Legal

GDPR

A simple, human-readable overview of how we think about GDPR. The full legal version is in our Privacy Policy.

Overview

How we handle personal data

AndHire works with clients, candidates and recruiting partners. Because recruiting involves personal data, we keep our process structured and careful. This page gives a simple, human-readable overview of how we think about GDPR. The full legal version is in our Privacy Policy.

Our role

Our role

Depending on the situation, AndHire may act as a data controller or a processor. In most recruiting processes, we decide how candidate and client contact data is used for sourcing, screening and communication. In that case, we act as a controller. In some client-specific workflows, we may process data based on client instructions. In that case, a separate data processing agreement may be required.

Data

What we collect

We collect only data that is relevant for recruiting and business communication. This may include candidate profile data, CVs and career history, skills and experience, salary expectations, availability, interview notes, client contact details, role requirements and business communication.

Purposes

Why we use data

We use data to understand hiring needs, assess candidate fit, build candidate shortlists, communicate with candidates and clients, manage hiring processes, improve our recruiting service and meet legal and business obligations.

AI

AI in our process

We may use AI tools to make recruiting faster and clearer. AI may help with CV summaries, candidate comparisons, role matching support, interview note structuring and client-ready profile drafts. AI does not make final decisions. Final review, recommendation and client communication remain human-led.

Minimization

Data minimization

We aim to collect and share only what is needed. For example, client-facing candidate summaries focus on professional experience, skills, role fit, availability and compensation expectations. Personal details that are not needed for the hiring decision are avoided.

Partners

International partners

AndHire may work with trusted recruiting partners outside the EU/EEA, including in China. When personal data is involved, we use limited access, clear user permissions, contractual safeguards, data minimization, secure systems and documented partner responsibilities.

Your rights

Your rights

You can contact us if you want to access, correct, update or delete your data. Email: privacy@andhire.com. We will review your request and respond according to applicable law.

Contact

Contact

For all privacy and GDPR questions: AndHire GmbH, Schleemkoppel 18, 22117 Hamburg, Germany. privacy@andhire.com