Privacy Policy

1. Who we are

Hirlya is the online assessment tool used by the recruitment teams of the Maltem group, including Valkima ("Maltem", "we", "us"). Recruiters use it to send candidates an assessment (quiz, code review exercise or case study) and to organise interviews.

The data controller is the Maltem group company whose recruiter invited you; it is named in your invitation email. This policy explains which personal data we process about candidates, why, and what your rights are.

2. Data we process

• Identity and contact details: name, email address, country, target role, experience level and main skills. They come from you, from your application, or from our recruitment management system (BoondManager).
• Your CV and the information extracted from it: experience, education, certifications, skills, a short factual summary and skill indicators.
• Assessment data: your answers to the quiz, to the case study or code review exercise and to the follow-up questions about your answer, start and submission times, time spent, the scores and evaluations computed from your answers, and the browser type used when you submit.
• Interview data: the time slot you book or cancel; each interviewer's structured assessment (a rating from 1 to 4 for each job-related competency, with the observations behind it, and an overall recommendation), notes and outcome; the practical information you share (availability, notice period, salary or rate expectations, mobility); and the length of the interview. Interviews are not recorded or transcribed, and your voice and image are never analysed.
• Recruitment decisions: whether your application moves forward, and the recruiter's notes.
• Technical data: IP address and request logs processed by our hosting provider to deliver and secure the service.

You do not create an account: you access your assessment through a personal link that expires after a set period.

3. Why we use it (purposes and legal bases)

• Assessing your application and organising interviews: steps taken at your request before a possible employment or service contract, and our legitimate interest in recruiting.
• Keeping your recruitment file in our recruitment management system so that we can follow up on your application and contact you about other suitable positions: our legitimate interest. You can object at any time.
• Keeping assessments fair and the service secure (one attempt per step, time limits, copy and paste disabled during the tests, security logs): our legitimate interest.

4. Automated analysis

Quiz answers are scored automatically. Your CV, your case study or code review answer and your answers to the follow-up questions are analysed by an AI model running on our hosting provider's infrastructure (Cloudflare Workers AI) to extract structured information and propose an evaluation. The follow-up questions themselves are written by this model from your own answer.

When you book an interview, the model also prepares a brief for the interviewers from your assessment results: a summary, points to check and suggested questions. It is used only by the interviewers to prepare a fair, structured interview. It relies only on job-related evidence and never assesses your personality, emotions or personal characteristics.

These results help recruiters; they do not decide on their own. The decision to move your application forward or not is always taken by a recruiter. Scores are not shown to candidates; you can ask us for an explanation and for a human review of your assessment.

5. Who can see it

• The recruiters and interviewers of the Maltem group involved in your application.
• Service providers acting on our instructions: Cloudflare (hosting, database, file storage and AI processing), Resend (sending emails) and BoondManager (recruitment management system).
• Authorities, when the law requires it.

We do not sell your personal data.

6. International transfers

Some of our service providers may process data outside your country, including in the United States. These transfers are covered by the safeguards required by applicable law, such as the European Commission's standard contractual clauses.

7. How long we keep it

• Your assessment link works only for the period stated in your invitation.
• Your recruitment data (CV, assessment results, interview notes, decisions) is kept for up to 2 years after our last contact with you, then deleted or anonymised, unless you ask us to delete it earlier or you join us.
• Technical logs are kept for a short period, for security purposes only.

8. Your rights

Under applicable data protection law (including the GDPR and, in Morocco, Law No. 09-08), you can ask to access, correct or delete your data, to restrict or object to its processing, and to receive the data you provided in a portable format.

To exercise these rights, write to privacy@hirlya.com. We may ask you to confirm your identity. You can also lodge a complaint with your data protection authority, for example the CNIL in France or the CNDP in Morocco.

9. Security

Access is limited to authorised recruiters with individual accounts. Data is encrypted in transit (HTTPS), and each candidate link is personal, random and time-limited: do not share it.

10. Cookies

See our Cookie Policy.