Privacy

Controller

Litora Nova OÜ, E-Residency HUB, Ahtri 12, 10151 Tallinn, Estonia Email: mail@litora-nova.com

Data protection contact: Torsten Wetzel, c/o Litora Nova OÜ, email: mary@litora-nova.com

Hosting and server logs

Access to this website runs through a proxy at Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany; the servers are located in Germany. The application and its database run on our own server behind it, which is not publicly reachable.

The proxy keeps technically necessary server logs (for example IP address, time and page requested) that are required for secure operation and are deleted automatically after 14 days. To prevent abuse, the application limits the number of requests per IP address; for this it holds the IP address briefly in memory and does not store it. The legal basis is Art. 6(1)(f) GDPR.

Cookies and tracking

This website uses no tracking, no analytics and no advertising. Fonts are served from our own server. There are only technically necessary cookies: one keeps your invitation during the conversation, one your access to your result, one the login to the recruiter portal. They are strictly necessary for the service (§ 25(2) no. 2 TDDDG) and contain no profiles.

Requesting an invitation (form on the start page)

When you request an invitation, your name, email address and, if provided, company, preferred language and message are sent to Torsten by email so he can send you a personal link. The application does not store the request. The email stays in Torsten's mailbox and is deleted 6 months after it was last dealt with; earlier on request.

The legal basis is Art. 6(1)(b) GDPR (handling your request) and Art. 6(1)(f) GDPR (protection against abuse).

Your conversation with Mary

A conversation requires a personal invitation and only starts after you have explicitly given your consent. The consent text there describes the process in detail; here are the key points.

During the conversation your voice is recorded and converted into text (transcript). We store the transcript, the duration and the course of the conversation. Your first name and, if provided, your company are passed to the voice service so Mary can address you; your last name and your email address are not.

After the conversation, an AI model creates a summary from the transcript. It is sent to Torsten by email together with your name and company and stays in his mailbox, even after the conversation has been deleted here. You are not assessed, and there is no automated decision.

The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time with effect for the future, for example with the delete button on your result page or by email.

Job interviews

When Mary conducts a job interview, an AI model creates an evaluation with an assessment per competency and verbatim quotes as evidence. It only supports the decision; a human always decides on the application. The legal basis here is also your consent. If another company invites you, that company is responsible for the interview and tells you so before the conversation; Litora Nova then processes the data on its behalf.

Service providers and transfers to the USA

ElevenLabs (USA) runs the voice dialogue: speech recognition, response and speech output. For this, your browser connects directly to ElevenLabs during the conversation; your voice and your IP address are transmitted.

OpenAI (USA) creates the summary or evaluation from the transcript.

Both process the data on our behalf under a data processing agreement. Data is transferred to the USA; this is safeguarded by the European Commission's standard contractual clauses (Art. 46(2)(c) GDPR).

Emails (the summary to Torsten, requests from the form, the access code to your result) are sent through our own mail server.

Retention and deletion

The transcript, the summary or evaluation and the conversation recording at the voice service are deleted automatically no later than 48 hours after the conversation. On your result page you can delete everything earlier with one click. If needed, you get access to it with a code sent by email; the code is valid for 24 hours and is stored only as a hash.

What remains after deletion: proof of your consent (time and text version, Art. 7(1) GDPR) and the summary in Torsten's mailbox.

Your rights

You have the right of access, rectification, erasure and restriction of processing, the right to data portability, the right to object and the right to withdraw your consent. You can also lodge a complaint with a data protection supervisory authority. For any request, an email to mary@litora-nova.com is enough.