GDPR Compliance

    How Agent Recruiters complies with the General Data Protection Regulation.

    Our Approach to GDPR

    Agent Recruiters is committed to GDPR compliance. As both a data controller (for our customers' account data) and a data processor (for candidate data sourced on behalf of our customers), we implement appropriate technical and organizational measures to protect personal data.

    Lawful Basis for Processing

    • Account data: Processed under contractual necessity (to provide the Service) and legitimate interest (to improve the Service)
    • Candidate data: Sourced from publicly available professional profiles under legitimate interest for recruiting purposes. Our customers, as data controllers, are responsible for ensuring their use of candidate data complies with applicable laws
    • Usage data: Processed under legitimate interest to maintain, secure, and improve the Service

    Data Subject Rights

    Under GDPR, individuals have the right to:

    • Access — Request a copy of personal data we hold
    • Rectification — Request correction of inaccurate data
    • Erasure — Request deletion of personal data ("right to be forgotten")
    • Portability — Request data in a structured, machine-readable format
    • Objection — Object to processing based on legitimate interest
    • Restriction — Request limitation of processing

    To exercise these rights, contact [email protected]. We respond to all requests within 30 days.

    Data Processing Agreements

    We offer a Data Processing Agreement (DPA) to all customers. The DPA outlines our obligations as a data processor, including data handling procedures, sub-processor disclosures, and breach notification commitments. Contact [email protected] to request a DPA.

    International Data Transfers

    Our primary infrastructure is located in the United States. For transfers of personal data from the EU/EEA, we rely on Standard Contractual Clauses (SCCs) as approved by the European Commission.

    Data Breach Notification

    In the event of a data breach affecting personal data, we will notify affected customers within 72 hours and cooperate fully with any regulatory requirements.

    Contact Our DPO

    For GDPR-related inquiries:
    [email protected]