CVHOLD Privacy Policy

This Privacy Policy explains how SIA “iPBank” (registration No. 42103096573), operating the CVHOLD platform, processes personal data under the EU General Data Protection Regulation (GDPR), the Latvian Personal Data Processing Law and other applicable EU and Latvian rules.

It covers platform visitors, registered candidates and employers (and their authorised representatives), partners, and anyone who contacts CVHOLD or uses platform features — regardless of how the data was obtained (platform, email, support, cookies, security tools).

CVHOLD processes personal data under the principles of lawfulness, fairness, transparency, data minimisation, accuracy, storage limitation, integrity, confidentiality and accountability.

Key terms include Authentication, Match Score (rule-based professional fit indicator — not an AI hiring decision), Data subject, Employer, Candidate, Account, Profile, Platform, Controller, Processor, Cookies, Vacancy, Session and related GDPR definitions. Match Score does not itself accept or reject candidates.

The controller is SIA “iPBank”, reg. No. 42103096573, legal address Kviešu iela 30B, Liepāja, LV-3405, Latvia, brand CVHOLD.

Contact for privacy requests: policy@cvhold.com, phone +371 25253030.

CVHOLD is an independent controller for platform operation, registration, profiles/CVs, Match Score, messaging, security and support. Employers are independent controllers for their own recruitment use of candidate data after an application. Deleting a CVHOLD account does not automatically delete copies an employer lawfully downloaded outside the platform.

Complaints may be lodged with the Latvian Data State Inspectorate (Datu valsts inspekcija).

CVHOLD may process identity and contact data, account/authentication data, profile and CV content (experience, education, skills, certificates, languages), application and Match Score data, employer/company data, messages, notifications, payment metadata (card data is handled by payment providers), usage/analytics and security logs — as detailed in Annex 1 of the binding Latvian policy.

Data is obtained from the user, from use of the platform, and from processors acting on CVHOLD’s instructions.

Purposes include account and profile management, vacancy publishing and applications, Match Score calculation, messaging, notifications, billing, security, support, legal compliance and (where consented) marketing. Legal bases include contract performance, legal obligation, legitimate interests and consent where required (Annex 2).

Recipients may include employers (after you apply), candidates (as needed for the process), authentication, hosting, email, payment and other processors listed in Annex 4. Data is primarily processed in the EU/EEA; any transfer outside uses GDPR-compliant safeguards.

Cookies and similar technologies are described further in the Cookie Policy when published; essential cookies support session and security.

Retention periods are set per category in Annex 3. In summary for active systems:

Account, profile, contact and CV-related data: kept while the account/CV exists; after an erasure request, deleted or anonymised in active systems within 30 days (except where another legal basis applies).

Sessions and authentication means: deactivated immediately on account deletion; related data cleared within 30 days.

Applications and Match Score: until the vacancy selection process ends and generally 6 months after the vacancy closes (longer if needed for disputes).

Messages: generally 3 years after the last message or thread closure.

Payments/invoices: at least 5 years under accounting rules. Security logs: typically 12 months (longer for incidents). Backups: up to 90 days after deletion from active systems.

CVHOLD applies appropriate technical and organisational measures (access control, authentication, monitoring, backups, incident handling). Access is limited to authorised persons under confidentiality duties. Personal-data breaches are handled under GDPR notification rules.

You may request access, rectification, erasure (“right to be forgotten”), restriction, portability, objection (including to processing based on legitimate interests or direct marketing), and withdrawal of consent. You may complain to the Data State Inspectorate.

Requests are answered within one month (extendable for complex cases as allowed by law). Use policy@cvhold.com or in-product Settings export/delete where available.

Match Score is an automated informational indicator using predefined rules; hiring decisions are made by the employer. You can update your CV/profile so scores can be recalculated.

The platform is not directed at children under 16. Policy updates are published on the platform and take effect on the stated date. Controller contacts are listed in section 3.

Annex 1 — personal data categories; Annex 2 — purposes and legal bases; Annex 3 — retention periods; Annex 4 — recipients. Full tables are in the Latvian PDF download.