Privacy Policy

1. Introduction

IDAVA Global is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, and what rights you have in relation to it.

This policy applies to all personal data collected through our website and job application portal, in compliance with the General Data Protection Regulation (GDPR) — Regulation (EU) 2016/679 — and applicable Romanian data protection law.

2. Data Controller

The data controller responsible for your personal data is:

3. What Data We Collect

3.1 Job Application Data

When you apply for a position through our portal, we collect:

• Full name
• Email address
• Phone number
• City and country of residence
• LinkedIn profile URL (optional)
• Cover letter (optional)
• CV / Resume file
• Assessment responses (recruitment questionnaire, psychological evaluation, IQ test, technical test)
• Application date and stage reached in the process

3.2 Email Verification Data

During the application process, we collect your email address to send a one-time PIN for identity verification.

3.3 Session Data

We use server-side sessions to maintain the state of your application throughout the process. No persistent tracking cookies are used for this purpose.

4. How We Use Your Data

We use the data we collect for the following purposes:

We do not use your data for marketing purposes, and we do not sell your data to third parties.

5. Data Retention

• Active candidates (in process): for the duration of the recruitment process
• Unsuccessful candidates: up to 12 months from the date of your last application
• CV and assessment data: retained as part of the candidate record in our CRM for the same period

You may request deletion of your data at any time (see Section 8).

6. Data Sharing

Your personal data is processed internally and stored in our secure CRM system. We do not share your data with third parties except:

• Email service providers used to deliver verification PINs — these providers act as data processors under appropriate data processing agreements
• Where required by law, such as in response to a valid legal request from competent authorities

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or alteration. These measures include encrypted data transmission (HTTPS), access controls, and session-based data handling.

8. Your Rights Under GDPR

As a data subject, you have the following rights:

• Right of access — You may request a copy of the personal data we hold about you
• Right to rectification — You may request correction of inaccurate data
• Right to erasure — You may request deletion of your personal data ("right to be forgotten")
• Right to restriction — You may request that we restrict the processing of your data
• Right to data portability — You may request your data in a structured, machine-readable format
• Right to object — You may object to processing based on legitimate interest
• Right to withdraw consent — Where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at: hi@idava.global

We will respond to your request within 30 days.

9. Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Romanian data protection authority:

10. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by a revised "Last updated" date at the top of this page. We encourage you to review this policy periodically.

11. Contact Us

For any questions or concerns regarding this Privacy Policy, please contact: