A friend of mine was looking for a job last August. She sent CVs for various positions.
Now, months later, somebody told her that if he Googles her name, her CV pops up. She tried it herself and sure enough, the first result is her CV in PDF format, from the website of one of the companies she contacted. The link is in a
wp-content/2018/08 format, which means it was uploaded on their website, but it’s freely available for anyone to search and download it.
My question is: does she have any ground for legal action? Is such action worth the effort in terms of compensation?
The location is Cyprus, covered by EU and GDPR laws.