What does GDPR-compliant recruiting software mean?
GDPR-compliant recruiting software processes candidate data on a clear legal basis, with traceable retention periods, a deletion concept, data subject rights, and a data processing agreement (DPA). SEEK AI is operated by SEEK GmbH, based in Winterthur, works with an external data protection officer, and provides a model DPA before any contract is signed.
GDPR is the floor, not the ceiling. We treat it that way.
Four pillars of our data protection setup
What you get today. And what we deliver transparently on request.
- 01
SEEK GmbH
SEEK GmbH, registered in Winterthur. Fully bound by GDPR, no Schrems-II discussion about US parents.
- 02
External data protection officer
SECUWING GmbH & Co. KG, named in the imprint. The escalation path for data subject rights is clearly documented.
- 03
GDPR by default
Records of processing, deletion concept, role and permission model are part of our architecture. Not a patch added later.
- 04
Available on request
Model DPA, technical and organisational measures (TOM), and detailed hosting information are provided before any contract is signed.
Note: SOC 2, ISO 27001, and detailed EU-hosting statements are currently being re-evaluated. As soon as the latest reports are in we'll list them here verbatim. Until then: everything available on request.
Common questions for this page
The most relevant answers at a glance. The full catalogue lives in the FAQ.
- Yes. SEEK GmbH is based in Winterthur, works with an external data protection officer (SECUWING GmbH & Co. KG) and is built to enable GDPR-compliant sourcing. ⟨Extended once SOC 2 / ISO 27001 / EU hosting are confirmed.⟩
- SEEK GmbH is based in Winterthur and bound by GDPR. We share details on the current hosting stack on request and under NDA.
- We share the SOC 2 / ISO 27001 status on request.
- Yes. We provide a template DPA before contract close and sign one by default with every customer.