What GDPR is
Regulation (EU) 2016/679 — the General Data Protection Regulation — is the European framework that gives you control over your personal data. It applies to any company processing data about EU residents, regardless of where its servers or team are located.
How we apply GDPR at Kapital HR
As data controller, Kapital HR:
- collects only the data strictly needed for recruitment, coaching, assessment, and communication with you;
- asks for your explicit consent before submitting your CV to a client;
- keeps data only for retention periods justified by the purposes (see Privacy Policy);
- works with IT providers under clear GDPR obligations and does not sell data.
Your rights
- Right to information — to know what data we collect about you and why.
- Right of access — to receive a copy of the data we hold.
- Right to rectification — to correct inaccurate or incomplete data.
- Right to erasure — the "right to be forgotten", under the conditions set out by the regulation.
- Right to restriction — to request the temporary suspension of processing.
- Right to portability — to receive your data in a structured format and transfer it to another controller.
- Right to object — to object to processing based on legitimate interest, including profiling.
- Right to withdraw consent — at any time, without affecting the lawfulness of previous processing.
- Right to lodge a complaint — with a supervisory authority.
How to exercise your rights
Send a written request to office@kapitalhr.com, with the subject "GDPR request". To help us identify your data, please include your full name and, if possible, the email address you used to reach out.
We respond free of charge, within 30 days. For complex or numerous requests, this period may be extended by up to two months; we will inform you within the first month.
Complaints to the authority
If you are not satisfied with our reply, you have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP):
- Address: B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, Bucharest, Romania
- Phone: +40 318 059 211
- Email: anspdcp@dataprotection.ro
- Web: www.dataprotection.ro
More details
For details about what data we collect, why, with whom we share it, and for how long, see our Privacy Policy and Cookie Policy.