Data Controller
Rekruteer
At Rekruteer, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website or communicate with us as a client or candidate.
We process personal data in accordance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR).
Depending on how you interact with us, we may collect the following categories of personal data:
We only collect personal data that is relevant and necessary for recruitment and related communication purposes.
We do not collect or process any Special Categories of Personal Data within the meaning of Article 9 of the GDPR. This includes data relating to racial or ethnic origin, religious or philosophical beliefs, sexual orientation or sex life, political opinions, trade union membership, health, genetic data, or biometric data.
We also do not process personal data relating to criminal convictions or offences under Article 10 of the GDPR.
We process personal data for the following purposes and lawful bases under Article 6 of the GDPR:
We do not use personal data for automated decision-making or profiling within the meaning of Article 22 of the GDPR.
When you submit a message through our website contact form, your data is transmitted via Web3Forms, which processes the submission on our behalf so that we can receive and respond to your inquiry.
Our resume review tool processes your CV or resume solely to generate AI-powered feedback. We do not store your resume or its contents at all. Processing occurs in memory only, and no copy is retained after the review is delivered. To enforce usage limits, we temporarily store a hashed, non-reversible form of your email for up to 7 days; this cannot be used to identify you. For rate limiting, we use a hashed client identifier; we do not store or log IP addresses.
We only include form fields that are necessary to respond to your request or explore relevant opportunities. We recommend that you do not include sensitive personal information in free-text fields.
Where third-party service providers are used, they act as data processors and are contractually required to process personal data in accordance with GDPR requirements.
Where personal data is processed outside the European Economic Area, appropriate safeguards are applied in accordance with GDPR requirements.
We retain personal data only for as long as necessary to carry out recruitment and placement activities, manage ongoing client or candidate relationships, or comply with applicable legal obligations.
You may request deletion of your personal data at any time. We will comply unless retention is required by law or for legitimate business purposes.
Under the GDPR, you have the right to:
To exercise any of these rights, please contact us using the details on our contact page. You also have the right to lodge a complaint with your local data protection authority if you believe your data is being processed unlawfully.
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or disclosure.
If you have any questions about this Privacy Policy or how we handle personal data, please contact us via our website contact page or the contact details provided at the top of this Privacy Policy.
Last updated: 26 January 2026