GDPR

Lawful Bases for Processing

• Contract: To provide and operate the services you request.
• Legitimate interests: To improve our platform, maintain security, and prevent abuse.
• Consent: When required for certain communications or optional features.
• Legal obligation: To comply with applicable laws and regulations.

Your Rights

• Access: Request a copy of your personal data.
• Rectification: Correct inaccurate or incomplete data.
• Erasure: Request deletion of your data in certain circumstances.
• Restriction: Limit how we process your data.
• Portability: Receive your data in a commonly used format.
• Objection: Object to processing based on legitimate interests.

Data Transfers

If we transfer data outside the EU or UK, we use recognized safeguards such as standard contractual clauses or other lawful mechanisms.

Data Processing Roles

Colleagu acts as a data processor when handling recruitment data on behalf of customers. Customers are responsible for their own legal bases and notices to candidates.

How to Exercise Your Rights

To submit a GDPR request, email privacy@colleagu.com. We may request verification before responding.

Complaints

You have the right to lodge a complaint with your local data protection authority if you believe your rights have been infringed.