Personal data and how the test works
This page describes what the platform collects, why, who sees it and for how long. It serves as prior information under the GDPR for candidates and recruiters.
Who processes your data
The Takumiz platform hosts the jobs and runs the tests. Each company that publishes a job decides what it does with the applications it receives. Both are responsible, each for its own part.
What is collected
- Account: email, name, password (stored hashed with argon2, never in plain text), preferred language.
- Application: the CV as a PDF, the date, the extra-time choice as a simple multiplier (1 or 1.5).
- Test: the questions drawn for you, your answers and the server time when each question was sent and each answer received.
- Technical log: some actions (publishing a job, viewing scores, opening a CV, deleting data) are logged for security.
No health data is requested or stored. Extra time requires no reason and the platform keeps none.
Why, and on what basis
Enabling companies to receive and rank applications to their jobs. Legal basis: the company's legitimate interest in assessing the applications it receives, with the candidate informed before any test.
The score, and what it does not do
The score is the percentage of correct answers, rounded to the nearest whole number. An answer received after the question's time is up, with one second of network margin, counts as wrong; “I don't know” is worth 0.
The platform ranks applications by score but makes no decision: no cut-off threshold, no automatic rejection. A person at the company always decides.
The recruiter sees the score as soon as the test ends. The candidate sees it 24 hours later, on the site and by email.
Who sees what
The job's recruiter sees: your name, your email, the CV sent, the application date and the score. They do not see your individual answers, your response times, a breakdown by skill or your use of extra time. The platform administrator can look at response times if a test is in doubt; they are never shown to the company.
How long
Applications, answers and CVs are deleted automatically 6 months after the job closes. You can delete everything sooner by deleting your account.
Where
On a server we run ourselves, in the European Union, with disk and transport encryption (HTTPS). Questions are generated with a model installed on that same server, and it never receives candidate data. Two exceptions, described below: the optional identity verification, and the search for partner jobs.
Identity verification (optional)
Some companies only accept verified profiles. If you choose to verify your identity, you are sent to our verification provider (Didit), which processes your identity document and selfie on our behalf. The platform only receives the result (verified or not) and its date; companies only see the badge. Without verification, you can apply to all other jobs.
Partner jobs
In the “Partner jobs” tab, your search is sent to Careerjet, which supplies these jobs: the keywords, location and country you chose, plus your IP address and browser type, which Careerjet requires to fight fraud. Nothing is sent until you open that tab, and no data from your account is sent. A job opened from that tab takes you to another site, whose privacy policy applies.
Subscription payments (companies)
Company subscriptions are paid on Stripe's secure page, which processes the bank card and invoices. We never see card data: we only keep the chosen plan, its status and its renewal date.
Job alerts
If you create an alert, we keep the search criteria to email you new jobs every morning, only when there are some. Each email contains a link to stop the alert in one click; alerts are deleted with your account.
Points and streaks
When you are logged in, we count your first visit of each day to award you points. We keep the date of your last visit, your streak, your points statement and, if you arrived through an invitation link, the account that invited you; that account only sees a number of sign-ups, never your name. Points are never used to assess your application and are not shown to recruiters. A score certificate is public only if you create it, and you can withdraw it at any time. Everything is deleted after 12 months without a visit, or with your account.
Reviews, recommendations and notifications
A review of a company is published without your name, after moderation; you can have it removed by deleting your account. A recommendation written by a former employer is only visible after your consent, and you can hide it at any time. Notifications (application viewed, answer from a company, score available) are kept in your account and deleted with it.
Your rights
Access, rectification, erasure, objection and portability. From the My data page, you can download your data and delete your account. For any other request, write to the platform administrator. You can also contact your country's data protection authority (in France, the CNIL).
Limits of the test
No camera, no microphone, no screen monitoring. Questions are shown as images and drawn at random with different values for each candidate, which makes cheating slow without making it impossible. The score is a signal; the interview remains the real check.