Privacy Policy

Last updated: 2026-09-24

AppStaff operates an industrial staffing platform connecting industrial companies and factories with recruiters, staffing and outstaffing providers, and available specialists across Europe. This Privacy Policy explains what personal data we handle, why we handle it, and what control you have over it. It is written to align with the EU General Data Protection Regulation (GDPR) and applies to every visitor, candidate, and client account on this website.

What data we collect

We only collect data that is genuinely needed to run an industrial staffing service:

  • Account details — name, email, password hash, country of residence, phone number.
  • Candidate and specialist profile — profession and qualification level, work experience, professional certificates and licences (for example, welding certificates or driving licences), travel documents, availability dates, salary or rate expectations, languages, and a CV file if you upload one.
  • Company and recruiter profile — company name, industry and business details, contact person, billing details.
  • Communication data — messages exchanged on the platform (including the internal chat), offers and applications, support emails.
  • Technical data — IP address, browser type, and basic server log entries used to keep the site secure and stable.

We do not collect special-category data such as health, religious belief, or biometric data, and we ask you not to upload such information into free-text fields.

How we use it

  • Match available specialists with workforce requests and let companies review offers and shortlist specialists.
  • Authenticate logins and protect accounts from abuse.
  • Send transactional emails (updates on requests, offers and applications, password resets, invoices).
  • Improve the platform based on aggregated, non-identifying usage patterns.
  • Meet legal obligations, such as accounting and responding to lawful requests.

Legal basis for processing

  • Contract — to provide the staffing platform service you signed up for.
  • Legitimate interest — site security, fraud prevention, and core analytics.
  • Consent — when you opt in to optional notifications or marketing emails. You can withdraw consent at any time.
  • Legal obligation — tax, accounting, and responses to lawful authority requests.

Who we share with

Candidate and specialist profiles, offers and applications are shared with the companies you apply to or send offers to. Beyond that, we share data only with vetted processors that help us run the service: our hosting provider, our email delivery provider, and our payment processor for paid plans. We do not sell personal data and we do not share it with advertising networks.

Cookies and tracking

AppStaff uses a minimal cookie set: a session cookie to keep you logged in and preference cookies for language and currency. We do not run Google Analytics, Meta Pixel, or any third-party tracker. Details are in our Cookie Policy.

Your GDPR rights (access, rectification, erasure, portability, objection)

  • Access — request a copy of the data we hold about you.
  • Rectification — correct inaccurate or outdated information.
  • Erasure — ask us to delete your account and personal data.
  • Portability — receive your data in a structured, machine-readable format.
  • Objection and restriction — object to processing based on legitimate interest, or ask us to pause it.
  • Complaint — lodge a complaint with your national data protection authority.

Most of these actions can be done directly inside your account; for anything else, write to us at the address below and we will respond within 30 days.

International transfers

Our servers are located within the European Union. If any processor we use is outside the EU/EEA, the transfer is covered by the European Commission's Standard Contractual Clauses.

Data retention

Active accounts are kept while in use. Closed candidate accounts are deleted within 12 months of closure. Billing records of company and recruiter accounts are kept for 7 years to meet accounting law. Server logs are kept for 90 days.

Children's privacy

AppStaff is a B2B service for companies, recruiters and staffing providers, and for working specialists. It is not intended for anyone under 16, and we do not knowingly collect their data.

Security

The site is hosted on Hostinger infrastructure inside the EU. We use HTTPS across the platform, hashed passwords, restricted database access, and regular backups. No system is perfect, but we treat security as an ongoing job, not a checkbox.

Changes

If we update this policy, the new "Last updated" date will appear at the top of the page. Material changes will also be announced inside your account.

Contact us

Questions, data requests, or complaints: privacy@appstaff.online. We aim to reply within five working days.