Know Your Rights

Under EU regulations, you have the right to know how your job application was processed.

GDPR Article 15

Right of Access

You have the right to obtain from a company confirmation of whether your personal data is being processed, and access to that data including the purposes and categories of data.

GDPR Article 22

Automated Decisions

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you.

EU AI Act

AI Transparency

AI systems used in employment and recruitment are classified as high-risk. Companies must ensure transparency, human oversight, and inform candidates when AI is used.

What You Can Do

Take Action

Send a data access request to any company you've applied to. They are legally required to respond within 30 days. Use our template below to make it easy.

Generate Your Email

Generate Your Email

Email Preview

Subject: GDPR Data Access Request — Application for [Position]

Dear [Company Name] HR/Data Protection Officer,

My name is [Your Name] and I applied for the position of [Position] on [Date].

Under Article 15 of the General Data Protection Regulation (GDPR) and Article 22 regarding automated decision-making, I am writing to request the following information about my application:

1. Whether any automated decision-making or profiling was used in processing my application (Article 22(1))
2. If so, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing (Article 15(1)(h))
3. The categories of personal data processed during my application
4. The specific criteria used to evaluate my candidacy
5. Whether my application was reviewed by a human being

Additionally, under the EU AI Act (Regulation 2024/1689), if an AI system was used in the recruitment process, I request:
- Notification that an AI system was used (Article 50(1))
- Information about the AI system's purpose and functioning

I kindly request a response within 30 days as required by Article 12(3) of the GDPR.

Thank you for your attention to this matter.

Best regards,
[Your Name]