Privacy

AbilityRating is developed by GRANDE FOX SOFTWARE S.R.L., Str. Amurgului nr. 23, Vila C6, Popești-Leordeni, Ilfov, Romania, the controller of the personal data described here. For anything about your data, write to privacy@abilityrating.com.

If you live in the United Kingdom, our representative under the UK GDPR (Article 27) is George Ciobanu, uk-representative@abilityrating.com.

We wrote this page and the notice of the early sittings ourselves, from the guidance of the data protection authorities. They have not been reviewed by a lawyer. We describe what we do as exactly as we can, so that you can judge for yourself.

This website

This website sets no cookies, loads nothing from other companies and uses no tracking or advertising tools. You do not need to accept anything to read it.

Like every web server, ours records each request: your IP address, the page, the time and your browser’s description of itself. These logs are kept for 90 days to keep the site secure and to count visits to its pages; then they are deleted. Our legal basis is our legitimate interest in running a secure website (Article 6(1)(f) GDPR). The logs are stored by Amazon Web Services in Sweden. Pages are served from the Amazon CloudFront location nearest to you, which may be outside the European Union.

Messages you send us

When you write to contact@abilityrating.com or privacy@abilityrating.com, we receive your address and your message. We use them only to answer you; employers who ask to hear about the first pilot are kept on a list for that purpose only. Please do not send us anything you do not want us to keep. A copy of each message is stored for 30 days by Amazon Web Services in the European Union, which forwards it to our Google Workspace mailbox. Google may process it in the United States; Google LLC is certified under the EU-US Data Privacy Framework, which the European Commission recognises as providing adequate protection. We delete ordinary messages from the mailbox once they are dealt with and no later than one year after the last exchange. Records of requests about your data are kept for three years, to show how they were handled. Our legal basis is our legitimate interest in answering you (Article 6(1)(f) GDPR) or, for the pilot list, your consent.

Early sittings

Early sittings are anonymous. You do not create an account and we do not ask for your name or email address. Your answers, how long each step took and the optional background questions are stored under a random code that is linked to nothing else; we remove from open answers any name or other detail that could identify someone. At the end of a sitting you get a code that deletes your answers within 7 days; after that they cannot be found or linked to you, and the law on personal data no longer applies to them. The notice shown at the start of the sitting gives the details. Web server logs of the sitting are kept as described above and never linked to your answers.

Your rights

You have the right to access your data, to have it corrected or deleted, to restrict or object to its use, to receive it in a portable form and to withdraw any consent at any time. Write to privacy@abilityrating.com. You can complain to the Romanian supervisory authority (www.dataprotection.ro), to the authority of the country where you live or work or, in the United Kingdom, to the Information Commissioner’s Office (ico.org.uk).

Changes

We update this page when our practices change and show the date of the last change below.

Last changed: 15 October 2026.