Privacy Policy
Last updated: March 2026 · Aleksander Burdziak, Amsterdam
1. Who runs this site
This is a personal interactive CV operated by Aleksander Burdziak. It is not a commercial service. Contact: aleksburdziak@gmail.com
2. What data is collected
Session cookie
A single cookie stores an anonymous session ID (a random string). It has no link to your identity. It expires after 24 hours. This cookie is strictly necessary for the AI chatbot to maintain conversation context.
Recruitment activity log
When you enter a company name, the site logs: the company name entered, a hashed (SHA-256, non-reversible) fragment of your IP address, a timestamp, and which AI features you used. No full IP address is ever stored. This data is used solely by Aleksander to understand which companies visit his CV. It expires automatically after 30 days.
Chat history
Your conversation with the AI chatbot is stored temporarily to maintain context within a session. It is deleted after 30 days. Conversations are not used for AI training.
3. What is NOT collected
- No name, email address, or any other contact detail
- No full IP address (only a hashed, non-reversible fragment)
- No payment data
- No data sold or shared with third parties
- No profiling or automated decision-making affecting you
4. Analytics
This site uses Plausible Analytics — a privacy-first analytics tool. Plausible does not use cookies, does not collect personal data, and is fully GDPR-compliant. It counts page visits and referral sources in aggregate only. No consent is required for cookieless analytics under GDPR.
5. AI system disclosure (EU AI Act)
This site uses an AI chatbot powered by Anthropic Claude. The chatbot is clearly identified as an AI system on the page. It will always confirm it is an AI when asked. It is not Aleksander Burdziak. Its answers are based on CV data and may occasionally be imprecise.
This system is classified as low-risk under the EU AI Act. It does not make decisions affecting individuals, does not involve biometric data, and is used solely to present professional information.
6. Legal basis (GDPR)
Data processing is based on legitimate interest (Art. 6(1)(f) GDPR) — specifically, understanding which organisations are reviewing this CV as part of a job search. The data collected is minimal, anonymised at the source, and auto-deleted. No data is shared externally.
7. Your rights
Under GDPR you have the right to:
- Request what data is held about your session
- Request deletion of your session data before the auto-expiry
- Object to processing based on legitimate interest
To exercise any of these rights, email aleksburdziak@gmail.com with your session ID (shown in browser developer tools as the cv_session cookie) and I will respond within 30 days.
8. Data storage
All data is stored in Upstash Redis (EU region). The site is hosted on Vercel. Both providers comply with GDPR.
9. Changes to this policy
This policy may be updated if the site's functionality changes. The date at the top of this page always reflects the latest version.