Data processing policy

1.Data controller

Aluna, domiciled in Bogotá D.C., Colombia, contact email hola@aluna.works, is the controller of the personal data collected through the platform.

When a client company uploads CVs it obtained by its own means, that company is the controller and Aluna acts as processor, handling the data solely according to its instructions.

2.Data processed

• Identification and contact: name, email, phone number, and city.
• Professional information: the CV and all its contents, LinkedIn profile, salary expectation.
• Interaction content: the full transcript of the screening interview over WhatsApp or email.
• Analysis output: fit score, interview summary, and the evidence supporting each criterion evaluated.

3.Purposes

• Assessing a candidate's suitability against the requirements of a specific vacancy.
• Conducting the screening interview and summarising its results for the recruiting team.
• Producing process reports for the hiring company.
• Contacting the candidate about the process they applied to.
• Retaining evidence of the process for audit and compliance purposes.

4.Authorisation

Authorisation is collected in the public application form, before any data is submitted, through explicit and separate checkboxes: one for personal data processing and another for AI-assisted analysis.

The second is optional. If it is not given, the application proceeds without an automated score. We keep a record of the authorisation granted, with its date and content, as proof that it was obtained.

5.Sensitive data and minors

We do not request sensitive data — racial or ethnic origin, political opinions, religious beliefs, trade union membership, health, sex life, or biometrics. If a CV includes such data at the sender's initiative, it is not used as an evaluation criterion.

The platform is not directed at minors and we do not knowingly collect their data.

6.Data subject rights

Under article 8 of Law 1581 of 2012, every data subject has the right to:

• Access, update, and rectify their data held by Aluna.
• Request proof of the authorisation given, except where the law does not require it.
• Be informed about the use made of their data.
• File complaints with the Superintendence of Industry and Commerce for breaches of the law.
• Revoke the authorisation and request deletion, where no legal or contractual duty prevents it.
• Access free of charge the data that has been processed.

7.How to exercise them

Send an email to hola@aluna.works stating your full name, the process or vacancy you applied to, and your specific request. No particular format or form is required.

We answer enquiries within ten business days, extendable by five more when they cannot be resolved in that time. Complaints are answered within fifteen business days, extendable by eight more, with prior notice of the reason for the extension and the date of reply.

8.Automated decisions

The score produced by the AI models is a recommendation addressed to the recruiting team. No application is discarded automatically on its basis: the final decision is always made by a person.

When the company configures it that way, a score above the threshold it defines makes Aluna start the pre-screening interview over WhatsApp or email without prior recruiter intervention. That contact is an invitation to talk, not a decision on the application, and it can be stopped at any time by replying on the same channel.

Any candidate may request human review of their evaluation and an explanation of the criteria behind it by writing to the contact address.

9.Validity

This policy applies from its publication. Data is retained for the periods set out in the privacy policy, and deleted or anonymised on expiry, unless a legal obligation requires longer retention.