Privacy Policy for Job Applicants

Updated: November 2026

This policy explains how ECAS ELECTRO S.R.L. uses the personal data you send us when you apply for a job, as required by Regulation (EU) 2016/679 (GDPR).

1. Who processes your data

Controller: ECAS ELECTRO S.R.L.
Registered office: Str. Cornelia nr. 7, Sector 4, Bucharest, Romania
Telephone: +40 21 204 81 00
Email: office@ecas.ro

2. Why we use your data and our legal basis

Assessing your application, contacting you and arranging interviews: Article 6(1)(b) GDPR, steps taken at your request before entering into a contract.
Keeping an open application for future positions: Article 6(1)(b) GDPR, at your request.
Website security, including recording your IP address, preventing abuse and defending our rights in a dispute: Article 6(1)(f) GDPR, our legitimate interest in protecting our systems and being able to show how a recruitment process was carried out.
Complying with legal obligations, if an authority requests data: Article 6(1)(c) GDPR.

3. Do you have to give us this data?

There is no legal obligation to do so. However, we need your name, telephone number and email address to consider your application and contact you, and we cannot process your application without them. Your CV and message are optional.

4. How long we keep your data

Applications for a position: until they are no longer needed for that recruitment.
Open applications: until you ask us to delete them or we no longer need them for recruitment.
Applicants who are hired: the data we need moves to your personnel file and is kept in line with employment law.
Technical data, such as your IP address: for as long as needed for website security.

We may keep data for longer if the law requires it or if we need it to defend our rights in a dispute.

5. Who receives your data

The following providers process your data on our behalf:

Amazon Web Services: hosting of the website, on servers in the EU (Stockholm, Sweden).
Resend (United States): sending the email with your application and CV to us.
Microsoft (Microsoft 365): our email mailbox.

We disclose data to public authorities when the law requires us to.

6. Transfers outside the European Economic Area

Resend stores data in the United States. The transfer relies on the European Commission’s adequacy decision on the EU-U.S. Data Privacy Framework, under which Resend states it is certified, and on the standard contractual clauses adopted by Commission Implementing Decision (EU) 2021/914. If Microsoft processes data outside the European Economic Area, the same safeguards apply. You can ask us for information about these safeguards at office@ecas.ro.

7. Your rights

You have the right to:

access your data;
have your data corrected;
have your data deleted;
restrict the processing of your data;
receive the data you gave us in a structured format, so you can pass it to another controller;
object to processing based on our legitimate interest.

To use these rights, write to us at office@ecas.ro.

8. Your right to complain

You have the right to lodge a complaint with a supervisory authority.