Worst parts of this document
AI/ML Training on User Data
50Completely silent on AI training usage.
Security & Breach Notification
50No breach timeline or security standards disclosed.
Audit Data & Logging
50No audit trail or logging commitments made.
Cross-Border Transfer
55TOC mentions it, but text cuts off before explaining safeguards.
Recruitment data processed under 'legitimate interest' from public sources like LinkedIn
76We process this data for recruitment purposes... on the grounds of our legitimate interest
Provides structured GDPR-aligned data collection and usage disclosures but omits explicit data subject rights exercises, cross-border transfer safeguards, breach notification protocols, and AI training policies.
Third-party sharing listed but lacks specific data processing agreement references
76We may share personal data with the following third parties: Copper, MailChimp, G-suite...