Privacy
Policy

1. Who we are

S.C. WISE STEP RECRUITING SRL, with its registered office in Timișoara, Romania, acting as a data controller, operates the website www.wise-step.ro and processes personal data for IT recruitment and selection purposes.

2. What data we collect

Depending on how you interact with us, we may collect the following categories of data:

• Identification data: first name, last name, date of birth;
• Contact data: phone number, email address, postal address;
• Professional data: CV, work experience, education, skills, certifications;
• Recruitment process data: interviews, assessments, internal notes;
• Technical data: IP address, cookies, website usage data;
• Other data you voluntarily provide in the application form or correspondence.

We recommend that you do not send us sensitive data unless it is strictly necessary for a specific role and a legal basis for processing exists.

3. How we collect data

We may collect data:

• Directly from you, via the application form, email, phone, or at interview;
• Through recruitment platforms or job boards;
• From clients, if you are recommended for a role;
• From public professional sources (business-type profiles), where permitted by law.

4. Why we process data

We process personal data for the following purposes:

• Managing applications and running recruitment processes;
• Evaluating qualifications and suitability for open positions;
• Communicating with you about employment opportunities;
• Forwarding your profile to clients when we act as a recruitment agency — profiles are shared only for relevant positions and with your agreement;
• Retaining data for future opportunities, if you have given consent or another legal basis exists;
• Complying with legal obligations and defending our rights in potential disputes.

5. Legal basis

We process data depending on context, based on one or more of the following lawful grounds:

• Taking steps at the request of the data subject prior to entering into a contract;
• The legitimate interests of the controller (organising the recruitment process, evaluating candidates);
• Your consent, including for retaining your profile in our talent database;
• Compliance with a legal obligation.

6. Who we share data with

As an IT recruitment agency, we may share your data with:

• Our clients, for roles you are being evaluated for — only for relevant positions and to the extent necessary;
• IT, hosting, email, ATS, or other recruitment solution providers;
• External consultants, auditors, lawyers, or authorities, where required by law.

We will share data only to the extent necessary for the purpose pursued and, where possible, will limit the amount of information shared.

7. International transfers

If we use providers or work with clients outside the European Economic Area, we will transfer data only with appropriate safeguards, such as standard contractual clauses or other measures provided for under the GDPR.

8. How long we keep data

We retain personal data only for as long as necessary for the purposes for which it was collected. In practice, candidate data is kept for the duration of the current recruitment process and, if you have given consent or we have a legal basis, for an additional period for future opportunities.

At the end of the applicable period, data will be securely deleted or anonymised.

9. Data security

We apply appropriate technical and organisational measures to protect data against unauthorised access, loss, alteration, or unauthorised disclosure. In the event of a security incident posing a risk to the rights and freedoms of data subjects, we will handle the situation in accordance with our legal obligations, including notifying the competent authority where required.

10. Your rights

Under the GDPR, you have the following rights:

• The right of access to your data;
• The right to rectification;
• The right to erasure;
• The right to restriction of processing;
• The right to data portability;
• The right to object;
• The right to withdraw consent, where processing is based on consent;
• The right to lodge a complaint with the ANSPDCP.

11. How to exercise your rights

For any request regarding your personal data, you can contact us at:

We will respond within the timeframe required by law and may request additional information to verify your identity.

If you believe your rights have been infringed, you may lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP).

12. Cookies

The website www.wise-step.ro may use cookies or similar technologies to improve your browsing experience. The types of cookies used, their purpose, and how they can be managed are described in the cookie banner displayed on your first visit to the site.

13. Changes to this policy

We may periodically update this policy to reflect legislative, technological, or operational changes. The updated version will be published on the website, with the date of the last update clearly indicated.