Privacy and personal data

Controller and contact

The company identified above operates JobOrbit. For personal data matters contact info@lod.bg. Policy dated 11 October 2026.

Data we process

Accounts contain your name, email, password hash and account type. CVs contain the phone, city, education, experience, skills and languages you provide. Applications contain a CV copy, message, job, dates and status history. Company profiles contain contacts, website, description, jobs and approval status. Event records contain orders, amounts, payment status and admission codes. The site does not store bank card numbers.

Purposes and legal bases

Accounts, CVs, applications and tickets are processed to provide the requested service and perform the contract. Access controls, abuse prevention and the administrative log serve our legitimate interest in platform security. Financial records are kept to meet applicable legal obligations. Saving a device theme is optional and can be disabled. We do not make automated hiring decisions or perform advertising profiling.

Recipients

CVs are not public. Applying shares your CV copy and message with the specific employer, who is responsible for processing them for its recruitment. The controller and authorised administrators access data for operation and support. The hosting provider processes data on our behalf. SumUp handles payments under its own terms; we store identifiers and status, not card details. We do not sell personal data.

Retention and deletion

Your account and current CV remain while you use the service or until a justified deletion request. Application CV copies and cover letters are removed after 12 months; application history remains until account closure. Limited financial records remain for the applicable legal period. Privacy requests are kept as evidence of their handling and reviewed by the controller 12 months after completion. Backups are managed separately by the controller and hosting provider; deletions must be reapplied after restoration.

Your rights

My data lets you download your own data and request access, correction, erasure, restriction or object. Edit your CV in your account. You can also contact info@lod.bg without an active account. We normally respond within one month; any necessary extension will be explained. Erasure does not override an applicable legal retention duty. You may complain to the Bulgarian Commission for Personal Data Protection at cpdp.bg.

Security and external services

Passwords are hashed, CV access is checked against account and application ownership, and administrative actions are logged. Do not include national identity numbers, medical data or unnecessary sensitive information in your CV. External websites have their own policies. Before adding a provider, the controller must assess its location, contractual safeguards and any transfers outside the EEA.