Privacy Policy

1. Purpose of the policy

This Privacy Policy informs users of https://savvy-career.com about the methods of collection, processing, storage, and protection of personal data implemented by Savvy Careers Lab.

This policy is established in accordance with Algerian Law No. 18-07 of 10 June 2018 on the protection of natural persons in the processing of personal data.

2. Data controller and Data Protection Officer

In compliance with Articles 4 and 33 of Law 18-07:

Data controller

EURL Savvy Careers Lab, Licensed Private Placement Agency (OPAP)
24, Boulevard Colonel Bougara, El Biar, Algiers 16000, Algeria
Email: contact@savvy-career.com

Data Protection Officer (DPO)

Dedicated email: dpo@savvy-career.com
To exercise data subject rights: exercer-mes-droits@savvy-career.com

3. Legislative framework

Processing operations are carried out in strict compliance with Algerian Law No. 18-07 of 10 June 2018. The competent supervisory authority is the National Authority for Personal Data Protection (ANPDP).

4. Categories of data collected

4.1 Data provided directly

• Identity and contact details (name, email, phone, address).
• Academic and professional background (CV, cover letter, diplomas).
• Employer company data (corporate name, business sector, address, contact).
• Information related to job offers and recruitment processes.
• Communications with the platform (messages, applications, exchanges).

4.2 Data collected automatically

Technical data generated simply by browsing the site, necessary for its operation and security:

• IP address, for security and fraud prevention.
• Connection logs, date and time of account access (security audit).
• Pages visited, to measure the proper functioning of the site.
• Browser information (type, version, language), to adapt display.
• Essential technical cookies (session, security), detailed in section 13.

5. Data concerning minors

The platform is intended for adult audiences. In accordance with Algerian labor legislation (Labor Code, Art. 15), no account may be created by a person under 16 years of age.

For candidates aged 16 to 18, registration requires the prior and explicit consent of the legal representative, in accordance with Article 8 of Law 18-07 and Article 15 of the Algerian Labor Code.

6. Purposes of processing

• Management of user accounts (candidates and employers).
• Matching of candidates with employers.
• Recruitment workflow management and job posting publication.
• Generation of regulatory documents related to OPAP activities.
• Compliance with legal obligations regarding private placement and data protection.
• Service-related communications (notifications, job alerts, support).
• Platform security and fraud prevention.
• Aggregated and anonymized statistics for service improvement.

7. Legal basis of processing

Each processing purpose relies on a specific legal basis under Law 18-07 (Art. 7):

• User account management, Performance of requested service.
• Candidate / employer matching, Consent of the data subject.
• OPAP regulatory bulletins, Legal obligation (private placement).
• Security, anti-fraud, logging, Legitimate interest of the controller.
• Job alerts, marketing, Explicit consent (opt-in).
• Retention for legal evidence, Legal obligation (Law 18-07, Art. 9).

8. Recipients and subprocessors

Personal data may be communicated to the following recipients, strictly within the limits of their needs:

8.1 Internal recipients

• Operational teams of Savvy Careers Lab (recruitment, support, compliance).
• Employer users of the platform (for applications to job offers they publish).

8.2 Technical subprocessors

• Hosting provider, technical availability of the site.
• Savvy consent manager (developed and hosted by Savvy Careers Lab), cookie consent management, savvy_consent cookie kept 13 months (no data transfer).
• OSM Foundation (United Kingdom), map tile display.

8.3 Authorities

Data may be transmitted to administrative, judicial, or supervisory authorities (particularly the ANPDP) when required by law or in response to a duly motivated legal request.

No personal data is transferred to third parties for commercial or advertising purposes without prior and explicit consent.

9. International data transfers

In compliance with Article 44 of Law 18-07, Savvy Careers Lab informs that certain technical data may be processed outside Algeria by the following providers:

• OSM Foundation (United Kingdom), for loading interactive map tiles. Only the IP address is transmitted to serve the images.

These transfers are governed by:

• Each provider's contractual terms and GDPR-compliance commitment.
• Technical security measures (TLS encryption, pseudonymization, minimal logging).
• No transfer of identifying data (name, email, CV, etc.) beyond strict operational scope.

10. Responsibility and accuracy of information

10.1 User responsibility

• All information provided must be accurate, complete, up-to-date, and verifiable.
• Any false, misleading, or incomplete information engages the sole responsibility of the user.
• The platform reserves the right to suspend or restrict access in case of noncompliance.

10.2 Employer responsibility

• Content, legitimacy, and accuracy of job offers published.
• The real and effective nature of recruitment needs.
• Any modification, suspension, closure, or update of job postings.
• Status changes of candidates within the recruitment workflow.

Savvy Careers Lab acts as an intermediary platform and does not validate the operational reality of recruitment decisions beyond administrative verification.

11. Regulatory bulletins (OPAP, publication & placement)

11.1 Job publication bulletin

The bulletin is issued within the framework of private placement and employment intermediation activities, based on employer-declared information validated after administrative verification. The employer certifies that the job offer corresponds to a real, current, and authorized need, and undertakes to inform the platform without delay of any modification, suspension, cancellation, or closure.

11.2 Placement bulletin

The bulletin is generated based on the employer's declaration through the platform, following a status change of a candidate to "hired". The employer certifies that this status reflects a real and effective recruitment decision, and remains solely responsible for the accuracy of declared information and any cancellation, withdrawal, non-integration, or modification affecting the recruitment.

11.3 Platform role and traceability

• Maintains a right of control, traceability, and audit of operations.
• May perform documentary corrections if necessary.
• Ensures the secure generation and archiving of regulatory documents.

12. Retention periods

In accordance with the storage limitation principle (Law 18-07, Art. 9):

• Active candidate account, until deletion by the user or inactivity exceeding 3 years.
• Application and recruitment data, 24 months after last activity.
• OPAP regulatory bulletins, 10 years (legal obligation placement).
• Cookie consent logs, 5 years (evidence, ANPDP audit).
• Technical logs (connection), 6 to 12 months (security, Art. 18 Law 18-07).

13. Cookies and similar technologies

The site uses cookies and similar technologies (session tokens, browser cache) to ensure the proper functioning of the platform, secure access, and remember preferences.

In accordance with Article 7 of Law 18-07, only strictly necessary cookies are placed without prior consent. Any other cookie is activated only after obtaining free, informed, specific, and unambiguous consent via the consent management banner.

For complete details on cookies used, their retention period, and preference management, please consult the Cookies Policy.

14. Data security

Savvy Careers Lab implements appropriate technical and organizational measures to ensure the confidentiality, integrity, availability, and traceability of personal data.

14.1 Technical measures

• Communication encryption (TLS 1.2+).
• Encryption of sensitive data at rest.
• Strong password hashing (bcrypt/Argon2).
• Form anti-bot protection developed and hosted by Savvy Careers Lab (no third-party service).
• Regular encrypted backups.
• Logging of access and critical operations.
• Regular security updates (CMS, dependencies).

14.2 Organizational measures

• Access to data restricted to authorized personnel.
• Password policy and strong authentication.
• Staff awareness and training.
• Contractual confidentiality commitments.
• Data breach management procedure.
• Notification to ANPDP in case of breach (Art. 30 Law 18-07).

15. Rights of data subjects (Law 18-07)

Law No. 18-07 grants data subjects several rights that may be exercised at any time, free of charge:

• Right to information (Art. 32), to know the identity of the data controller, purposes, recipients, and retention periods.
• Right of access (Art. 34), to obtain confirmation that personal data is being processed and receive a copy.
• Right to rectification (Art. 37), to correct inaccurate or incomplete data.
• Right to object (Art. 38), to object, on legitimate grounds, to the processing of personal data.
• Right to erasure, to request deletion of personal data when no longer necessary or in case of consent withdrawal.
• Right to restriction of processing, to restrict processing in certain situations.
• Right to withdraw consent, at any time, without justification.
• Right to data portability, to receive personal data in a structured and machine-readable format.
• Right to define post-mortem directives, on the fate of personal data after death.
• Right to lodge a complaint with the ANPDP (Art. 35).

17. Policy updates

This policy may be updated at any time to reflect legal, regulatory, or technical developments. The date of the last update appears at the top of this page.