Please find listed below further information on how the ATS supports GDPR compliance.

 

• https://www.hireful.com/legal/it-security - please see section on IT, hosting and security
• https://hireful.co.uk/gdpr-faqs/- further data security information
• https://hireful.co.uk/privacy-policy/ - hireful's own privacy policy

 

 We also have the following functionality within the ATS to support compliance:

 

• Candidate opt-in to client’s privacy policy as part of the application process
• Candidate opt-in to client’s privacy policy as part of registration for job alerts
• Data cleanse (removing candidate records after a set period of time, unless they opt in)
• The ATS can be operated easily without downloading a file

 

The application opt in will sit on the first page of the application form (pre-application page) and will be a required field in order to progress to the next stage in the form. ATS customers need to provide us with a copy of their privacy policy so that all applicants have the opportunity to see the policy and actively "opt in".  It'll be the same process for any candidates registering for job alerts. 

 

The data cleanse feature emails candidates when they reach 30 days from a set time limit (specified by the client) with no opt-in activity. It would then offer them the chance to click a link and opt in to having their data held for an additional x days/months . If they do not respond to the email then the ATS will delete/anonymise their details. The email that is usually sent is below, although we can amend as needed:

 

Hi {{candidate_first_name}},

 

We're contacting you because we've noticed that it has been some time since you were last active on our recruitment system. In accordance with our {{ privacy_policy_link|safe }} we will remove your data from our system on {{anonymised_date}}. This will mean that if you've signed up for job alerts with us these will cease on the above date.

 

If you would like to stay on our records and continue to receive job alerts please <a href='{{record_activation_link}}'>click here</a> before {{anonymised_date}}.

 

If you would prefer that we remove your record from our system, you do not need to do anything and this will occur automatically on the above date.

 

Kind regards,

 

{{ organisation_signature|safe }}