Privacy Policy

Last updated: February 2026

1. Data Controller

The data controller is Aurora — Research in Digital, operating the VeryEasy Platform. For any inquiries regarding the processing of your personal data, you may contact us at: privacy@veryeasy.io

2. Data We Collect

We collect the following categories of personal data depending on your use of the Platform:

Account data: email address, password (encrypted), first name, last name, phone number when provided during account setup.

Company data: company name, legal name, VAT number, address, website, description, and company logo uploaded by authorized representatives.

Application data: CVs, cover letters, portfolio documents, certifications, quiz responses, work experience details, language skills, and any other information submitted through job applications.

Technical data: IP address, browser type, device information, and usage logs collected automatically for security and service improvement.

3. Purpose of Processing

We process your personal data for the following purposes: providing and maintaining the Platform services, managing your account and authentication, facilitating the job application process between applicants and companies, sending service-related communications and notifications, ensuring security and preventing fraud, and complying with legal obligations.

4. Legal Basis (GDPR Art. 6)

We process your data based on: performance of the contract (providing Platform services), your consent (where explicitly given, e.g. for optional communications), our legitimate interests (security, service improvement), and compliance with legal obligations.

5. Data Sharing

Your application data (CV, documents, quiz answers) is shared with the specific companies you apply to. We do not sell your personal data to third parties. We may share data with: companies you apply to (application materials only), service providers who help us operate the Platform (hosting, email delivery), and authorities when required by law.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Application data is retained for the duration specified by the hiring company's data retention policy, typically no longer than 24 months after the application. You may request deletion of your data at any time.

7. Your Rights

Under GDPR, you have the right to: access your personal data and receive a copy, rectify inaccurate data, request erasure of your data ("right to be forgotten"), restrict processing of your data, data portability (receive your data in a structured format), object to processing based on legitimate interests, and withdraw consent at any time where processing is based on consent.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including: encryption of passwords using industry-standard hashing, secure HTTPS connections, access controls and authentication systems, and regular security reviews.

9. Cookies

The Platform uses essential session cookies required for authentication and proper functioning of the service. These cookies do not track you across other websites. We do not use advertising or tracking cookies.

10. International Transfers

Your data is primarily stored and processed within the European Economic Area (EEA). If any data transfer outside the EEA is necessary, we ensure appropriate safeguards are in place in accordance with GDPR requirements.

11. Children's Privacy

The Platform is not intended for use by individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.

13. Contact & Complaints

For questions, requests, or complaints about this Privacy Policy or the processing of your data, contact us at: privacy@veryeasy.io

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) or your local supervisory authority.