How Wortol handles personal data.
Our privacy notice: what we process, on what basis, and the rights you and your candidates have.
Who we are
Wortol B.V.
This notice is issued by Wortol B.V., a private limited company under Dutch law. For privacy questions, data subject requests, our Data Processing Agreement or our sub-processor list, contact legal@wortol.com. You also have the right to lodge a complaint with a data protection supervisory authority.
Roles
Who is responsible for what.
When your agency uses Wortol, your agency is the data controller for candidate and client data. Wortol acts as a data processor, processing that data only on your documented instructions.
For our own business data — your account details, billing and product usage — Wortol is the controller.
What we process
The data in scope.
- Mission briefs, client intake notes and role requirements you enter
- Candidate records, CVs and notes from your agency's database
- Outreach messages and their delivery status
- Account data: names, work email, role within your agency
- Product usage events used to operate and improve the service
Lawful basis & principles
How we keep processing lawful.
- Data minimisation: agents use only what the mission needs
- Purpose limitation: your data is used to run your recruitment work, nothing else
- Your agency's data is never used to train public AI models
- A Data Processing Agreement is available for every customer
- The sub-processor list is available on request from legal@wortol.com
Public scope
What this statement covers.
“GDPR compliant” describes Wortol’s product and operating approach as a processor: documented instructions, data minimisation, subject-rights support, access controls and a customer DPA. It is a Wortol statement, not a third-party certification or legal opinion about each customer’s use.
Hosting region, retention schedule, deletion procedure, current sub-processors and processing locations are confirmed for the proposed customer setup during a security review. We do not publish unverified defaults here.
Data subject rights
Access, rectification, erasure.
We support your agency in answering candidate requests for access, rectification and erasure. Because your agency is the controller, candidates should contact you first; we provide the tooling and assistance to fulfil the request within the statutory deadline.
Security
How the data is protected.
- Encryption in transit (TLS) and at rest
- Workspace isolation enforced by row-level access policies
- Role-based access: owners, admins, recruiters and viewers
- Durable audit history of agent and human actions
Full detail on our controls lives in the Trust center.
Next step / working session
Bring one real mission. See Wortol run it.
Explore the agency Brain, scheduled screening and the approvals that keep consequential decisions with your team.
Book a demo