Trust
GDPR and your rights
What we hold, why we are allowed to hold it, how long for, and how to make us do something about it.
Rights
Your rights, and how to use them.
Every one of these is exercised against The NOD directly. You do not have to go through a company that happened to see your profile.
AccessAsk what we hold and we send you all of it, in a readable form, within thirty days.
RectificationCorrect anything that is wrong. Verified claims are re-confirmed against their source rather than simply overwritten.
ErasureDelete the account and the record goes with it. Verification does not survive the account.
PortabilityTake the record with you, machine-readable, including the source and date on every confirmed claim.
Objection and restrictionStop us processing, or narrow it, without having to delete the account.
Automated decisions, Article 22The matching engine is deterministic and its rules are published by the employer. You can ask for any result about you to be explained, rule by rule, and for a person to review it.
Lawful basis
What we hold, and why we may.
Identity, verifiedConsent. Withdrawn at any time by deleting the account.
Education and employment claimsConsent. Each confirmation is a separate act by you, and each can be removed on its own.
What you are open toConsent. Category, seniority, location and the salary band below which you do not want to be approached.
Applications and requestsContract, once you have applied or accepted. The company needs a record of what it agreed to, and so do you.
Nothing about your behaviourWe do not build a profile of what you looked at, how long for, or what we infer from it.
Duration
Retention and transfers.
While the account is openAs long as you keep it, and no longer.
After deletionRemoved inside thirty days, apart from what we are legally required to keep for accounting, which contains no candidate record.
Where it sitsInside the EU. There is no transfer to a third country in the normal operation of the product.
Who else sees itCompanies you accepted a request from, or applied to. Nobody else, including investors, and nobody at all by purchase.
A question we have not answered here?
Write to us and a person will reply. The data protection contact is the same address.