Data retention

Learn about data retention in Comeet

Updated over a week ago

This document is intended for informative purposes only. It does not constitute legal advice regarding any privacy regulations or any other matter, and may not be used or relied on for such purposes.

šŸ’”This guide is part of Comeetā€™s options for compliance with privacy regulations. See the overview here.

Comeet allows you to specify the duration of time that you will retain the data of candidates who are protected by privacy regulations. Based on the data retention period you define, you can set up the following automation rules:

  • Request candidate consent: Request consent shortly before the data retention period ends to prolong the data retention period so that you can more easily contact them in the future with relevant opportunities. Learn more

  • Automate candidate data removal: When the data retention period ends.

šŸ“ Note: You should state the data retention period that you define in Comeet in your companyā€™s updated privacy policy as well as the privacy notification you send to candidates.

Data retention periods

Initial data retention period

  1. Starts clocking when a candidate applies or is added to Comeet.

  2. Starts clocking with the last activity that was taken with the candidate including any activity logged on the candidateā€™s profile (excluding requests for consent).

    • If you donā€™t want to apply this option, select Not applicable.

Consent

Starts clocking when the candidate provides consent to an additional retention period.

  • You can send requests for consent to candidates individually or in bulk. Alternatively, you can have Comeet automatically email a consent request to candidates shortly before the data retention period ends. Learn more

Data retention per location

šŸ“¢ This feature is in a rollout.

Privacy regulations and data retention periods differ across locations. The Data retention per location feature enables companies operating in diverse regions with varying privacy compliance needs to set different data retention periods based on the data subject and position location.

For instance, if your company operates in both the U.S. and the EU, this option enables personalized data retention periods per local privacy regulations. In the U.S., you would align with the relevant regulations, while in the EU, you can adhere to GDPR.

Add new rule

  1. Navigate to Settings > Privacy.

  2. Click āž• Add rule.

  3. Add a name to identify the rule.

  4. Choose the locations to which the rule will be applied.

  5. Select the data retention period.

  6. Choose whether you want to automate data removal.

  7. Click Create.

Edit existing rule

  1. Navigate to Settings > Privacy.

  2. Click the three dots (...) next to the rule you want to edit.

  3. Click Edit.

Candidate status and data retention

āš ļø Important: Changing the data retention settings impacts existing candidates. For instance, if a candidate previously consented under a 24-month retention period and it is later extended to 36 months, the candidate is affected. Itā€™s your responsibility to let candidates know about changes to your privacy policy.

  • Non-hired candidates: Data retention settings apply to everyone except for hired candidates. This allows you, for example, to send consent requests to candidates whose status is set as ā€œIn progressā€ or ā€œOn holdā€ without any activity for an extended period and remove them automatically if they donā€™t consent to a longer retention period.

  • Hired candidates: You must establish the legal grounds for retaining the data of hired candidates or otherwise manually remove it from Comeet.

Automate data removal

You can set up Comeet to automatically remove candidate data when the data retention period ends. Select one of the following options:

  • Disabled ā€“ This will require you to manually Pseudonymize or delete candidates.

  • Pseudonymize automatically ā€“ Candidate data will be removed based on your pseudonymization settings. Selecting this option will retain the candidateā€™s activity for reporting purposes and will allow re-identification should the candidate be added again or reapply. Learn more about pseudonymization

  • Delete automatically ā€“ Candidate data will be completely removed. Candidates' activity will not appear in reports and candidates will not be re-identified if they are added again or reapply.

Have more questions? Contact us at support@comeet.co

Did this answer your question?