GDPR Data Privacy Policy
Our commitment to protecting candidate PII, passport credentials, and verification logs under European single market privacy laws.
- Data Controller: EuroLink Gateway operates as the primary Data Controller under EU law.
- AES-256 Encryption: Identity vault documents are encrypted at rest with hardware keys.
- Right to Erasure: Full data export and permanent account deletion under Article 17.
1. Scope & Data Controller Identification
EuroLink Career Gateway ("EuroLink", "we", "our") acts as the Data Controller responsible for processing personal identity data uploaded to candidate vaults and corporate officer details collected during business KYB audits. This policy complies with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation).
2. Categories of Data Collected
Full legal name, email, phone number, passport scan, Hague Apostille degree certificates, work experience history, and police clearance records.
Company registration name, trade register ID (KRS, HRB, etc.), VAT tax registration certificate, authorized representative passport, and official business address.
3. Security Measures & Encryption Standards (Article 32)
All uploaded document files (PDFs, passport images) are stored in isolated cloud buckets using AES-256 bit encryption at rest. Database transmissions use TLS 1.3 encryption in transit. Decryption keys are isolated within hardware security modules (HSM) accessible only to authenticated microservices.
4. QR Verification & Non-PII Data Minimization
Public QR code verification pages (`/verify/{token}`) display strictly minimized non-sensitive verification parameters: reference token code, issuing corporate name, candidate initials (e.g. A.V.), issue date, and validity status. Full passport files or private contact details are never exposed publicly.
5. Your Rights Under GDPR (Articles 15 - 22)
- Right of Access (Article 15): Request a copy of all personal data held in your identity vault.
- Right to Rectification (Article 16): Update inaccurate profile credentials or documents.
- Right to Erasure (Article 17): Request permanent deletion of your account and uploaded vault files.
- Data Portability (Article 20): Receive your vault data in a structured machine-readable format.
To exercise any GDPR right, contact our Data Protection Officer at privacy@eurolinkcareer.com.