Privacy policy & GDPR

• Controller — My First Job SRL (My#1Job)
• Address — Generaal Lemanstraat 36, 1600 Sint-Pieters-Leeuw, Belgium
• Company number — 0694.871.178
• VAT number — BE0694.871.178
• Privacy contact — info@my1job.be
• Website — my1job.be
• Data Protection Officer — No DPO is currently appointed. Any request can be sent to the privacy contact above.

No registration is required for the diagnostic. Depending on the information you provide and the functions you use, we process:

• Identity and contact details — first name, last name, email address and, if provided, LinkedIn profile
• Education and career plans — study information, experience, skills, professional goals and other questionnaire answers
• Results — CRI score, levels and recommendations for each of the four pillars
• Optional follow-up choice — whether you agree or decline to be contacted if an opportunity matches your profile
• Technical data — submission timestamp and technical logs that may be generated by our providers for service security and operation

We do not request special-category data within the meaning of Article 9 GDPR. Do not enter such data in free-text fields.

• Provide the requested diagnostic, calculate the CRI score, display or generate recommendations and the report, and email it when you choose that option
• Contact you about an opportunity only if you enabled the corresponding optional choice
• Administer, secure and troubleshoot the service
• Improve the diagnostic and produce aggregated or anonymised statistics

Each purpose relies on a defined legal basis:

• Requested diagnostic and report — steps taken at your request or performance of the requested service, Article 6(1)(b) GDPR
• Optional contact about an opportunity — your freely given, specific and withdrawable consent, Article 6(1)(a) GDPR
• Security, administration and legal claims — our legitimate interests in operating a reliable service and protecting our rights, Article 6(1)(f) GDPR
• Any applicable legal obligations — compliance with a legal obligation, Article 6(1)(c) GDPR

The result is generated automatically from your answers. The calculation normalises each pillar to 100 and then applies these rules:

• Professional direction: 30%; path coherence: 30%; professional value: 20%; presentation and visibility: 20%
• Exploratory level up to and including 33, structuring level up to and including 66, then structured above 66
• The overall level may be capped if the weakest pillar indicates a lower degree of readiness

This result is indicative and intended for guidance. It does not produce legal or similarly significant effects and does not replace professional advice.

Access is limited to authorised people at My#1Job and the technical providers needed to run the service. We do not sell the data or share it for advertising purposes.

• Application hosting — Vercel
• Database and backend functions — Convex
• Authentication — Clerk
• Transactional delivery of the report by email — Resend

Some providers are established or may process data outside the European Economic Area. In particular, Resend states that its metadata, logs and API records are stored in the United States even when email is routed from Ireland. Depending on the service and processing location, these transfers must be covered by an adequacy decision, the European Commission’s standard contractual clauses, or another GDPR safeguard. The policies linked above provide provider-specific information.

• Identity, contact details, answers and diagnostic results — retained until deletion is requested by email at info@my1job.be; after the request is verified, we delete the identity, answers and all associated results
• Authentication data — for the lifetime of the relevant account and sessions, according to Clerk settings
• Internal email delivery logs — 7 days in the email delivery component; delivery status and dates linked to the diagnostic are deleted with it when an erasure request is processed. Data processed by Resend follows its legal and contractual retention periods
• Provider technical logs — according to their configured periods and policies, and no longer than needed for service security and operation
• Anonymised statistics — may be retained without a time limit because they can no longer identify a person

We use HTTPS encryption, access controls and authenticated access environments, among other safeguards. No measure removes every risk. If a personal data breach occurs, we apply the notification duties under Articles 33 and 34 GDPR.

• Access — obtain information and a copy of your data
• Rectification — correct inaccurate or incomplete data
• Erasure — request deletion by email at info@my1job.be when the legal conditions are met
• Restriction — request the temporary suspension of certain processing
• Objection — object to processing based on legitimate interests
• Portability — receive data you provided in the cases set out in the GDPR
• Withdrawal of consent — withdraw consent for optional contact at any time, without retroactive effect

To exercise these rights or request information about transfer safeguards, write to info@my1job.be. We may verify your identity and normally respond within one month.

You may also lodge a complaint with the Belgian Data Protection Authority: dataprotectionauthority.be

The diagnostic is intended for people aged 18 or over. We do not knowingly collect data from minors. If you believe that a minor has submitted data, contact us so that we can delete it.

We may update this policy if the service, our providers or the legal framework changes. The date and version at the top identify the latest publication.