GDPR Consent for Candidates
PROCESSING OF CANDIDATE DATA
Last updated: 2.09.2026
This page explains what happens to your data when you apply for a role posted by PuntoUP, send us your CV, or talk to us about a professional opportunity. It is written to be read, not ticked.
1. Who processes your data
TALENTIN HR S.R.L., with its registered office at 24 Alexandru Ivasiuc Street, Bucharest, Romania, registered with the Trade Register under no. J2022014314407, tax ID 46536032, trading as PuntoUP, is the controller of your personal data.
Data protection contact: dataprivacy@puntoup.com
2. What data we process
- identification and contact details: first and last name, email address, phone number, city;
- professional information: experience, education, skills, certifications, languages, availability, expectations regarding the role;
- the content of your CV and of any documents you send us;
- notes resulting from interviews and conversations with you;
- professional information publicly available on professional networking platforms, where we approach you directly.
We do not ask for and do not wish to receive data concerning racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health, sex life or sexual orientation. Such information has no place in a recruitment process. Please do not include it in the documents you send us; where it does appear, we remove it.
3. Why we process your data
The primary purpose is recruitment: assessing your application for a specific role, discussing that role with you and, if your profile is relevant and you agree, presenting you to the hiring client.
If you wish, we also keep your profile for future opportunities. This is a separate purpose, for which we ask for your consent separately.
Communications about our events, resources and news are likewise a separate, optional purpose, for which we ask for your consent separately. You do not receive them because you applied for a role.
4. Legal bases
Purpose | Legal basis |
|---|---|
Assessing your application for the role you applied to, and communicating with you throughout the process | Pre-contractual steps and our legitimate interest in carrying out recruitment activity — Art. 6(1)(b) and Art. 6(1)(f) GDPR |
Presenting your profile to a client for a specific position | Your consent for that specific position — Art. 6(1)(a) GDPR |
Keeping your profile in our database for future opportunities | Your consent — Art. 6(1)(a) GDPR |
Communications about PuntoUP events, resources and news | Your separate, specific consent — Art. 6(1)(a) GDPR |
Complying with applicable legal obligations | Art. 6(1)(c) GDPR |
Each consent is independent of the others and may be withdrawn at any time, with no consequences for your application and without affecting the lawfulness of processing carried out before withdrawal.
5. What we do not do with your data
- We do not sell candidate data and we do not make it available to third parties for their own marketing purposes.
- We do not send your CV to clients or partners automatically.
- We do not add you to commercial mailing lists because you applied for a role.
- We do not make selection decisions on a solely automated basis. Every application is reviewed by a person.
6. Presenting you to clients
Your profile is presented to a client for a specific position and only after you have given us your agreement for that position. We tell you in advance which company and which role are involved, so that you can decide with full information.
The client receives the professional information relevant to the role. We do not pass on information unrelated to the professional assessment.
7. How long we keep the data
We keep candidate data for 24 months from the last relevant interaction with you. Before that period expires we may ask whether you wish to remain in our database; if we do not receive a positive reply, the data is deleted or anonymised. You may request deletion at any time before that.
8. Your consent
When you send us your CV or apply through a form on our website, we ask for the following consents, separately:
Consent | Status |
|---|---|
I agree that PuntoUP may process the data in my CV in order to assess my application for the role I am applying to, and may contact me in connection with this process. | Required to process the application |
I agree that my profile may be kept in the PuntoUP database for 24 months, so that I may also be contacted about other suitable opportunities. | Optional |
I would like to receive communications about PuntoUP events, resources and news. | Optional |
Presentation to a specific client is based on the agreement you give us for that particular role, in conversation with us. It is not covered by the boxes above.
9. Your rights
You have the right of access to the data we hold about you, the right to rectification, erasure, restriction of processing and data portability, the right to object to processing based on legitimate interest, the right to object to direct marketing, and the right to withdraw your consent at any time.
To exercise these rights, write to dataprivacy@puntoup.com. We respond within one month of receiving the request.
Identity verification. We request additional information to confirm identity only where there are reasonable doubts as to the identity of the person making the request, and only to the extent strictly necessary. Ordinarily, a request sent from the email address associated with the data we hold is sufficient. We do not routinely request copies of identity documents.
Full information about how PuntoUP processes personal data is available in our Privacy Policy on the website.