top of page

Information Regarding the Processing of Candidates' Personal Data 

​

In accordance with the provisions of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL (“GDPR”), the personal data controller (the “Controller”) informs the Data Subject, and the Data Subject acknowledges the mandatory information regarding the processing of personal data described below.

​

Applicable legislation means: GDPR and any other regulatory act regarding the processing or protection of Personal Data (“Personal Data” or “Data”).

​

The meaning of terms such as “Personal Data”, “Processor”, “Processing”, “Controller”, “Data Subject” and other similar terms specific to personal data protection used in this Information Notice shall have the meaning provided in the applicable legislation.


1. Categories of personal data processed include the following:

During the recruitment process, RightClick generally uses publicly available professional networks such as LinkedIn, or candidates’ CVs, which may provide various personal data, such as:

  • First and last name;

  • E-mail;

  • Phone number;

  • Other information that the potential candidate makes available on their profile.

 

BASIC INFORMATION REGARDING THE PROCESSING OF PERSONAL DATA

2. Identity and contact details of the Controller / Joint Controllers

The relevant RightClick entity: RIGHTCLICK SOLUTIONS B.V., with registered office in Nieuwezijds Voorburgwal 104/108, 1012 SG Amsterdam, The Netherlands, registered with the Trade Registry Office under no. 60395486, in its capacity as joint controller together with other entities within the RightClick Group (RIGHTCLICK SOLUTIONS B.V. AMSTERDAM OLANDA-SUCURSALA BUCURESTI, RightClick Americas.Inc, RIGHTCLICK SOLUTIONS APAC PTE. LTD)

(depending on the context, collectively or individually referred to as “Controller(s)” or “we” or an equivalent wording)

Contact details of the Data Protection Officer: gdpr@rightclicksol.com


3. Specific processing operations and legal grounds for processing Personal Data​

​

C1. Processing operations may mainly consist of:

The processing operations may consist of accessing personal data by authorized persons within RightClick, through their own user account (such as a LinkedIn user account), as well as other incidental processing operations (for example, temporary storage of data on the computers of persons accessing candidates’ profiles or temporary storage on paper support) carried out for the same processing purpose mentioned below. Personal data may also be transmitted to the recipients mentioned below and in section 6 of this document.

​

C2. Legal grounds may vary and may include:

Article 6(1)(a) GDPR – Consent for the processing of personal data. You will be asked for your consent and you may withdraw it at any time, however this will not affect the lawfulness of processing carried out by the Controllers based on consent before its withdrawal.

Article 6(1)(b) GDPR – processing is necessary for the conclusion/performance of the contract between the Controller and the Data Subject (namely the individual employment contract or service contract)

Article 6(1)(f) GDPR – Legitimate interest: for accessing and processing publicly available data (e.g. public LinkedIn profile) for the purpose of identifying and contacting suitable candidates for vacant positions.


4. Purposes of data processing

(Conclusion of an employment or collaboration contract) Personal data is accessed in order to contact candidates for various vacant positions within RightClick. Data is temporarily stored by RightClick and is not transmitted to any other person, except for the recipients mentioned in section 6 of this document.

(pursuit of legitimate interests of the controllers) Accessing candidates’ data. Communication between Joint Controllers for the purpose of coordinating and streamlining intra-group operations. RightClick’s interest (efficient recruitment and coordination of intra-group operations) prevails over the rights of candidates, considering the public nature of the data and the reasonable expectation of being contacted in a professional context.

​

5. Legitimate interest on the basis of which the Data processing takes place, where applicable

​The legitimate interests described above.

​

6. Data recipients, where applicable

Data may be transmitted to:

  • Entities within the RightClick Group based on an intra-group data sharing agreement

  • RightClick service providers (for example: accounting services, occupational health and safety services, occupational medicine services, medical insurance).

  • RightClick IT service providers, including IT infrastructure, email and cloud service providers, located in the countries where the RightClick Group operates.

​

7. Intention to transfer personal data internationally, where applicable

Personal data may be transferred to entities outside the European Union (EU) or the European Economic Area (EEA).

If the transfer takes place to a country or territory not considered by the European Commission as providing an adequate level of protection, we ensure that such transfers comply with GDPR through the use of appropriate safeguards.

​

ADDITIONAL INFORMATION REGARDING DATA PROCESSING

​

8. Data retention period, where applicable

We will store your Personal Data for a limited period, as necessary to achieve the purposes of processing Personal Data, as described in this privacy notice and in accordance with our legal and contractual obligations, legitimate interest, and in accordance with our internal policies and procedures regarding personal data retention.

​

This means that we retain different categories of data for different periods of time, depending on the type of data, the category of data subject to which the data relates, and the purposes for which we collected the data.

​

Once the retention period expires for a certain category of data, we will delete, archive, anonymize or destroy it, in accordance with our internal policies and procedures, unless this is prohibited by applicable law.

​

Data related to the recruitment process will be retained for a period of 6 months from the completion of the recruitment/selection process, if the candidate expresses their consent for the data to be retained after the end of the recruitment campaign.

​

Right to object

At any time, for reasons related to their particular situation, in the case of processing based on Article 6(1)(e) or (f) of GDPR, the Data Subject has the right to request the cessation of any processing of Personal Data, in accordance with the law.

​

9.  Other rights of the Data Subject

  • Right of access

  • Right to rectification

  • Right to erasure

  • Right to restriction

  • Right to portability

  • Right to withdraw consent

  • Right to lodge a complaint

​

10. Consequences of failure to provide Data

Refusal to provide mandatory data prevents the conclusion or execution of the contract.

 

11. Source of data

​Public sources or directly from the candidate.

​

12. Automated decision-making

​No automated decision is made.

​

13. Joint controllers – essential information

Categories of data subjects: staff, candidates, partners

Purposes: recruitment, HR, payments, communication, compliance, business operations

Categories of data:

  • Staff: identification, contact, banking

  • Candidates: CV, LinkedIn data

  • Partners: contact data

​​​​​​​​

​

Version 1.0 | Last updated: 27 February 2026

bottom of page