1. Data controller
The data controller for personal data collected through the Site is NerdCruiting, operator of the brand and domain nerdcruiting.com.
For privacy and data protection inquiries, please use our contact form.
2. Data we collect
Depending on the service you use on the Site, we may process the following categories of data:
- Identification and contact data: name, email, phone, and message submitted through the contact form.
- Application data: contact information, cover letter, and curriculum vitae (CV) in PDF format submitted through job opportunity forms.
- CV generator data: information you voluntarily enter in the browser to create your CV; PDF export may require Cloudflare Turnstile verification.
- Technical data: IP address, browser type, language preference, cookies, and logs necessary for Site operation and security.
3. Purposes of processing
We process your personal data for the following purposes:
- Respond to inquiries and requests submitted through the contact form.
- Manage job applications and communicate with candidates.
- Send automatic email confirmations where applicable.
- Provide free Site tools, including the CV generator.
- Ensure Site security, prevent fraud and abuse (including Cloudflare Turnstile).
- Remember your language preference (nc_locale cookie).
- Comply with applicable legal obligations.
4. Legal basis and consent
Personal data processing in Uruguay is governed by Law No. 18.331. In general, processing is based on your consent when submitting forms, on pre-contractual measures requested by you (e.g., an application), on legitimate interest in operating and securing the Site, or on compliance with legal obligations.
You may withdraw consent at any time when processing is based on consent, without affecting the lawfulness of prior processing.
6. Sharing with third parties
We may share data with the following types of recipients, only to the extent necessary:
- Hosting and infrastructure providers (Cloudflare Workers / related services).
- Cloudflare Turnstile for anti-bot verification on forms.
- Email providers (SMTP) for sending and receiving messages from forms.
- Competent authorities when legally required.
7. Retention periods
We retain personal data for as long as necessary to fulfill the described purposes, manage commercial or recruiting relationships, and comply with legal obligations.
Contact messages and applications are retained while an active relationship or documented legitimate interest exists, and are subsequently deleted or anonymized according to internal criteria and applicable legal periods.
Technical data and security logs are retained for limited periods consistent with good practices.
8. Security measures
We implement reasonable technical and organizational measures to protect personal data against unauthorized access, loss, alteration, or disclosure, including encrypted communications (HTTPS), access controls, and anti-bot verification on forms.
No system is completely secure; we recommend not sending unnecessary sensitive information through public forms.
9. Data subject rights
Under Law No. 18.331, you have the right to access, rectify, update, include, and delete your personal data, as well as to object to processing in cases provided by law.
To exercise your rights, submit a request through our contact form, stating your identity and the right you wish to exercise. We will respond within applicable regulatory timeframes.
10. Supervisory authority (URCDP)
If you believe processing of your personal data violates applicable regulations, you may file a complaint with the Uruguayan Data Protection Regulatory and Control Unit (URCDP).
Institutional information: www.gub.uy/unidad-reguladora-control-datos-personales
11. International transfers
Some providers (Cloudflare Turnstile, hosting, email services) may process data on servers outside Uruguay. In such cases, we adopt reasonable contractual and technical measures to protect your data in accordance with applicable law.
12. Minors
The Site is not directed at individuals under 18. We do not knowingly collect data from minors. If we detect data from a minor without valid parental consent, we will delete it.
13. Changes to this policy
We may update this Privacy Policy periodically. The «Last updated» date indicates the current version. We recommend reviewing it regularly.
14. Contact
For any privacy or data protection inquiry, please use our contact form.