1. Who is responsible
Consultoria Virtual, Berlin, Germany, is the controller for personal data processed to operate Fēmina Officium. Contact mail@consultoriavirtual.com for privacy questions and requests. This notice covers visitors, account holders, applicants, employers and instructors. An employer or other member receiving your information may separately be responsible for how they use it, such as their recruitment records.
2. Information you provide
We process account details such as your name, email and authentication records; profile information such as headline, biography, skills, profession, country, city, links, photograph and visibility choice; CV files and public CV summaries; listings, applications, cover letters and status history; messages and connections; course content, enrolments and progress; and contact forms, reports and support correspondence. Do not include identity documents, health information or other sensitive information that is unnecessary for professional participation.
3. Sources and technical information
Most information comes directly from you or from the members you interact with. If you use Google sign-in, Google provides the account identifier, name, email and profile image made available through that service. Hosting and authentication providers process technical information such as IP addresses, browser/device information, request times, authentication events and security logs. The map uses country selections. Profile locations are supplied by members; we do not request precise device geolocation.
4. Purposes and legal bases
Under the GDPR, we use contract necessity (Article 6(1)(b)) to create and manage accounts and provide the listings, applications, messaging and learning features you request. Our legitimate interests (Article 6(1)(f)) cover proportionate service security, abuse prevention, troubleshooting and handling enquiries. Legal obligations (Article 6(1)(c)) cover required disclosures and legally required recordkeeping. Optional publication of your profile in the public directory is based on your consent (Article 6(1)(a)); you can change that choice in your dashboard. Withdrawal does not affect earlier lawful processing or other valid bases.
5. Public profiles, listings and other members
Public profiles, published listings and public course descriptions or preview lessons can be viewed by other people, including visitors without an account, and may be copied or indexed by search engines. Turning public visibility off hides the profile from logged-out visitors and removes it from the public directory. Signed-in members can still view the professional profiles of active listing posters; your profile can also remain accessible to people involved in your applications, messages or connections. Messages are available to their participants; course instructors can access information needed to manage their courses. Share only what you intend the relevant recipients to receive.
6. CVs and recruitment information
CV files are held in private storage with access rules. You and the employer/listing owner receiving a relevant application can access the submitted CV version; authorised support or administration access may also be necessary. A public CV summary is part of your profile’s visibility choice and is different from the private file. Withdrawing an application or uploading a new CV does not automatically revoke an employer’s access to the earlier submitted version or erase downloaded copies. Contact us for removal requests and contact the recipient about their separate records.
7. Providers, disclosures and international transfers
Supabase provides database, authentication and private file storage; Vercel delivers the website; Hostinger delivers account emails. Google handles optional Google sign-in and supplies the website fonts. YouTube or Vimeo may provide a lesson video when loaded. Providers receive information needed for those functions and may use subprocessors. Our primary Supabase database is configured in the EU; global delivery, support or external services can involve processing elsewhere. Provider data-processing terms describe applicable transfer safeguards, including standard contractual clauses where relevant. Ask us for information about recipients and safeguards. We may disclose data when legally required or necessary to protect rights and investigate abuse. We do not sell personal data.
8. Browser storage and external content
The site uses browser storage for the Supabase sign-in session, your language choice (fo-lang) and navigation scroll restoration. Session data stays until sign-out or session expiry/cleanup; the language setting remains until changed or cleared. Clearing site storage may sign you out. We do not currently run advertising trackers or optional marketing analytics. Google Fonts receives normal web-request information when font files load. External video players can receive your IP address and device information and use their own storage when loaded; their privacy notices apply. Any future non-essential tracking requiring consent must be offered separately before activation.
9. Retention and deletion
We keep account and feature information while your account is open and it is needed to provide the services you use. Application records and submitted CV versions remain linked to the relevant application, rather than being automatically removed when you withdraw. Contact/support information is kept while handling the enquiry and any necessary follow-up. When you request closure or deletion, we remove or anonymise data no longer needed, except limited information necessary for legal duties, security investigations, rights requests or an unresolved claim. Retention in those cases depends on that purpose and any applicable legal period. Provider logs and residual backups, where maintained, follow the applicable provider retention cycles. We do not promise a fixed automatic deletion schedule. Ask us about a particular record.
10. Security, children and decisions
We use encrypted connections, account authentication, database access rules and private CV storage to limit access. No online system is completely risk-free; protect your password and report suspected access immediately. The pilot is intended for adults aged 18 or over. If you believe a child has supplied information, contact us so we can investigate and remove it where appropriate. The platform does not make solely automated hiring decisions or score applicants; employers make their own decisions.
11. Your rights and how to exercise them
Where applicable, you can request access, correction, erasure, restriction, objection and a portable copy of your data. You can withdraw optional public-profile consent in the dashboard or by contacting us. Email mail@consultoriavirtual.com with your request; we may reasonably verify your identity without asking for unnecessary documents. We normally respond within one month under the GDPR and explain any lawful extension or refusal. You can complain to the Berlin data-protection authority or another competent authority, including where you live or work, and seek a judicial remedy. You do not have to contact us first to exercise those complaint rights.
12. Updates and further information
We will update this notice if our processing changes and identify the latest version. Material changes will be brought to members’ attention as required. Necessary account/service emails are part of operating the platform; this notice is not consent to marketing. Use mail@consultoriavirtual.com for questions, account closure, file deletion and requests for further information about our processing.