Recruitment Privacy Policy

     Last updated: 23.09.2026

1. Who we are

The Cinobo companies listed in Schedule 1 ('Cinobo Employers', 'Cinobo', 'we', 'our' or 'us') provide this Recruitment Privacy Notice ('Notice') because you are applying to work with us.

This Notice explains how we process your personal data as part of our recruitment process.

You can contact us about your personal data at gdpr@cinobo.com.

2. What personal data we collect

When you apply for a position at Cinobo, we may collect and process personal data about you, including:

• your name and contact details;
• information contained in your curriculum vitae (CV); 
• where applicable, a cover letter;
• links to LinkedIn accounts, GitHub accounts or similar;
• details relating to your education, qualifications and professional experience;
• information created or generated during the recruitment process in connection with the assessment and management of your application; and 
• any additional information you choose to include in your application.

Please do not provide special categories of personal data (such as information about your health, racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic or biometric data, or sexual orientation) unless we request the information for a lawful recruitment purpose or you need to provide it, for example to request an adjustment during the recruitment process.

If you provide such information, we process it only where permitted by applicable law.

We indicate where particular personal data is required to process your application or comply with applicable law. If you do not provide required information, we may be unable to consider your application or complete the recruitment process. 

3. Personal data obtained from other sources

We collect most personal data directly from you. We may also receive personal data about you from:

• recruitment agencies and recruitment platforms;
• people who refer or recommend you for a position;
• referees whose details you provide;
• former employers, where permitted by applicable law;
• providers of recruitment tests or assessments; and
• publicly available professional sources, such as LinkedIn.

Depending on the source, this may include information about your education, employment, professional experience and qualifications, skills, references, assessment results and other publicly available professional information relevant to your application.

4. Why we process your personal data

We process your personal data in order to:

• assess your suitability for current employment opportunities;
• communicate with you regarding your application;
• manage and administer the recruitment process; and
• where you have provided your consent, consider you for future employment opportunities.

5. Legal basis

We process personal data that is necessary to receive, assess and manage your application and to take steps at your request before potentially entering into an employment contract with you (Article 6(1)(b) GDPR).

We also process personal data where necessary for our legitimate interests in identifying and assessing suitable candidates, managing an effective recruitment process, verifying information relevant to an application, maintaining appropriate recruitment records and establishing, exercising or defending legal claims (Article 6(1)(f) GDPR). When we rely on our legitimate interests, we consider whether those interests are overridden by your interests, fundamental rights or freedoms.

Where processing is necessary to comply with employment, immigration, tax or other legal requirements, we process your personal data to comply with our legal obligations (Article 6(1)(c) GDPR).

Where you consent to being considered for future employment opportunities, we process and retain your personal data on the basis of your consent (Article 6(1)(a) GDPR). You may withdraw your consent at any time.

If we need to process special categories of personal data, we do so only where permitted by applicable law, including where necessary to comply with obligations or exercise rights in the field of employment law or, where appropriate, on the basis of your explicit consent.

6. Who we share your personal data with

We may share your personal data, where necessary, with:

• the Cinobo Employers and authorised personnel involved in the recruitment process;
• recruitment agencies and providers of recruitment platforms, tests or assessments;
• providers of hosting, communications and information-technology services;
• professional advisers, including legal and accounting advisers;
• public authorities, courts or other bodies where disclosure is required by law or necessary to protect our legal rights; and
• another organisation in connection with a proposed corporate transaction, where appropriate safeguards apply.

We do not sell your personal data.

7. How long we keep your personal data

We retain your personal data for the duration of the recruitment process and for a limited period afterwards where necessary to respond to questions, demonstrate that the recruitment process was conducted appropriately, or establish, exercise or defend legal claims.

If you consent to being considered for future employment opportunities, we retain your application for as long as it remains relevant for that purpose and your consent remains valid, unless you withdraw your consent earlier. We periodically review the information retained for this purpose and delete or anonymise it when it is no longer relevant.

Where you are hired, information relevant to your employment is transferred to your personnel file and retained in accordance with the applicable employee privacy and retention rules.

8. Your rights

Depending on the circumstances and subject to applicable data protection law, you may have the right to:

• access your personal data;
• request correction of inaccurate or incomplete personal data;
• request deletion of your personal data;
• request restriction of processing;
• object to processing based on our legitimate interests;
• receive personal data that you provided to us in a structured, commonly used and machine-readable format, where the right to data portability applies;
• withdraw your consent at any time where processing is based on consent; and
• lodge a complaint with the competent data protection authority.

Withdrawing consent does not affect the lawfulness of processing carried out before its withdrawal.

To exercise any of your rights, please contact us at gdpr@cinobo.com. 

Schedule 1 – Cinobo Employers