'%20stroke-width='2'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_233_8031'%20x1='-40'%20y1='70.5'%20x2='312'%20y2='216.5'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='white'%20stop-opacity='0.17'/%3e%3cstop%20offset='1'%20stop-color='white'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e)
When you engage with our services, you entrust us with your personal data. We recognize the significance of this responsibility and strive to safeguard your information while empowering you to manage it.
This Privacy Policy explains how we collect, use, store, share, and protect personal data when you access or use HyreNet through https://www.guvi.in/mlp/hyrenet-homepage.
Role under GDPR
- Data Controller for data collected directly from users (learners, candidates, employers).
- Data Processor for personal data processed on behalf of clients (colleges, companies).
What Personal Data We Collect
| Category | Examples | Purpose |
|---|---|---|
| Identification Data | Full name, email address, mobile number, unique user ID | Account creation, communication |
| Profile Information | Gender (optional), photo, college/company details, profile URL | Profile visibility, certification |
| Technical Data | IP address, device ID, browser type, login logs | Security monitoring, analytics |
| Usage Data | Pages visited, time spent, click patterns | Product improvement |
| Assessment Data | Test scores, answers, AI-based feedback | Recruitment and analytics |
| Communication Data | Support tickets, emails | Customer support and audit |
We do not collect special-category data (racial, biometric, health, religious, etc.) unless required by law or explicit consent is obtained.
How We Use Your Data
| Purpose | Legal Basis |
|---|---|
| To create and manage your HyreNet account | Performance of a contract |
| To provide assessments, analytics, and certifications | Legitimate interest |
| To send service or product updates | Legitimate interest / Consent |
| To send marketing/promotional emails | Consent |
| To improve platform performance | Legitimate interest |
| To meet legal or regulatory obligations | Legal obligation |
How We Obtain Consent
- A clear consent checkbox is displayed during registration and for marketing subscriptions.
- Consent records (opt-in, opt-out version) are securely stored.
- You may withdraw consent anytime via account settings or by emailing [email protected]
Data Sharing and Processors
We may share personal data with:
- Authorized employees and contractors
- Service providers and subprocessors
- Legal and regulatory authorities when required
- Business partners (with appropriate safeguards)
We require all third parties to respect the security of personal data and to treat it in accordance with applicable laws and our security standards.
International Data Transfers
We transfer data to processors outside the EEA (India, Singapore, USA). Such transfers are safeguarded by EU Standard Contractual Clauses. Copies of these clauses can be requested at [email protected]
Data Retention and Deletion
- Personal data is retained only as long as needed for service delivery or legal requirements.
- Backups are kept for up to 2 years for business continuity.
- Users may request data erasure at any time via DSAR (email to [email protected]).
Data Subject Rights (DSARs)
Under GDPR, you have the right to:
- Access your data
- Rectify inaccuracies
- Request erasure
- Restrict processing
- Data portability
- Object to processing
- Withdraw consent at any time
Requests should be sent to [email protected]. Our internal SLA for responses is 30 days.
Data Security
We implement appropriate technical and organizational measures to protect personal data, including:
- Encryption of data at rest and in transit
- Access controls and authentication
- Regular security and vulnerability audits
- Employee training and awareness
- Incident response procedures
Data Breach Notification
If a personal-data breach occurs, we will:
- Notify the supervisory authority within 72 hours (Art. 33 GDPR).
- Inform affected users when a breach is likely to result in risk to rights and freedoms
- Record the incident in a Breach Register.
Automated Decision-Making and Profiling
HyreNet may use automated scoring algorithms to evaluate candidate performance. These systems are monitored and validated regularly to ensure fairness and minimal impact on individual rights. Users may request human review of any automated decision by emailing [email protected]
Governance and Data Protection Officer (DPO)
- Contact: [email protected]
- Responsibilities: monitoring GDPR compliance, advising management, liaising with authorities.
Cookies and Tracking
We use cookies and similar tracking technologies on our website and services for:
- Essential functionality
- Security purposes
- Analytics and performance monitoring
Children's Privacy
Our services are intended for business use and not directed to children under 16. We do not knowingly collect personal data from children.
Updates to This Policy
We may update this Privacy Policy to reflect changes in legal requirements or data-processing activities. All updates will be posted on https://www.guvi.in/privacy-policy and communicated to users as needed.
Contact Us
If you have questions or wish to exercise your data protection rights, contact:
Data Protection Officer (DPO)
Email: [email protected]
Write to:
Guvi Geek Network Private Limited, IIT M Research Park, Chennai, India.