GDPR / Data Protection

1. Introduction

This document briefly explains the principles and obligations of Advance.hr regarding the processing of personal data in accordance with the General Data Protection Regulation (GDPR). Our goal is to ensure that every item of personal data is processed lawfully, transparently, and with the application of appropriate technical and organizational protection measures.

2. Principles of Data Processing

Advance.hr applies the following GDPR principles:

• data is processed lawfully, fairly, and transparently
• data is collected only for specific and legitimate purposes
• data is processed only to the minimum extent necessary
• data must be accurate and kept up to date
• data is retained only for as long as necessary
• the confidentiality, integrity, and availability of data are ensured

3. Purposes of Personal Data Processing

Personal data is processed exclusively for:

• managing user accounts and subscriptions
• communicating with users
• system security and prevention of abuse
• fulfilling legal obligations

4. Legal Bases for Processing

The processing of personal data is based on:

• contractual obligation, such as a user account and subscription
• legitimate interest, such as system security and fraud prevention
• user consent, such as certain notifications and communication
• legal obligation, such as accounting, archiving, and regulatory requirements

5. User Rights

In accordance with GDPR, every user has the right to:

• access their personal data
• correct inaccurate data
• delete data, also known as the “right to be forgotten”
• restrict processing
• data portability
• object to processing

To exercise their rights, users may contact us through the official channels listed on the portal.

6. Data Security and Storage

Personal data is stored on secure servers with the application of:

• encrypted communication (HTTPS)
• password hashing
• data access controls
• regular security monitoring

Data is stored only for as long as necessary to fulfill the purpose of processing and legal obligations.

7. Transfer of Data to Third Parties

Data is shared only with trusted partners who provide technical infrastructure, process payments, or provide other related services. All partners are required to apply GDPR-level protection standards and may not use the data outside the agreed purpose.

8. Cross-Border Data Transfers

Personal data is stored within the European Union. If, exceptionally, data is transferred outside the EU, such transfer is carried out with the appropriate safeguards prescribed by GDPR.

9. Personal Data Breach

In the event of a personal data breach, Advance.hr will promptly carry out an internal assessment, take corrective measures, and, where necessary, notify the supervisory authority and users in accordance with GDPR guidelines.

10. Changes to the GDPR Document

The content of this document may be updated from time to time to ensure compliance with changes in law or technical requirements. Updates will be clearly indicated on this page.

11. Data Protection Contact

For all questions related to GDPR, the processing of personal data, or privacy protection, users may contact us through the official email addresses or via the contact form available on the portal.