What reaches the browser of a candidate
Our pages come from one server. They load no fonts, scripts, pictures or statistics from anywhere else, and they contain no JavaScript.
A booking page sets one cookie, which makes sure that a form was sent from our page and not by another website. After a booking a second one carries the message that the booking is confirmed to the next page, and is gone five seconds later. Neither is used for statistics, so there is no cookie banner. The privacy policy lists every cookie, including those of people who sign in.
What is stored about a candidate
- name and email address
- the time of the interview and the booking page that was used
- the employees who take part, and the link to the video meeting
- a secret link with which the candidate can view and cancel the booking
The application writes one log line per request, with the method, the path, the status code and the duration. It records no IP address and not the part of the address that carries the secret link. What the web server in front of it keeps is in the privacy policy.
Who is responsible
For the data of candidates and employees your company is the controller, and we process the data on your behalf (Art. 28 GDPR). When you create your space you accept our data processing agreement. It consists of the standard contractual clauses of the European Commission (Implementing Decision (EU) 2021/915) and our annexes on what is processed and how it is protected.
Candidates are not asked for consent. Their name and email address are needed to arrange the interview they ask for (Art. 6(1)(b) GDPR), so the booking form informs them instead: it names your company and links to your privacy policy and to ours.
Where the data goes
- Email: the confirmation goes to the candidate, a notification to each interviewer.
- Calendar: if you connect Zoho Calendar, the interview becomes an entry in your calendar with the name and email address of the candidate. That data is then in the region of your Zoho account, for example the EU or the USA.
- Video: the meeting takes place at Zoho Meeting or, without a connected calendar, at Jitsi Meet (meet.jit.si), which is run from the USA. We only create the link.
- The providers that work for us, such as hosting, are listed in the privacy policy.
How long data is kept
A booking is deleted 180 days after the interview. A job does this every day, for all companies, cancelled bookings included. The entry in your own calendar is yours: it is removed when the candidate cancels, and otherwise stays until you delete it.
Employees stay until you delete them. To have your space or your account deleted, write to us. There is no button for that.
What we do not claim
There is no seal and no certificate. This page describes what the software does, so that you and your data protection officer can check it against your own rules. It is not legal advice. The legal texts are the privacy policy, the terms of use and the data processing agreement, each in English and German.