RoleCanary
  • How it works
  • Coverage
  • Pricing
  • Blog
  • Changelog
Become Compliant →
Legal

GDPR & Your Rights

Applies to EEA and UK users · Last updated: 1 March 2025

Our commitment to GDPR

The General Data Protection Regulation (GDPR) gives individuals in the EEA and the UK strong rights over their personal data. Our EU data controller is Role Canary BV. Our Data Protection Officer: [email protected].

What data we hold about you

  • Identity data: name, job title
  • Contact data: work email address
  • Professional data: company name, number of open roles
  • Technical data: IP address, browser, session data
  • Usage data: job ad URLs submitted, scan results viewed
  • Billing data: billing address (payment details held by Stripe)

We do not process any special category data (Article 9 GDPR), and we do not process personal data of candidates or job applicants.

Your rights under GDPR

Right of access

Request a copy of all personal data we hold about you (Subject Access Request).

Right to rectification

Ask us to correct any inaccurate or incomplete data.

Right to erasure

Request deletion of your data where there is no compelling reason to continue processing.

Right to restriction

Ask us to restrict processing in certain circumstances.

Right to portability

Receive your data in a machine-readable format for transfer to another controller.

Right to object

Object to processing based on legitimate interests or for direct marketing.

How to exercise your rights

Email [email protected] with subject "GDPR Request — [type]". We will verify your identity and respond within 30 days at no charge.

International data transfers

Your data may be transferred to the United States. We rely on Standard Contractual Clauses (SCCs, Decision 2021/914) for these transfers. Copies available on request.

Legal bases for processing

  • Art. 6(1)(b) — Contract: Delivering the Service under our agreement
  • Art. 6(1)(f) — Legitimate interests: Security, fraud prevention, product improvement
  • Art. 6(1)(c) — Legal obligation: Tax records and other mandatory retention
  • Art. 6(1)(a) — Consent: Marketing emails and non-essential cookies

Lodge a complaint

Our lead supervisory authority in the EU is the Autoriteit Persoonsgegevens (Dutch DPA): autoriteitpersoonsgegevens.nl. UK users may contact the ICO: ico.org.uk.

Contact our DPO

[email protected] · Role Canary BV, Keizersgracht 482, 1017 EG Amsterdam

RoleCanary

Automated job ad compliance for HR & TA teams. Catch violations before they become fines.

Product
  • How it works
  • Coverage
  • Pricing
  • Free scan
Resources
  • Blog
  • Compliance guides
  • About
Company
  • Contact
  • Security
<