1. Data controller
This website (kapitalhr.com) is operated by Kapital HR, with its office at Bd. Aviatorilor 78, etaj 1, Sector 1, București, Romania. For any request regarding your personal data, you can reach us at office@kapitalhr.com or +40 724 127 059.
2. What we collect
Depending on how you interact with our site, we may collect:
- Contact form data: first name, last name, email, phone (optional), subject of the request, and your message.
- Candidate application data: CV, cover letter, professional history, contact information, and any details you choose to share with us during the recruitment process.
- Technical data: strictly necessary information for the website to function correctly (Lenis smooth-scroll preference, music-player preference, and your cookie-consent choice).
3. Why we process your data
- to respond to questions and inquiries about collaborations;
- to manage recruitment processes and assess candidates for our clients' open roles;
- to recommend opportunities that fit your professional profile;
- to comply with applicable legal obligations.
4. Legal basis
We process your data on the following grounds:
- your consent (Art. 6(1)(a) GDPR) — for contact and for adding your CV to our database;
- our legitimate interest (Art. 6(1)(f) GDPR) — to evaluate candidates against specific roles and to maintain professional relationships;
- performance of a contract (Art. 6(1)(b) GDPR) — for recruitment engagements with our clients.
5. Retention periods
- Messages received through the contact form — 3 years from the last interaction.
- CVs of candidates not selected for a role — 6 months, unless you explicitly ask us to keep them for future opportunities.
- CVs of active candidates in pipeline — for the duration of the search mandate, plus 12 months.
- Cookie-consent records — 12 months from the moment they are saved.
6. Recipients
We may share your data with:
- Our clients who have engaged Kapital HR for a specific search, only with your explicit consent for each process.
- Assessment partners (assessment centers, reference checks) — strictly for the purpose of evaluation.
- juridice.ro, within the Legal Talent Search service, for candidates from the legal sector applying through this joint channel.
- IT service providers hosting our website and database (processors contracted under GDPR obligations).
We do not sell personal data and we do not transfer data outside the European Economic Area without adequate safeguards.
7. Your rights
Under the GDPR, you have the right to:
- access your data and receive a copy;
- rectify data that is incorrect or incomplete;
- erasure ("the right to be forgotten"), under the conditions set out by law;
- restrict processing;
- data portability;
- object to processing, including profiling;
- withdraw consent at any time, without affecting the lawfulness of previous processing.
8. How to exercise your rights
Send a written request to office@kapitalhr.com. We will reply within 30 days. For complex requests, this period may be extended by up to two months, in which case we will inform you within the first month.
9. Complaints
If you are not satisfied with how we handle your data, you can lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP) — B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, Bucharest, Romania, phone +40 318 059 211, email anspdcp@dataprotection.ro, web www.dataprotection.ro.
10. Security
We apply reasonable technical and organisational measures to protect your data: TLS encryption for all transmissions, role-based access control, records of processing activities, and contractual confidentiality obligations for our technical partners.
11. Cookies
For details about cookies and how we use them, see our Cookie Policy.
12. Changes
We may update this policy from time to time. The current version, with the date of the last update, will always be available on this page.