1. Purpose
This Data Processing Agreement forms part of the contractual relationship between Recrovia and employers who use the Recrovia platform where UK data protection legislation requires such an agreement.
2. Roles of the Parties
Where an employer uses Recrovia to advertise vacancies, search for candidates or manage recruitment activity, the employer will generally act as the Data Controller for the personal data it receives. Recrovia will process personal data only as necessary to provide the agreed services and, where applicable, will act as a Data Processor.
3. Processing Activities
Recrovia may process personal data for activities including:
- hosting candidate profiles;
- managing applications;
- facilitating candidate searches;
- providing messaging and recruitment tools;
- maintaining platform security;
- providing customer support.
4. Security Measures
Recrovia will implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, disclosure, alteration or destruction. These measures may include encryption, access controls, monitoring and secure hosting.
5. Confidentiality
Recrovia will ensure that personnel authorised to process personal data are subject to appropriate confidentiality obligations.
6. Sub-processors
Recrovia may use carefully selected third-party service providers to support the operation of the platform. Where personal data is processed by such providers, Recrovia will take reasonable steps to ensure appropriate contractual and security protections are in place.
7. Data Subject Rights
Where appropriate, Recrovia will provide reasonable assistance to employers in responding to requests from individuals exercising their rights under UK data protection legislation.
8. Personal Data Breaches
If Recrovia becomes aware of a personal data breach affecting employer data, we will investigate the incident and notify affected employers where required by applicable law.
9. Deletion or Return of Data
At the end of the relevant services, personal data will be retained, returned or securely deleted in accordance with the agreement between the parties, applicable law and Recrovia's retention policies.
10. Governing Law
This Agreement is governed by the laws of England and Wales unless applicable legislation requires otherwise.