Privacy Policy
Last updated: October 30, 2026
This policy explains what personal data we collect on the website careerchoicer.com (hereinafter the "Website"), how we process it, and what your rights are.
1. Data Controller
The data controller is the operator of the Website (hereinafter the "Controller").
Contact email: support@careerchoicer.com
2. What Data We Collect
2.1 Registration Data
- Email address - used as your login name. You may enter a fictitious address; we do not require verification.
- Password - stored only in hashed (encrypted) form.
2.2 Test Results
- Your answers to test questions and the scores calculated from them (e.g., personality dimensions, IQ score, personality type).
- Results are saved to your account so you can return to them at any time.
2.3 Payment Data
- Stripe - card payments are processed directly by Stripe. Only the transaction ID, amount and payment country (for VAT and invoicing) are stored on our server. We never see or store card numbers.
2.4 Automatically Collected Data
- IP address, browser type, operating system, date and time of visit (server logs).
- Cookies (see section 6).
2.5 Gifts
When you give a test as a gift, we process the recipient's name, your signature and the message you write in the order, so that we can show them on the gift card and on the gift page. We send nothing to the recipient and do not know the recipient's email address until they redeem the gift themselves. We show the giver only whether and when the gift was redeemed, never the test result. When the giver deletes their account, we delete the recipient's name, the signature and the message, and the gift stays valid. When the recipient deletes their account, the gift keeps only the record that it was redeemed. We keep payments and invoices as required by accounting regulations.
2.6 Comparisons with People Close to You
When you compare yourself with someone, we share the result of one test only with that one person, and only when the result is unlocked for both of you. The invited person gives consent by clicking a button that turns the comparison on (“Start the test”, “Connect” or the button of a gift with a comparison), and we store the time and the version of that consent. The person who sent the invitation sees only the state of the invitation (opened, test in progress, test finished, comparison unlocked) and gets emails about it; they never see the answers, nor the result until it is unlocked for both of you. Only the person who sent the invitation sees the nickname given to the invited person; anyone who opens the invitation sees the inviter's signature. Either of you can disconnect at any time, and the comparison then disappears for both of you. We delete the nickname as soon as an invitation is canceled or either of you disconnects, and the other records of the invitation and the signature when the account is deleted. We do not write to invited people because of an invitation, except for the email about the unlock when the inviter gives them the test as a gift.
3. Purposes and Legal Basis for Processing
| Purpose | Legal Basis (GDPR) |
|---|
| Account creation and management | Performance of a contract (Art. 6(1)(b)) |
| Test evaluation and results display | Performance of a contract (Art. 6(1)(b)) |
| Processing payment for premium content | Performance of a contract (Art. 6(1)(b)) |
| Tests at a company's invitation (For companies) | We process the data for the company as a processor; the legal basis is set by the company (section 5) |
| Company account, credit purchases and tax documents (For companies) | Performance of a contract (Art. 6(1)(b)); for tax documents, legal obligation (Art. 6(1)(c)) |
| Sending service-related emails | Legitimate interest (Art. 6(1)(f)) |
| Website analytics (Google Analytics) | Consent (Art. 6(1)(a)) |
| Protection against fraud and abuse | Legitimate interest (Art. 6(1)(f)) |
| The message you asked for in the interest form on the pages for companies | Consent (Art. 6(1)(a)) |
4. Sharing Data with Third Parties
We do not sell or provide your personal data to third parties for marketing purposes. We share data only in the following cases:
- Stripe Payments Europe, Ltd. (Ireland) - card payment processing.
- Google LLC (USA) - website analytics through Google Analytics.
- Váš Hosting s.r.o. (Czech Republic) - hosting and data storage.
- Fakturoid s.r.o. (Czech Republic) - issuing tax documents (email and payment country).
- The company that invited you to take tests - to the extent described in section 5.
5. For companies: tests at a company's invitation and company accounts
Companies, coaches and HR agencies can invite people to take tests on the Website (the For companies service). If a company invites you to take tests:
- The company that invited you is responsible for processing your data in the campaign, as the data controller. We process the data on the company's behalf as a processor under a data processing agreement (Art. 28 GDPR).
- Before your first test, you will see who will see your results and what they are used for, and you will confirm your participation. Without your confirmation, the company has no access to your results.
- The company sees the name or label it entered for you, your email address, your participation status and your test results in the campaign, and possibly notes that people at the company write about you. It may make selected results available to other people, for example to a team lead through a link of limited validity.
- In an anonymous team, the company sees your results only in the team summary, without names. Apart from that, it sees your name and participation status, and your “How to work with me” card only if you share it yourself.
- The company sets the period after which the campaign data is deleted. When it ends, we delete the data automatically. You can withdraw your consent at any time with the company or by emailing support@careerchoicer.com, and we will pass your request on to the company.
- If you create a company account, we are the controller of the data of the account's users (name, email address, role, language, password in hashed form) and of the data needed to buy credits and issue tax documents (company name, company ID, VAT number, address). We fill in company details from public registers (the Czech ARES, the Slovak Register právnických osôb, the Polish wykaz podatników VAT) and verify VAT numbers in the European Commission's VIES system.
6. Cookies
The Website uses the following cookies:
- Session cookie (PHPSESSID) - essential for login and test functionality. Expires when the browser is closed. Legal basis: essential cookie, consent not required.
- Game challenges (zo_chk) - stored only at the moment you create or accept a challenge in the games. It is used to recognise your challenges on your next visit. Valid for 2 years. Legal basis: functionality requested by the user, consent not required.
- First visit (zo_ft) - stores the address of the page through which you first arrived on the site, the traffic source and the date of the first visit. Used to evaluate which articles and pages bring visitors (internal statistics, not shared with third parties). Valid for 12 months. Legal basis: consent, the same as for analytics cookies; not stored if you refuse.
- Stripe (__stripe_mid, __stripe_sid) - stored only on the payment pages. Used by Stripe to prevent fraud in card payments. Legal basis: necessary for secure payment processing, consent not required.
- Cookie settings (zo_consent) - stores your choice regarding cookies (consent 12 months, refusal 6 months). Legal basis: essential cookie, consent not required.
- Google Analytics (_ga, _ga_*) - traffic measurement. Collects pseudonymised visit data (pages, time on site, traffic source). Data is processed by Google LLC. Stored only with your consent given in the cookie bar. You can change your consent at any time via the Cookie settings link in the website footer.
You can disable cookies in your browser settings. Without the session cookie, you will not be able to take tests or log in. You can give or withdraw your consent to analytics cookies at any time in the cookie bar or via the Cookie settings link in the website footer.
7. Data Retention Period
- User account and test results - for the duration of the account. You can delete your account at any time in account settings (see section 8).
- Payment records - 10 years from the transaction (legal obligation under tax regulations).
- Server logs - maximum 90 days.
- Google Analytics data - according to Google Analytics settings (at most 14 months).
- Company account - user data for as long as the account exists, tax documents for 10 years (legal obligation). Data of people in campaigns until the end of the period the company sets.
- Interest form on the pages for companies - we keep the email address, the type of interest and the note for at most 12 months from sending, then delete them automatically (earlier at your request). The hash of the IP address, which protects the form against abuse, is deleted after one hour.
8. Your Rights
As a data subject, you have the following rights under GDPR:
- Right of access - you may request a copy of your personal data.
- Right to rectification - you may request correction of inaccurate data.
- Right to erasure - you can delete your account and all associated data at any time in the Account Settings section. Alternatively, you can contact us by email. The exception is data we are legally required to retain (payment records).
- Right to restriction of processing - you may request temporary restriction of your data processing.
- Right to data portability - you may request export of your data in a machine-readable format.
- Right to withdraw consent - you may withdraw consent to share results with a company at any time with the company that invited you, or by emailing support@careerchoicer.com (we will pass the request on to the company).
- Right to object - you may object to processing based on legitimate interest.
To exercise any right, contact us at: support@careerchoicer.com. We will process your request without undue delay, within 30 days at the latest.
9. Data Security
We take reasonable technical and organizational measures to protect your data, including:
- Encrypted data transfer (HTTPS/TLS).
- Passwords stored exclusively in hashed form.
- Database access restricted to authorized personnel.
10. Children
The Website is not intended for children under 16 years of age. We do not knowingly collect data from persons under 16. If we discover that we have obtained data from a child without parental consent, we will delete it.
11. Supervisory Authority
If you believe we are processing your data in violation of legal regulations, you have the right to file a complaint with the relevant data protection authority in your country of residence.
12. Changes to This Policy
The Controller reserves the right to update this policy at any time. The current version is always available on this page with the date of the last update.
13. Contact
For questions about personal data protection, contact us at: support@careerchoicer.com
