GDPR Compliance
Your privacy rights under the General Data Protection Regulation
Last updated: December 2024
Recruit2 is committed to protecting your personal data and complying with the General Data Protection Regulation (GDPR). This page explains your rights under GDPR and how we handle your data.
Data Controller: Recruit2 Ltd
For any GDPR-related inquiries, contact our Data Protection Officer at dpo@recruit2.com
Your Rights Under GDPR
Right to Access
You can request a copy of all personal data we hold about you. We will provide this within 30 days of your request.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to have it corrected.
Right to Erasure
You can request that we delete your personal data. This is also known as the 'right to be forgotten'.
Right to Restrict Processing
You can ask us to limit how we use your personal data while we address any concerns you have.
Right to Data Portability
You can request your data in a machine-readable format to transfer to another service provider.
Right to Object
You can object to the processing of your personal data for direct marketing or based on legitimate interests.
Lawful Basis for Processing
We process your personal data only when we have a lawful basis to do so:
Consent
When you explicitly agree to us processing your data, such as when creating an account or subscribing to communications.
Contract
When processing is necessary to fulfill our contract with you, such as providing our recruitment services.
Legitimate Interests
When we have a business reason to process data that doesn't override your rights, such as improving our services.
Legal Obligation
When we're required by law to process certain data, such as for tax or regulatory compliance.
International Data Transfers
We may transfer your data outside the European Economic Area (EEA). When we do, we ensure appropriate safeguards are in place:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Adequacy decisions for countries with equivalent data protection
- Binding Corporate Rules where applicable
How to Exercise Your Rights
Submit a Request
You can exercise any of your GDPR rights by contacting us:
- Email: dpo@recruit2.com
- Post: Data Protection Officer, Recruit2 Ltd
Response Time
We will respond to your request within 30 days. If we need more time (up to 60 additional days for complex requests), we'll let you know.
Right to Lodge a Complaint
If you believe we have not handled your data correctly, you have the right to lodge a complaint with a supervisory authority. In the UK, this is the Information Commissioner's Office (ICO).
Visit ICO Website