Legal Documents

1. Roles

Skillioz processes personal data only on behalf of the Customer.

2. Subject Matter

Processing of personal data within the Skillioz ATS platform, including:

• Candidate CVs/resumes
• Contact details
• Recruitment data (applications, notes, evaluations)

3. Purpose of Processing

To provide ATS functionality, including:

• Candidate management
• CV parsing and storage
• Recruitment workflows
• Communication tools

4. Types of Personal Data

• Name, email, phone
• CV/resume content
• Employment and education history
• Application-related data

5. Data Subjects

• Job applicants
• Candidates
• Potential hires

6. Processor Obligations

Skillioz AI shall:

• Process data only on documented instructions from Customer
• Ensure confidentiality of personnel
• Implement appropriate technical and organizational measures
• Assist Customer with GDPR obligations (access, deletion, etc.)
• Notify Customer of personal data breaches without undue delay
• Not use data for its own purposes

7. Sub-Processors

Skillioz may use sub-processors (e.g., cloud, AI providers).

• All sub-processors are bound by GDPR-compliant agreements
• Customer authorizes use of sub-processors
• List available upon request

8. International Transfers

If data is transferred outside the EEA:

• Standard Contractual Clauses (SCCs) are used
• Adequate safeguards are ensured

9. Data Retention

• Data is retained as instructed by Customer
• Upon termination, data will be deleted or returned

10. Assistance

Skillioz will assist Customer with:

• Data subject requests
• Security obligations
• DPIAs (where applicable)

11. Security

Skillioz implements:

• Access controls
• Encryption (where applicable)
• Monitoring and protection systems

12. Audits

Customer may request reasonable information to verify compliance.

13. Liability

Each party is responsible under GDPR for its role.

14. Term

This DPA applies as long as personal data is processed.