Privacy Notice

We are committed to protecting and respecting your privacy and are providing this notice because we think it is important that you understand how we look after your personal information and how we make sure that we meet our legal obligations to you under the UK data protection laws. We reserve the right to change this notice to reflect changed circumstances or where necessary to address new legal or regulatory requirements.

Who are we?

WinningCV is a trading name of Applygateway Ltd, a company incorporated in England and Wales with Company Number 10988286 and registered office address 6 Palk Street, Torquay, TQ2 5EL.

Where we collect your personal data we are a controller of those data and are registered as a data controller with the Information Commissioner's Office under registration number ZA530038

If you would like more information about us or the ways in which we handle your personal data, then please write to us at the address provided above or alternatively by using the contact details on our website which can be found here

How do we collect information about you?

We may collect different categories of personal data depending on the circumstances. For example, we may collect your personal data in the following situations:

• When you provide data to us by email, telephone or using the “Contact Us” form on our website
• When you subscribe for a service or register as a user
• When you participate in a survey, post ratings or reviews
• When you post a question or an answer on a forum that we administer
• When you upload content, including CVs and/or cover letters
• When you consent to the use of cookies

In some circumstances we may obtain your information from third parties such as LinkedIn and CV Library or other similar platforms, from other companies within our group if you use websites they operate or services they provide, or from our business partners where you have specifically agreed for them to share your data with us.

We may also collect your personal data through the use of cookies or similar technologies. For more information about how we use cookies please refer to our Cookie Notice which can be accessed at https://winningcv.com/Policies/CookiePolicy

What kinds of personal data do we collect?

We may collect and retain the following types of personal data:

• Name, address and other contact details such as email address and telephone number
• Username and password
• Date of birth
• Gender
• Occupation
• Education and employment history
• Employment references
• Personal interests and hobbies
• Relationship status
• Profile imagery
• Government issued identity documents and/or numbers
• IP address and other identifiers captured by cookies or similar technologies
• Information and/or documents related to your legal right to work in the UK
• Other information included within your general profile, resume or cover letter
• Where you have requested chargeable services or are an existing customer of chargeable services, payment information including credit/debit card details and account details

In addition, where you have consented to the collection of information through the use cookies, then we may also collect:

• Technical information such as the type of device you are using, your IP address (which is the Internet protocol address used to connect your computer to the Internet), the type and version of the web browser you use, browser plug-in types and versions, the operating system and platform you use and your time zone setting;
• Information about how you found our website, the pages you looked at on our website and the website you visited when leaving our website (this is the full Uniform Resource Locators (URL) clickstream to, through and from the Website) including the date and time of your visit;
• Information about your visit, including opportunities, products or services that you viewed or searched for; page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page and any phone number used to call our customer service number; and
• Your login information

Sometimes we may anonymise data for further processing. The process of anonymising ensures that you are no longer identifiable from those data meaning that it is no longer personal data for the purposes of applicable data protection legislation.

Why do we process your personal data?

We process your personal data for different purposes depending on the nature of our relationship with you and the specific circumstances. For example, we may process your personal data for the following reasons:

• Where you have contacted us in relation to our services, whether in relation to an existing account or otherwise, to enable us to respond to your enquiry.
• Where you are an existing customer, to enable us to provide our services to you including but not limited to creating an account and employment profile, maintaining bulletin boards (including posts and responses) and providing your information to employers who may have job opportunities appropriate to your candidate profile.
• Where you act for a prospective employer, to enable candidates to consider available employment opportunities and to communicate with you with respect to such opportunities.
• Where you have consented for us to send you direct marketing communications by electronic means (such as surveys, alerts, newsletters or other promotional or marketing communications), to generate mailing lists, issue communications to you and to process any responses.
• Where we are required to do so in order to comply with a legal or regulatory obligation.

Where we have collected information about your visit to our website, we process your data to:

• Ensure that the content is presented in the most effective manner for you and your device
• Allow you to participate in interactive features of our service, when you choose to do so
• Measure or understand the effectiveness of adverts we deliver to you and other users and to make sure that the advertising we deliver to you is relevant to you
• Make suggestions and recommendations to you and other users of the Website about goods or services that may interest you or them
• Administer our website, including troubleshooting, data analysis, testing, research, statistical and survey purposes and
• Help us keep our website safe and secure

Where we receive information about you from our business partners, we will use that information to provide you with the information, products and services that you have told our business partners you are interested in receiving from us, such as emails regarding job opportunities and news available through our website.

On what basis do we process your personal data?

We will typically process your personal data based on our legitimate interests or those of a third party in providing and perfecting the services we offer, and in supporting the effective operation and administration of our business. We will only rely on this basis where we are confident that our interests are not outweighed by the interests of your fundamental rights and freedoms, meaning that your rights are always considered and where appropriate will be prioritised over our own.

In some circumstances we may process your personal data where necessary to perform a contract we have in place with you, or where you have requested us to do so prior to entering into a contract with us. There may also be instances where we have to process your data in order to comply with a legal or regulatory obligation.

Sometimes we may also process your data on the basis of your consent. We will only rely on your consent where we are confident that it is unambiguous, informed, freely given and specific to the processing activities that are to be undertaken. Where you have provided your consent you can withdraw it at any time by contacting us using one of the methods described above. However, where you do withdraw consent this would not affect the lawfulness of processing that occurred beforehand but it could prevent us from being able to perform action(s) that you have requested.

What happens if I don’t provide you with my information?

You don't have to provide us with your information. However, if you choose not to provide us with data that we need perform a certain action then we will not be able to perform that action. For example, this could prevent us from responding to your enquiry or prevent you from participating in our services in the manner ordinarily envisaged.

Who do we share your information with?

We will share your information with the other members of our group of companies, our partner agencies and prospective employers who will also act as controllers of your data, including specifically:

• Adswipe Ltd, 6 Palk Street, Torquay, TQ2 5EL

Outside of our group of companies and partner network we will share your information with carefully selected third parties used to supply or perform services which are necessary to our operations. Examples of this include providers of software that we incorporate in our IT infrastructure for business management purposes and service providers engaged in hosting our databases, as well as specialist service providers that are engaged in relation to the processing of payments. However, we will only share your information with such third parties to the extent necessary for them to provide us with the services we need.

We may also share your information with third parties where:

• We are obtaining professional advice or insurance coverage and disclosure of your information to our advisor(s) or insurer is relevant to that objective.
• You have agreed for marketing communications to be provided by named third party partners in which case we will share your information with those specific third parties.
• We are required to do so in order to comply with our legal obligations or the requirements of a regulatory authority.
• We acquire or dispose of any business or assets in which case we may share your information with the prospective buyer or seller of such business or assets.
• We or substantially all of our assets are acquired by a third party, in which case the information we hold about you will be one of the assets acquired by the third party buyer.
• We believe, in good faith, that it is necessary to protect our rights, property, safety or reputation or the rights, property, safety or reputation of any of our customers or partners.

Will my information be transferred to other countries?

The information we collect about you may be transferred to and stored outside the European Economic Area (EEA), in particular the United States of America. It may also be processed by staff operating outside the EEA who work for us, another of our group companies or for one of our suppliers.

Whenever we transfer your data, store it or otherwise allow it to be processed outside of the EEA we only do so in a manner compliant with the requirements of applicable data protection laws, including by ensuring that the recipient has the benefit of an adequacy decision of the European Commission (EC) or by otherwise ensuring that the transfer is subject to adequate safeguards such as the incorporation of EC approved Standard Contractual Clauses.

For more information with respect to how appropriate protections are afforded to international data transfers please contact us using one of the methods described above.

How do we keep your information secure?

All information which you provide to us is stored on our secure servers. We have implemented appropriate technical and organisational measures to guard against the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to personal data, including by ensuring that employees and third parties only have access to your data where necessary to achieve the purpose(s) of processing.

However, unfortunately we do not have absolute control over all aspects of security. In particular, where we have given you (or where you have chosen) a password which enables you to access certain parts of our website, you are responsible for keeping this password confidential and we therefore ask you not to share a password with anyone.

In addition, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our website and any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

Our site may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

How long do we keep your information for?

We will only retain your data for as long as necessary to fulfil the purpose(s) for which we collected it although may retain your data for a longer period where we have a legal or regulatory obligation to do so. In determining the appropriate retention period we shall have regard to the amount, nature and sensitivity of the data in question, in addition to the purpose(s) of processing and the potential risks of continued storage.

Do you conduct automated decision making?

We will not conduct any automated decision making in relation to the data that are provided to us.

What rights do I have in relation to my information?

1. Right of access: subject to certain exceptions, you have the right of access to your personal data that we hold.

2. Right to rectify: if you discover that the information we hold about you is inaccurate or incomplete, you have the right to have this information rectified (i.e. corrected).

3. Right to be forgotten: you may ask us to delete information we hold about you in certain circumstances. This right is not absolute and in some circumstances it may not be possible for us to delete the information we hold about you

4. Right to restrict processing: in some cases you may have the right to have the processing of your personal information restricted.

5. Right to object to processing: you may object to the processing of your personal information when it is based upon our legitimate interests or where your data are processed for the purposes of direct marketing or statistical analysis.

6. Right to data portability: you have the right to receive, move, copy or transfer your personal information to another controller when we are processing your personal information based on consent or on a contract and the processing is carried out by automated means.

What if I have a complaint?

Should you have any complaints in relation to our handling of your information then we would welcome the opportunity to address that with you and ask that you contact us using one of the methods outlined above.

You can also contact the Information Commissioner's Office (ICO) in order to register a complaint, by writing to them at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF or by contacting them by telephone on +44 (0)303 123 1113. Further information regarding the ICO can be obtained through its website which can be accessed at https://ico.org.uk/