Privacy Policy and Personal Data Protection

1. General statement

We take your privacy very seriously and are committed to protecting it. We believe you should easily know what personal data we collect and use, and understand your rights in relation to that data.

This privacy policy explains our policies and practices regarding how we collect, use, and process personal data, as well as the security measures we implement.

We recommend that you read this Privacy Policy carefully because it contains important information about your personal data.

For any questions about this Privacy Policy, please contact us by email at hello@guidya.com with the subject line “Privacy Policy – information request”.

2. Who we are

Guidya is at the heart of an ecosystem dedicated to professional integration that involves three types of stakeholders:

• Members: students and graduates;
• Our partner higher education institutions;
• Our partner companies.

Guidya defines the purposes and means of processing related to use of the platform by Users. Guidya is the commercial brand of JOBGATE SARLAU, the legal entity responsible for processing your personal data. The terms “Guidya”, “we”, “our”, and “us” refer to JOBGATE SARLAU operating under the Guidya brand, unless otherwise stated in this Privacy Policy.

JOBGATE is a Moroccan LLC (SARL AU) with registered office at 13 BD MED V, 3rd floor, Lot AL Yousser, Berrechid, registered under RC – 17 705.

In the context of the Guidya Service we offer from https://www.guidya.com or its sub-domains, we are the “data controller” (within the meaning of applicable data protection law) for the personal data you provide when using this Service.

Companies that recruit are the controllers for data processed in the recruitment procedures they implement and the recruitment events they organize. They are therefore natural recipients of data from Guidya, including data relating to candidates applying to their vacancies.

3. Scope of this Privacy Policy

Our Privacy Policy applies to all Users of the Guidya Service.

This Privacy Policy applies to information we may collect from Members (students and graduates), Recruiters, and Institution Administrators. These Guidya Users are defined in the applicable Terms of Use, to which this Privacy Policy is annexed.

This Privacy Policy also applies to information we may collect from Users of the career guidance modules we offer.

4. Types of data collected

To provide you with the best possible service, we may ask you to provide personal information about yourself. We may also process data about you transmitted by our partner companies and institutions.

When we collect your personal data on Guidya, we will indicate which fields are mandatory (marked with an asterisk *) and which are optional.

We will then inform you of any consequences of not providing a response.

Personal information we may collect means information that identifies you personally, such as:

• Your identity: name, address, phone numbers, email addresses, age category, gender, etc.;
• Your professional life:
  • For student and graduate Members: higher education institution attended, CV, desired role, jobs applied to, your profile and search criteria, events you registered for, etc.
  • For Recruiters: data about the company you represent, your role, profiles sought, etc.
  • For Institution Administrators: the name of the Institution you represent, your role, etc.

We may also collect connection logs for our site (IP address, date and time of connection).

5. Purposes of processing

As data controller, we may collect and process your data for specific, legitimate purposes that support our overall mission of helping students and graduates with career orientation and professional development.

The personal information you choose to provide is processed in order to:

• As a student or graduate Member, facilitate your professional integration through our Service, including the ability to:
  • Apply to job or internship offers;
  • Register for recruitment or orientation events;
  • Be visible to recruiters according to the features available to you;
  • Receive customized email alerts about offers and events matching your criteria, as well as tips or information to support your professional integration. These alerts are based on information you provide and can be disabled at any time via your account or by contacting us at hello@guidya.com;
  • Use career guidance modules.
• As Institution Administrators, support students and graduates of your Institution in their professional integration efforts;
• As Recruiters, present your Company and publish offers, and possibly receive offers or products suited to you, from an Institution or from Guidya;
• In general, ensure the IT security of our site and your data, and produce usage statistics for the Service in order to develop new features;
• Finally, we may process your personal data in accordance with applicable legal obligations.

Processing of your data is based on your consent given at registration and acceptance of our Terms of Use, as well as on performance of our service under our contractual obligations.

6. Recipients of this information

Personal information you may provide can be accessed by our authorized staff and our processors, strictly for the purposes described in section 5 above.

To participate in the Guidya Service ecosystem and provide you with the best experience, you are informed that information about you may be shared with the various parties involved in the Guidya Service, namely:

• To Recruiters: personal data relating to Members who apply to their offers or events, or who have chosen to publish their profile and CV through a feature of the tool;
• To Members: concerning Recruiters on the one hand and Institution Administrators on the other, depending on what appears in the content each publishes;
• To the relevant Institution and its Administrators: personal data of Members, students, graduates, and Recruiters who connect through the platform.

Use of the Service by Recruiters and Administrators is within the scope of their professional activity; the intended transfers are necessary for the proper functioning of the service subscribed by their respective employers.

7. Retention period

Personal data is retained until the User closes their account or after two years of account inactivity. Data is then irreversibly anonymized.

Your personal information will not be kept longer than strictly necessary, i.e. for the entire period you use our services through your account until your account is closed.

User data will be kept for a maximum of two years after the last connection to the Service. A few weeks before that deadline, and at the deadline, we will contact you at the email address you provided to ask whether you wish to keep or delete your account.

After these periods and effective closure of your account, your data will be irreversibly anonymized. It will then be used exclusively for statistical purposes (analysis of feature usage, statistical analysis of applications in response to published offers, etc.).

Regarding data of deceased persons, if Guidya is informed, such data will be definitively anonymized, unless specific instructions have been communicated to Guidya.

8. Security and confidentiality

We have taken all appropriate organizational and technical measures, and all useful precautions, to preserve the security of the information described above against accidental loss, distortion, or alteration, and against unauthorized access, use, modification, or disclosure. We thus ensure at all times the integrity and availability of the data we process.

Technically, a set of strict and adequate technical processes and devices allows us in particular to:

• Ensure restricted access to data through access control and strict authentication;
• Prevent scenarios of data hacking;
• Implement effective encryption of such data, including during transmission through the use of SSL encryption;
• Guarantee the physical security of processed information.

All data is stored on servers located in Morocco (Rabat) and is not transferred outside the country.

9. How to exercise your rights

Under applicable data protection law, you have the right of access, rectification, erasure, portability, and restriction of processing. You have the right to object at any time, on grounds relating to your particular situation, to processing of your personal data. Where processing is based on your consent, you may withdraw it at any time. Finally, you have the right to define general or specific directives regarding the retention, erasure, and communication of your personal data after your death.

In the absence of a DPO, all requests relating to your rights may be sent to hello@guidya.com.

If we have reasonable doubts about your identity, we may ask you for proof of identity to ensure we are dealing with the data subject who made the request.

You must also comply with applicable personal data protection law; violations may be subject to criminal penalties. For example, if acting on behalf of a third party you wish to send us their personal data, you must handle that data in compliance with the law.

You must in particular refrain, with respect to personal data you access, from any collection, any improper use, and in general any act likely to infringe privacy or reputation.

10. Changes to this Privacy Policy

We inform you that this Privacy Policy may evolve. If changes are material, we will notify you through a prominent notice on the Service or by other means such as the email address provided, so you can review the changes before they take effect. If you object to any change, you may close your account.

You acknowledge that if you continue to use our Service after publication of changes to our Privacy Policy or after we send notice, the collection, use, and sharing of your personal data will be governed by the updated Privacy Policy from its effective date.

11. Use of cookies

We use cookies to improve your experience on the site and for usage statistics. You can manage your preferences in our Cookie Policy.

12. Joint controllership agreement between Guidya and a higher education institution

Where a joint controllership agreement has been concluded between Guidya and an Institution, they are joint controllers when they use the following Guidya platform features and process personal data on that occasion:

• Pre-registration of Members;
• Exclusive content (“private offers and events”);
• “CV library” module;
• Email / newsletter campaigns.

The main provisions of the joint controllership agreement may be provided by Guidya or the Partner Institution to data subjects upon request. For any information request to Guidya, you can contact us by email at hello@guidya.com with the subject line “Data Protection – information request”.

13. Information for professional prospects