Recrutio
    RO

    Privacy Policy (GDPR)

    Version 2.1 • Last updated: September 25, 2026

    This English version is provided for convenience. In case of any discrepancy, the Romanian version prevails.

    1. Data protection roles

    The recruiting company determines why and how candidate data is used and acts as data controller. Recrutio processes this data for the company, within the service and contractual instructions. Recrutio acts as controller for account administration, security and operation of its own service. Questions: dpo@recrutio.ro.

    Identification details: Recrutio, tax ID (CUI) 49036490, with its professional address in Bucharest, Sector 1, Bulevardul Bucureștii Noi nr. 136, ground floor, apt. 5.

    2. Data we process

    • Recrutio user data: name, email address, phone number, company, role and information required for authentication.
    • Candidate data: name, contact details, CV, experience, education, skills and other information provided to the recruiting company.
    • Recruitment data: applications, assessments, matching scores and explanations, notes, responsibilities and stage history.
    • Interview data: video or audio recordings, transcripts, questions, answers and reports when the company uses these features.
    • Technical and usage data: IP address collected for consent and security, device and browser information, access events and public-page usage.

    3. Why we process data

    • Service delivery: administering accounts, jobs, candidates, assessments, interviews and reports under the agreement with the client organization.
    • Recruitment management: under the purposes and lawful basis determined by the recruiting company.
    • Service communications: invitations, account information, password resets and notifications related to requested activity.
    • Security and improvement: protecting the service, preventing misuse, investigating incidents and improving operation on the basis of legitimate interest.

    4. Who may receive data

    • Authorized users of the recruiting company, according to their role and assigned jobs.
    • Providers of hosting, authentication, storage and security services.
    • Providers of service email, document analysis, AI-assisted processing and voice processing used in interviews.
    • External recruitment portals only when the company chooses to use a publishing or import integration.
    • Public authorities only when disclosure is required by law.

    5. Where data is processed

    Data is hosted and processed in Dublin, Ireland, within the European Union. We use provider categories required to operate the service under contractual data-protection obligations. The current list of involved providers, their role and region is available to clients upon request.

    6. How long we retain data

    • Each company sets its candidate-data retention period; the initial period is 12 months.
    • When scheduled deletion is enabled, the company administrator is notified 14 days in advance, and data is deleted only after that period has elapsed.
    • Until scheduled deletion is enabled, deletion requests are carried out upon request. Logs required for security and legal obligations may be retained separately.

    7. AI-assisted analysis and human decisions

    Recrutio uses AI-assisted tools to extract and structure CV information, compare it with role requirements and generate interview questions. Results support recruiters. Recrutio does not automatically reject, select or hire candidates; decisions and verification remain with the recruiting company.

    8. Your rights

    • The right to access, rectify and erase data.
    • The right to restriction and, where applicable, data portability.
    • The right to object and, when processing relies on consent, to withdraw it.
    • The right to lodge a complaint with ANSPDCP (dataprotection.ro).

    9. How to exercise your rights

    For data in a recruitment process, contact the recruiting company first because it determines the purpose of processing. Recrutio assists the company with identifying, exporting, correcting or deleting data. For Recrutio account data or processing performed directly by us, contact us at the address below.

    10. How we protect data

    We use encrypted connections, private files, access controls based on company, role and job responsibility, temporary download links and logs for sensitive operations. A person's access is disabled without deleting company content. No measure can guarantee absolute security; we periodically assess and improve the protections in place.

    11. Cookies and public-page analytics

    We use technologies required for authentication and preferences. We also use analytics and promotion tools on public pages. Session recording by our analytics tool is disabled in areas displaying recruitment data, reports or administrative information. Details and available choices are provided in the Cookie Policy.

    12. Contact

    For questions or requests about personal data, email dpo@recrutio.ro.