Conformitate GDPR
Ultima actualizare: 1 iunie 2026
Această pagină rezumă modul în care HRGuru respectă Regulamentul General privind Protecția Datelor (GDPR). Este o prezentare generală a măsurilor noastre tehnice și organizatorice; este în curs de revizuire de către echipa juridică și nu constituie consultanță juridică.
1. Data residency
All personal data is stored in the EU (Supabase, Frankfurt region). The region is fixed at project creation and cannot be moved.
2. Lawful basis
We process candidate data on the basis of the employer’s legitimate interest in recruitment and, where required, candidate consent. Employers act as data controllers; HRGuru acts as a data processor.
3. Data retention
CV files and candidate records are retained for a default of 365 days, after which they are automatically deleted. Employers are notified 30 days before deletion.
4. Your rights
You have the right to access, rectify, export, and erase your personal data, and to object to or restrict processing. To exercise these rights, contact privacy@hrguru.work.
5. Sub-processors
We use a limited set of GDPR-compliant sub-processors (hosting, AI scoring, email). A current list is available on request.
6. Contact
Data protection enquiries: privacy@hrguru.work. We respond to GDPR requests within the statutory time limits.