Privacy Policy
Last updated: 8 April 2026
1. Who we are
HireSignal (hirecheck.eu) is an independent transparency project operating in the European Union. The controller for personal data processed through this site can be contacted at privacy@hirecheck.eu.
2. What we collect
- Reports: the company name, job title, country, outcome category, response-time category, and any optional free-text comment you choose to submit. Reports are published in anonymised form.
- Technical data: IP address (used only for rate-limiting and spam prevention, never published, retained up to 30 days), HTTP user agent, timestamps.
- Article 22 letter tool: the details you type are processed entirely in your browser. We do not store them.
- Account data (future): when company claim functionality goes live, verified owners will provide an email address and a proof-of-domain-control artifact.
3. Legal bases (Art. 6 GDPR)
- Legitimate interest (Art. 6(1)(f)) for publishing anonymised hiring reports in the public interest of labour-market transparency and consumer-protection-style accountability.
- Consent (Art. 6(1)(a)) when you voluntarily submit a report.
- Contractual necessity (Art. 6(1)(b)) for any future paid company account functionality.
4. Your rights
Under the GDPR you have the right to access, rectify, erase, restrict, port, and object to processing of your personal data, and to withdraw consent at any time. You may also lodge a complaint with your national supervisory authority (in Estonia: Andmekaitse Inspektsioon, aki.ee).
Because reports are anonymised on publication, we cannot always connect a published entry back to a specific individual. If you can identify the report (e.g. by company, date, and outcome), contact us and we will honour valid erasure requests within one month.
5. Retention
- IP addresses used for rate-limiting: up to 30 days.
- Reports: indefinitely, unless an erasure request is honoured.
- Server logs: up to 90 days.
6. Sharing
We do not sell personal data. Aggregated, anonymised datasets may be released under an open-data licence. Processors we use include our VPS hosting provider (EU-based) and, optionally, Supabase (EU region) as a database backend.
7. Cookies
HireSignal uses only technically necessary cookies/local-storage items required for the site to function. We do not use advertising or third-party tracking cookies.
8. Changes
We may update this policy; material changes will be announced on the site.