Eht Consulting OÜ
Registry code: 16878396
J. Sütiste tee 41-196, Mustamäe linnaosa, 13414 Tallinn, Estonia
privacy@yourcareer.pro
yourcareer.pro


============================================================
PRIVACY POLICY
============================================================
This Privacy Policy explains how Eht Consulting OÜ collects, uses, stores, and protects your personal data when you use the yourcareer.pro platform. We are committed to full compliance with the EU General Data Protection Regulation (GDPR).

1. Data Controller
------------------
Company:Eht Consulting OÜ
Registry code:16878396
Legal form:Private limited company (OÜ)
Registered address:J. Sütiste tee 41-196, Mustamäe linnaosa, 13414 Tallinn, Harju maakond, Estonia
Privacy contact:privacy@yourcareer.pro

2. What Data We Collect
-----------------------
We collect only the data that is necessary to provide our service:
  - Email address- provided by you when registering or taking the test
  - Personality test results- your answers to the psychometric questionnaire and the resulting profile based on the five-factor personality model
  - Technical data- IP address, browser type, device type, and usage logs collected automatically for security and platform improvement purposes
  - Payment data- processed exclusively by Stripe; we do not store card details on our servers

3. Legal Basis for Processing
-----------------------------
We process your data on the following legal grounds:
  - Contract performance(Art. 6(1)(b) GDPR) - to provide the service you signed up for
  - Legitimate interests(Art. 6(1)(f) GDPR) - to improve platform security and quality
  - Consent(Art. 6(1)(a) GDPR) - for marketing communications, if you have opted in
  - Legal obligation(Art. 6(1)(c) GDPR) - to comply with applicable laws
Personality test results constitute special category data under Art. 9 GDPR. We process them on the basis of your explicit consent, given when you choose to take the test.

4. How We Use Your Data
-----------------------
  - To create and maintain your account
  - To generate and display your personality profile and career analytics
  - To process payments through Stripe
  - To send transactional emails (account confirmation, results, invoices)
  - To send marketing communications, if you have consented
  - To improve and secure the platform

5. Data Sharing and Third Parties
---------------------------------
We do not sell your personal data. We share data only with:
  - Stripe, Inc.- payment processing. Stripe acts as an independent data controller for payment data. SeeStripe's Privacy Policy.
  - Hosting and infrastructure providers- operating within the EU/EEA under data processing agreements
  - Authorities- only when required by law

6. Data Retention
-----------------
  - Account and test data: retained for the duration of your account, plus 3 years after account deletion for legal purposes
  - Payment records: 7 years, as required by Estonian accounting law
  - Marketing consent records: until consent is withdrawn

7. Your Rights Under GDPR
-------------------------
You have the right to:
  - Accessyour personal data (Art. 15)
  - Rectifyinaccurate data (Art. 16)
  - Eraseyour data ("right to be forgotten") (Art. 17)
  - Restrictprocessing (Art. 18)
  - Data portability- receive your data in a structured, machine-readable format (Art. 20)
  - Objectto processing based on legitimate interests (Art. 21)
  - Withdraw consentat any time, without affecting prior processing
To exercise any of these rights, contact us atprivacy@yourcareer.pro. We will respond within 30 days.
You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon):www.aki.ee.

8. Data Security
----------------
We implement appropriate technical and organisational measures to protect your data, including encryption in transit (TLS), access controls, and regular security reviews. No system is completely secure; in the event of a data breach affecting your rights, we will notify you and the supervisory authority as required by GDPR.

9. International Transfers
--------------------------
Your data is stored and processed within the European Economic Area (EEA). If any transfer outside the EEA becomes necessary, it will be carried out under appropriate safeguards (Standard Contractual Clauses or adequacy decisions).

10. Children
------------
Our service is intended for users aged 16 and above. We do not knowingly collect data from children under 16. If you believe a child has provided us with their data, please contactprivacy@yourcareer.pro.

11. Changes to This Policy
--------------------------
We may update this policy from time to time. We will notify you of material changes by email or via a prominent notice on the platform. The current version is always available at yourcareer.pro/privacy.