The Terms Desk
Privacy & your CV
You are trusting us with your CV. Here, in plain English, is exactly what we hold, who can read it, how it is guarded, and how to take it back.
Who we are
The Donegal Job Directory (“we”, “the Directory”) is a job board operated in County Donegal, Ireland. We publish vacancies across the county and let people apply to them. For the information described here, we are the data controller. Write to us at privacy@donegaljobs.com about anything on this page, including any privacy question or a request to delete your data.
What we hold, and why
We keep only what the service needs to work. Nothing here is sold, and nothing is shared for advertising.
| What | Why we hold it | Lawful basis |
|---|---|---|
| Your name and email address | To sign you in, tell your applications and vacancies apart, and reach you about them. | Contract — necessary to provide the service you asked for. |
| Your password | If you sign in with email and password, we store it only as a salted hash — never the password itself — so we can check it when you sign in. | Contract, and our legitimate interest in keeping accounts secure. |
| Your Google profile picture | Shown to you in the corner of the page so you know you are signed in. We link to it; we do not copy it. | Contract — necessary to provide the service you asked for. |
| Your CV (a PDF or Word document you upload) | So you can apply to a vacancy in a single tap. Shown to an employer only when you apply to them. | Consent — your explicit choice to upload and to apply. |
| Your applications and saved jobs | To show you what you have applied to, to let the employer read your application, and to keep your shortlist. | Contract — necessary to provide the service you asked for. |
| Employer and company details | If you post as an employer, we hold your company name, description, logo, website and the vacancies you place, so we can display your listings and route applications to you. | Contract, and our legitimate interest in running a job directory. |
| Technical and log data | Your IP address, browser type and basic request logs, gathered automatically by our host (Cloudflare) to serve pages, keep the site secure and diagnose faults. | Legitimate interest in a secure, working service. |
| A sign-in session | A single cookie that keeps you signed in between pages. No advertising or tracking cookies. | Strictly necessary; no consent banner needed. |
How your CV is guarded
Your CV is the most sensitive thing you give us, so it gets the most care. This is how it is held:
- Private storage, not a public file. Your CV is kept in private object storage (Cloudflare R2). There is no public web address for it; a shareable link to your CV simply does not exist.
- Every request is checked on our side. A CV can only be reached through our own server, which first confirms you are signed in and that you are allowed to see that particular file. The file is streamed back through us — the storage is never opened to the browser directly.
- Encrypted in transit and at rest. Traffic to and from the site runs over HTTPS (TLS), and our storage provider encrypts files at rest. The same HTTPS protects the rest of your data — your account, applications and passwords — on its way to and from us.
- Only a real PDF or Word file, only up to 5 MB. We check an upload is genuinely one of these by reading the file itself, not just its name, which keeps disguised files out.
- One CV, in one place. You keep a single CV on file. Uploading a new one replaces the old, so old copies are not left lying about.
Who can read your CV
Exactly three parties, and no wider:
- You. You can open your own CV from your profile at any time.
- An employer you have applied to. An employer can open your CV only for a vacancy of their own that you have actually applied to. That two-part check — their vacancy, your application — is enforced on every single request. Browsing employers, and employers you have not applied to, can never see it.
- A site administrator. A small number of administrators can access records to run and support the service. They do not share your CV outside the Directory.
How long we keep it
We keep your CV for as long as you keep an account, so you can apply again without re-uploading. Delete your CV and the file is removed from storage and our record of it is cleared. Ask us to close your account and we delete your CV, applications and profile, except where we must briefly keep a record to meet a legal obligation.
Who else is involved
A short, named list of the services that make the Directory work. They act on our instructions, not their own:
- Google signs you in. When you choose “Sign in with Google” we receive your name, email address and profile picture, used solely to authenticate you. We never see your Google password, and we do not share your data back to Google.
- Cloudflare hosts the site, runs the application and stores our database and files (including CVs) on our behalf, on servers it secures.
- Brevo sends our emails — address confirmations, password resets and notification round-ups. It receives your email address and the message we ask it to send, and nothing more.
We do not sell your data, and we do not pass it to advertisers.
Your rights
Under the GDPR you may ask us to:
- See the personal data we hold about you.
- Correct anything that is wrong or out of date.
- Delete your data — the “right to be forgotten”. Closing your account removes your CV, applications, saved jobs and profile; an employer account also removes its company details and the vacancies it posted.
- Take a copy of your data to use elsewhere.
Most of this you can do yourself from your profile — view, replace or remove your CV, and see your applications and saved jobs. For anything else, write to privacy@donegaljobs.com and we will respond within one month. If you are not satisfied with how we handle it, you can complain to the Irish Data Protection Commission at dataprotection.ie.
Cookies
We use a single, strictly necessary cookie to keep you signed in as you move between pages. It carries no advertising and no cross-site tracking, and there is no third-party analytics cookie, so no consent banner is needed. You can clear or block cookies in your browser settings at any time; if you block this one, you simply won’t be able to stay signed in.
Changes to this notice
If we change how we handle your data, we will update this page and move the date at the top. Significant changes will be flagged to signed-in users.