Privacy Policy
This Privacy Policy describes how praga.work (the “Platform”, the “Site”) processes personal data when the Platform is used.
The Policy applies to user accounts, profiles, CVs, vacancies, company and recruiter verification, inquiries and complaints, payment transactions, technical data, and other processes directly related to the operation of the Platform.
This Policy applies together with the Terms of Use and the Cookie Policy.
Role of the Platform
For its own functions, praga.work determines the purposes and means of processing personal data necessary for the operation of the Platform.
Personal data is processed only to the extent necessary to provide Site functions, ensure security, conduct verification, handle inquiries, account for paid functions, comply with applicable legal obligations, and for the other purposes described in this Policy.
The Platform is not a party to employment relationships between users and does not control interactions between users after they move to direct communication outside the Site.
Data That May Be Processed
Depending on the functions used, the Platform may process the following categories of data.
Account data:
user role, first name, last name, organization name, email address, authentication data, selected language, and other information necessary to create and use an account.
Profile and contact data:
photograph or logo, telephone number, email address, website, WhatsApp, Telegram, Viber, and other contact details provided by the user.
CV data:
desired position, country and city, description, work experience, education, skills, languages, information about work eligibility or status, salary expectations, preferred forms of employment, and other information voluntarily added by the user to the CV.
Vacancy data:
vacancy title and description, information about the employer or company, working conditions and location, salary, schedule, categories, requirements, and other information provided by the author of the vacancy.
Company verification data:
company registration details, country, registration number, information from official and public registers, including ARES and VIES, as well as documents and information provided by the user for verification.
Recruiter verification data:
identity document, photograph or selfie, data necessary to conduct verification, verification result, and account status.
Complaint and inquiry data:
email address, reason for the inquiry, description, related vacancy or account, information and evidence provided, and the result of the review.
Platform usage data:
saved vacancies, views, vacancy-related actions, use of Platform functions, status of paid functions, and other events necessary for the operation of the service.
Security and technical data:
IP address, date and time of access, device type, browser, technical login and security logs, session data, and technical data necessary for account protection features, including passkeys.
Payment transaction data:
amount, currency, transaction identifier, payment status, information about credit additions and deductions, and other data necessary to record the transaction.
The Platform does not store full bank card details where such data is entered and processed directly by a payment provider.
The Platform may also process publicly available business contact information of companies, employers, staffing agencies, and their representatives where permitted by applicable law.
The Platform does not receive the content of users’ telephone calls or communications in WhatsApp, Telegram, Viber, or other external services merely because a user follows a link to or uses such a service.
Public and Non-Public Data
Information that a user voluntarily provides for public display may be available to other users and visitors to the Site.
Such information may include vacancy details, information about a company or recruiter, contact information provided by the user, and other information intended by the relevant Platform function for public display.
CVs and profile data are displayed according to the purpose and settings of the relevant function.
Company documents, recruiter identity documents, photographs, or selfies provided exclusively for verification are not publicly displayed.
Only the verification result or corresponding status provided by the Platform interface may be publicly displayed.
Purposes and Legal Bases for Processing
Personal data may be processed for:
- creating and maintaining user accounts;
- providing Platform functions;
- creating, storing, and displaying CVs;
- publishing and managing vacancies;
- enabling direct interaction between users;
- verifying companies and recruiters;
- ensuring security and preventing fraud and abuse;
- handling complaints, inquiries, and disputes;
- recording payment transactions, crediting credits, and providing paid functions;
- sending service communications;
- protecting the rights and legitimate interests of the Platform and users;
- complying with legal requirements and lawful requests from competent authorities;
- technical operation, diagnostics, and improvement of the Platform;
- marketing, advertising, and analytics where and on legal grounds permitted by applicable law.
Depending on the specific purpose, processing may be carried out to provide a function requested by the user or perform a contractual relationship, comply with a legal obligation, pursue a legitimate interest, or on the basis of the user’s consent where such consent is required.
praga.work does not make decisions based solely on automated processing that produce legal or similarly significant effects for the user.
Email Communications and Business Offers
The Platform may use the user’s email address to send service communications directly related to the account and use of the Platform, including registration, confirmation of actions, access recovery, security, vacancies, and other technical or functional notifications.
Such messages are not marketing communications.
Where permitted by applicable law, the Platform may also use publicly available business contact information of companies, employers, staffing agencies, and other organizations to send offers related to praga.work.
A recipient of a marketing communication may opt out of receiving further such communications.
After receiving an opt-out request, the Platform stops the relevant marketing communication, except for messages necessary for account operation, security, performance of obligations, or compliance with applicable law.
Data Recipients and Third-Party Providers
The Platform does not sell users’ personal data.
Depending on the function used, a limited amount of data may be processed by or transferred to:
- hosting, CDN, security, and other technical infrastructure providers;
- email and communication service providers;
- payment providers;
- advertising and analytics partners;
- other technical service providers necessary for the operation of the Platform;
- competent public authorities where disclosure is required by applicable law or a lawful request.
Each third-party service may additionally process data according to its role, terms of use, and its own privacy policy.
Where data is processed outside the user’s country or the European Economic Area, the applicable international data transfer rules are applied where such obligations apply to the Platform.
Payment Transactions
The Platform uses third-party payment services Paddle and NOWPayments for payment transactions.
Paddle is used to process standard payments, including bank card payments and other payment methods available through the service.
NOWPayments is used to process cryptocurrency payments.
Paddle and NOWPayments process payment data in accordance with their own terms and privacy policies.
praga.work may receive information necessary to confirm and record a transaction, including the transaction identifier, amount, currency, payment status, and information necessary to credit the corresponding credits.
The Platform does not receive or store the user’s full bank card details where they are entered directly through the Paddle payment system.
Paddle Privacy Policy:
https://www.paddle.com/legal/privacy
NOWPayments Privacy Policy:
https://nowpayments.io/privacy
Payment, credit use, and refund rules are additionally governed by the praga.work Payment and Refund Policy.
Advertising and Advertising Partners
Advertising from third-party advertising networks, advertising partners, or advertisers may be displayed on certain pages of the Platform.
Depending on the method used to deliver the advertising, advertising partners may use their own technologies, including cookies, pixels, technical identifiers, and similar technologies, and may receive technical information related to the loading, display, or interaction with advertising materials in accordance with their own policies and applicable law.
Where an advertising material is a standard link or banner, the user moves to the external website through their own action. After the user leaves the Platform, processing of data on the external resource is governed by the rules of the relevant website operator.
Additional information about cookies and similar technologies is provided in the Cookie Policy.
Cookies and Similar Technologies
The Platform and third-party services used by it may use cookies and similar technical technologies.
Such technologies may be used for technical operation of the Site, authentication, saving user preferences, security, service analysis, and displaying advertising.
Where applicable law requires user choice or consent, the Platform provides an appropriate mechanism through a cookie notice or another available method.
More detailed information is provided in the separate Cookie Policy.
Data Retention and Deletion
The Platform retains personal data no longer than necessary for the purpose for which the relevant data is processed.
Account, profile, and CV data may be retained for the duration of the account.
After an account is deleted, the relevant data is removed from active systems, except for limited data whose continued temporary retention is necessary for security, prevention of abuse, dispute resolution, transaction records, or compliance with legal obligations.
Deleted data may also remain temporarily in backups until the next technical rotation.
Closed or deleted vacancies and related information may be temporarily retained where necessary for handling complaints, security, data recovery, or dispute resolution.
Company documents provided exclusively for verification are deleted after verification is completed and its result is recorded, unless continued retention of the originals is required due to a dispute, complaint, indication of fraud, or legal obligation.
A recruiter’s identity document and photograph or selfie provided for verification are deleted after verification is completed and its result is recorded.
After successful verification, the Platform may retain the verification result, date of verification, account status, and necessary service information about the verification without retaining the original document or selfie.
If signs of document forgery or fraud are detected during verification, or a complaint or dispute arises, the relevant materials may be temporarily retained until the matter is resolved or longer where required by applicable law.
Information obtained from official and public registers, including ARES and VIES, may be retained to the extent necessary for profile operation, confirmation of company status, and recording the result of verification.
Complaint and inquiry data is retained for as long as necessary to handle the relevant matter, possible further review, dispute resolution, and protection of the legitimate interests of the parties.
Payment and accounting records are retained for the period necessary to record transactions and comply with applicable legal obligations.
Technical logs and security data are retained for a period reasonably necessary for security, diagnostics, prevention of abuse, and investigation of technical incidents.
When the basis for further retention of the relevant data ends, the data is deleted or anonymized.
User Rights
Depending on applicable law, the user may have the right to:
- obtain information about the processing of their personal data and access such data;
- request correction of inaccurate or incomplete data;
- request deletion of data where there is no lawful basis for further processing;
- request restriction of processing;
- object to processing based on legitimate interests;
- receive their data in a portable format where the right to data portability applies;
- withdraw previously given consent without affecting the lawfulness of processing carried out before withdrawal;
- lodge a complaint with a competent data protection authority.
The user may independently modify some of their data through the relevant account functions.
The user may also initiate deletion of their account through available Site functions where such an option is provided for the relevant account type.
Deletion of an account does not necessarily require the immediate destruction of every related record where limited continued retention is necessary for security, prevention of abuse, transaction records, dispute resolution, or compliance with a legal obligation.
For the protection of the user, the Platform may request reasonable verification of identity before fulfilling a request relating to personal data.
Requests are handled without undue delay and within the periods required by applicable law.
Age Restrictions
The Platform is not intended for persons under 18 years of age and does not knowingly collect personal data from such persons through registration or use of Site functions.
If a parent, legal guardian, or other authorized person believes that a person under 18 has provided personal data to the Platform, this may be reported using the contact address specified in this Policy.
After the relevant circumstances are confirmed, the Platform takes reasonable measures to delete such data or restrict the relevant account to the extent permitted by applicable law.
Security
The Platform applies reasonable technical and organizational measures to protect data against unauthorized access, alteration, disclosure, loss, or destruction.
However, no method of transmitting or storing information over the internet provides absolute security.
The user is responsible for keeping their account access credentials secure and not disclosing them to third parties.
External Services
The Site may contain links or technical redirects to external websites, messaging services, payment services, and other third-party resources.
After a user moves to such a resource, data may be processed by the relevant third party in accordance with its own terms and privacy policy.
praga.work does not control data processing performed by a third-party service outside the functions of the Platform.
Changes to the Policy
The Platform may update this Policy in connection with changes to Site functionality, services used, methods of processing data, or applicable requirements.
The current version of the Policy is published on the Site.
If a change materially affects users’ rights or the nature of personal data processing, the Platform may additionally notify registered users by an available method where such notice is required by applicable law.
Contact
For questions about personal data processing and other matters related to this Policy, the Platform may be contacted by email: