Candidate privacy

Where your CV goes, who else sees it, the 12 months after which it is deleted, and the rights you keep over it. Nothing you send us is ever used to train a model.

This notice explains what happens to your application and your CV when you apply for a role through this website. It is written for candidates. If you are visiting the site without applying, the general Privacy Notice covers you.

Who is responsible for your data

The controller of your personal data is:

ASCENSI MANAGEMENT SRL
Registered address: Strada Azurului nr. 1, bloc 113B, scara 2, ap. 98, sector 6, București, Romania
Trade Register: J40/15/05.01.2016
CUI: 35372430
Contact for data protection: office@ascensi.ro
Applications are received at: candidat@ascensi.ro

We have not appointed a Data Protection Officer. Questions about data protection are answered at office@ascensi.ro.

What we collect

What you type into the application form

Your name
Your email address
Your phone number
Your LinkedIn profile, if you give one (optional)
Your message, if you write one (optional)
Which role you applied for

Your CV

Your CV is a file you choose. Whatever is in it becomes part of your application — typically your address, your work history, your education, and your qualifications.

Please do not send us more than we need. You do not have to include your date of birth, a photograph, your marital status, your health, your religion, your political views, your trade union membership, or any national identification number. We do not need them to assess you for a role. If your CV contains them anyway, we will not use them to assess you, and you may ask us to remove them.

Technical data

When you use the form we also process standard technical data — your IP address, your browser and operating system — to keep the form working and to stop automated abuse.

Why we process it, and our legal basis

What we do	Legal basis
Assess your application for the role you applied for, and contact you about it	Your consent — Art. 6(1)(a) GDPR, given by ticking the consent box on the form
Take steps at your request before a contract — interviews, offers, introductions to a client	Pre-contractual steps — Art. 6(1)(b) GDPR
Contact you about other roles	Your separate, optional consent — Art. 6(1)(a) GDPR, the second checkbox. You do not have to tick it, and your application for the role you applied for is unaffected if you do not.
Keep the form working and prevent automated abuse	Our legitimate interest in the security of the site — Art. 6(1)(f) GDPR

What actually happens to your CV

We keep the path your CV takes deliberately short.

Your CV is uploaded straight from your browser into private storage. It is not published, not indexed, and not reachable by a link — there is no address anyone can visit to read it.
Our server reads it, checks it is the kind of file it claims to be, and attaches it to one email, sent to candidat@ascensi.ro.
As soon as that email is sent, the stored copy is deleted.
If an upload is started and never completed — you close the tab, the connection drops — an automated job runs every hour and deletes any leftover file older than 24 hours. Nothing abandoned is left sitting in storage.

After that, your application lives in our recruitment mailbox, and the retention period below applies to it.

How long we keep your application

Your CV and the other data in your application are kept for a maximum of 12 months from the date of submission. After this period, they are permanently deleted from all our systems. This applies to every application.

The optional box on the application form decides only whether we may contact you about other roles. It does not change how long your data is kept.

We also keep the record of your consent — what you agreed to and when — for as long as we rely on it, so that we can show the choice you made.

If you are hired, your data moves into your employee file and is kept as employment law requires.

Who else sees your application

Our client. Where you are applying for a role we are filling on their behalf, your application is shared with that client. Ascensi and that client are the only two organizations that receive your application in order to consider you for the role.

Our hosting, storage and email providers. They run the website, the private storage and the mailbox on our instructions, under contract, and may not use your data for their own purposes.

We do not sell your data and we do not share it for advertising.

Transfers outside the European Economic Area

Your CV is uploaded to private storage run by our hosting provider, and that storage is in the United States. It is held there only between your upload and the email that carries your application to us: as described above, the stored copy is deleted as soon as that email is sent, and a scheduled job deletes anything left behind.

That transfer is governed by Standard Contractual Clauses approved by the European Commission. The mailbox the email arrives in is held on our email provider's servers in Switzerland, which the European Commission recognizes as providing an adequate level of protection.

Where a transfer happens, you may ask us for a copy of the safeguards that protect it.

Your rights

You have the right to:

Access — ask what personal data we hold about you and get a copy.
Rectification — have inaccurate or incomplete data corrected.
Erasure — ask us to delete your data, unless we are required to keep it.
Restriction — ask us to limit what we do with your data in certain cases.
Portability — receive the data you gave us in a structured, commonly used, machine-readable format, and have it sent to another controller where technically feasible.
Object — object at any time to processing we base on our legitimate interest.
Withdraw consent — at any time, for anything we do on the basis of your consent, including the optional box. Withdrawing does not undo what we lawfully did before you withdrew, and it is as easy to withdraw as it was to give.
Complain — to a supervisory authority.

How to use them. Write to office@ascensi.ro. We answer within 30 calendar days and it costs you nothing.

Is providing your data required?

Giving us your name, email, phone number and CV is not a statutory or contractual requirement — it is your choice. But we cannot assess you for a role without them, so if you do not provide them we cannot take your application forward.

Automated decision-making

We do not make decisions about you by automated means alone, and we do not profile you.

A person reads every application. We do not use automated screening, scoring or ranking of CVs at any stage. No software decides whether your application goes forward.

AI training

Your application is never used to train a model. Your CV, what you write on the form and anything else you send us are not used to train, fine-tune or test any artificial-intelligence or machine-learning system, and we do not give them to anyone else for that purpose.

Complaints

If you think we have handled your data wrongly, please tell us first at office@ascensi.ro — we would rather fix it. You also have the right to complain to the Romanian supervisory authority:

Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, 010336 București, Romania
anspdcp@dataprotection.ro · +40.318.059.211 · www.dataprotection.ro

People under 16

Our services are not directed at people under the age of 16 and we do not knowingly collect their data. If you believe a minor has sent us personal data, write to office@ascensi.ro and we will delete it.

Changes to this notice

If a change materially affects how we handle applications, we will say so on this page.

Contact

office@ascensi.ro for anything about your data.
candidat@ascensi.ro for your application itself.

Newsletter