Privacy Policy
Last updated: March 12, 2026
This policy explains what personal data we collect on the website careerchoicer.com (hereinafter the "Website"), how we process it, and what your rights are.
1. Data Controller
The data controller is the operator of the Website (hereinafter the "Controller").
Contact email: support@careerchoicer.com
2. What Data We Collect
2.1 Registration Data
- Email address — used as your login name. You may enter a fictitious address; we do not require verification.
- Password — stored only in hashed (encrypted) form.
2.2 Test Results
- Your answers to test questions and the scores calculated from them (e.g., personality dimensions, IQ score, personality type).
- Results are saved to your account so you can return to them at any time.
2.3 Payment Data
- PayPal — payment is processed directly by PayPal. Only the transaction ID and payment confirmation are stored on our server. We do not see or store card numbers or PayPal account details.
2.4 Automatically Collected Data
- IP address, browser type, operating system, date and time of visit (server logs).
- Cookies (see section 6).
3. Purposes and Legal Basis for Processing
| Purpose | Legal Basis (GDPR) |
|---|
| Account creation and management | Performance of a contract (Art. 6(1)(b)) |
| Test evaluation and results display | Performance of a contract (Art. 6(1)(b)) |
| Processing payment for premium content | Performance of a contract (Art. 6(1)(b)) |
| Sharing results with a company (B2B) | Explicit consent (Art. 6(1)(a)) |
| Sending service-related emails | Legitimate interest (Art. 6(1)(f)) |
| Website analytics (Google Analytics) | Legitimate interest (Art. 6(1)(f)) |
| Protection against fraud and abuse | Legitimate interest (Art. 6(1)(f)) |
4. Sharing Data with Third Parties
We do not sell or provide your personal data to third parties for marketing purposes. We share data only in the following cases:
- PayPal (PayPal Europe, Luxembourg) — processing card/PayPal payments.
- Google LLC (USA) — website analytics through Google Analytics.
- Company within a B2B package — if you registered through a company link and gave explicit consent, your test results (email and scores) are accessible to that company via their dashboard.
5. Business Packages (B2B) — Results Sharing
If you join company testing through a company link:
- Your explicit consent to share results with the company is required before registration.
- The company sees your email address and unlocked test results (scores in individual dimensions).
- The company also sees aggregated team statistics (team averages).
- Without your consent, the company has no access to your results.
6. Cookies
The Website uses the following cookies:
- Session cookie (PHPSESSID) — essential for login and test functionality. Expires when the browser is closed. Legal basis: essential cookie, consent not required.
- Google Analytics (_ga, _gid) — traffic measurement. Collects anonymized visit data (pages, time on site, traffic source). Data is processed by Google LLC.
You can disable cookies in your browser settings. Without the session cookie, you will not be able to take tests or log in.
7. Data Retention Period
- User account and test results — for the duration of the account. You can delete your account at any time in account settings (see section 8).
- Payment records — 10 years from the transaction (legal obligation under tax regulations).
- Server logs — maximum 90 days.
- Google Analytics data — according to Google Analytics settings (default 26 months).
8. Your Rights
As a data subject, you have the following rights under GDPR:
- Right of access — you may request a copy of your personal data.
- Right to rectification — you may request correction of inaccurate data.
- Right to erasure — you can delete your account and all associated data at any time in the Account Settings section. Alternatively, you can contact us by email. The exception is data we are legally required to retain (payment records).
- Right to restriction of processing — you may request temporary restriction of your data processing.
- Right to data portability — you may request export of your data in a machine-readable format.
- Right to withdraw consent — you may withdraw consent to share results within a B2B package at any time by emailing support@careerchoicer.com.
- Right to object — you may object to processing based on legitimate interest.
To exercise any right, contact us at: support@careerchoicer.com. We will process your request without undue delay, within 30 days at the latest.
9. Data Security
We take reasonable technical and organizational measures to protect your data, including:
- Encrypted data transfer (HTTPS/TLS).
- Passwords stored exclusively in hashed form.
- Database access restricted to authorized personnel.
10. Children
The Website is not intended for children under 16 years of age. We do not knowingly collect data from persons under 16. If we discover that we have obtained data from a child without parental consent, we will delete it.
11. Supervisory Authority
If you believe we are processing your data in violation of legal regulations, you have the right to file a complaint with the relevant data protection authority in your country of residence.
12. Changes to This Policy
The Controller reserves the right to update this policy at any time. The current version is always available on this page with the date of the last update.
13. Contact
For questions about personal data protection, contact us at: support@careerchoicer.com
