Processing personal information
We are the data processors and not the data controllers of the information on our platform for purposes of GDPR. Our EEA or Switzerland based customers, who control their customer data and send it to Recruit CRM for processing, are the “controllers” of that data and are responsible for compliance with GDPR. In particular, Recruit CRM’s customers are responsible for complying with the regulation and relevant data protection legislation in the relevant EEA member state before sending personal information to Recruit CRM for processing. We work with our customers to help them provide notice to their customers concerning the purpose for which personal information is collected. Recruit CRM has all the provisions to help the EU citizens protect their data and we are making continuous efforts to help our clients protect data by having all the provisions in place to fall in line with GDPR.
We store and process data, including personal information, in the United States and the European Economic Area (“EEA”) and possibly in other countries through third parties that we use to operate and manage the Service(s). When you access or use our Websites or the Service(s), or otherwise provide information to us, you are consenting, on behalf of you and your authorized agents or End-Customers, (and representing that you have the authority to provide such consent) to the processing and transfer of information in and to the United States and other countries which may have different privacy laws from your or their country of residence. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Policy. We may enter agreements with our customers located in the EEA to provide them access to our Service(s), which includes the processing of information relating the End-Customers.
We do not own, control or direct the use of the information stored or processed on our platform, and in fact we are largely unaware of what information is being stored on our platform and only access such information as reasonably necessary to provide the Service(s) (including to respond to support requests), as otherwise authorized by our customers or as required by law.
It shall be our customers' responsibility to inform the End-Customers about and obtain necessary consent for any personal information that is collected through our customer's use of the Service(s). As the processors of personal information on behalf of our customers, we follow their instructions with respect to the information they control to the extent consistent with the functionality of our Service(s). In doing so, we implement technical, physical and administrative measures against unauthorized processing of such information and against loss, destruction of, or damage to, personal information as more fully described under the section below entitled, "Protection of Information".