GDPR Compliance

We are committed to protecting your data rights under the General Data Protection Regulation.

Last updated: December 2024

Data Controller

Recuite acts as both a data controller and processor under GDPR. We are responsible for determining how and why personal data is processed. Our registered office handles all data protection matters and compliance with EU regulations.

Controller for customer relationship data
Processor for recruitment data on your behalf
EU representative designated as required
Records of processing activities maintained

Legal Basis for Processing

We process personal data based on contract performance, legitimate interests, and consent. For recruitment activities, processing is necessary to fulfill our contractual obligations. We ensure lawful, fair, and transparent data processing at all times.

Contract performance (service delivery)
Legitimate interests (security, improvement)
Explicit consent (marketing communications)
Legal obligations (tax, regulatory)

Data Subject Rights

Under GDPR, you have the right to access, rectification, erasure, restriction of processing, data portability, and objection. You may also withdraw consent and lodge complaints with supervisory authorities. We respond to all requests within 30 days.

Right to access your personal data
Right to rectification of inaccurate data
Right to erasure ("right to be forgotten")
Right to data portability
Right to restriction of processing
Right to object to processing

International Transfers

When we transfer personal data outside the EEA, we ensure appropriate safeguards are in place. We use Standard Contractual Clauses approved by the European Commission and verify that recipients maintain adequate data protection standards.

Standard Contractual Clauses (SCCs)
Adequacy decisions where applicable
Data protection impact assessments
Sub-processor due diligence

Data Protection Measures

We implement comprehensive technical and organizational measures to protect personal data. This includes encryption, access controls, regular security audits, and staff training on data protection principles.

Encryption at rest and in transit
Role-based access controls
Regular penetration testing
Employee GDPR training programs

Contact Our Data Protection Officer

For questions about GDPR compliance or to exercise your data rights, please contact our DPO:

[email protected]

We respond to all data subject requests within 30 days as required by GDPR.