using google analytics, and also storing the resume text (though not the document), and the embedding of the text. I hope at the very least that provides some transparency.
  - tagyro 3y ago
    Obligatory disclaimer IANAL (I am not a lawyer) Using Google Analytics might have some GDPR implications in Europe. A more GDPR-friendly alternative might be Plausible Analytics. Also, given the amount of information contained in a CV, even without a name, address, contact info etc, it could make the process of identifying the actual person fairly easy, thus it might have some GDPR implications. You could have a look at some Privacy Policies from recruiting agencies [0][1], though those are (in my opinion) fairly "abusive". my 2 cents: given this is a side project, I would not store any data at all [0]: https://www.greenhouse.com/de/privacy-policy https://www.greenhouse.com/de/privacy-policy [1]: https://join.com/privacy-policy https://join.com/privacy-policy
  - rafzzz 3y ago
    https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/individual-rights/the-right-to-be-informed/ https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-re... The ICO has some good guidance. They’re your regulator in the U.K.
  - openplatypus 3y ago
    Get privacy policy from iubenda. Easy and cheap. Use Wide Angle Analytics instead of Plausible or Google Analytics. Much better choice if you ever leak personal data to your analytics platform and very few solutions support PD. Wide Angle does. Given the personal data you are processing, some might even become sensitive (disability status), you need DPO ( Data Protection Officer). There are DPO as a service out there.

You need a privacy policy!

by rafzzz 3y ago

You need a privacy policy!

I'll second this. I would like to give this a try (been job hunting for the past 6 months), but I'm also a bit paranoid in sharing a lot of data, especially with a service that has no privacy policy.

SCUSKU 3y ago
Very fair point! Not to put the onus on you but do you happen to have any pointers on where I can get started? As it stands, I am using google analytics, and also storing the resume text (though not the document), and the embedding of the text. I hope at the very least that provides some transparency.
- tagyro 3y ago
  Obligatory disclaimer IANAL (I am not a lawyer) Using Google Analytics might have some GDPR implications in Europe. A more GDPR-friendly alternative might be Plausible Analytics. Also, given the amount of information contained in a CV, even without a name, address, contact info etc, it could make the process of identifying the actual person fairly easy, thus it might have some GDPR implications. You could have a look at some Privacy Policies from recruiting agencies [0][1], though those are (in my opinion) fairly "abusive". my 2 cents: given this is a side project, I would not store any data at all [0]: https://www.greenhouse.com/de/privacy-policy https://www.greenhouse.com/de/privacy-policy [1]: https://join.com/privacy-policy https://join.com/privacy-policy
- rafzzz 3y ago
  https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/individual-rights/the-right-to-be-informed/ https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-re... The ICO has some good guidance. They’re your regulator in the U.K.
- openplatypus 3y ago
  Get privacy policy from iubenda. Easy and cheap. Use Wide Angle Analytics instead of Plausible or Google Analytics. Much better choice if you ever leak personal data to your analytics platform and very few solutions support PD. Wide Angle does. Given the personal data you are processing, some might even become sensitive (disability status), you need DPO ( Data Protection Officer). There are DPO as a service out there.