Legal
Privacy Policy
Last updated July 2026
Who we are
CandiDesk is a recruitment technology platform built and operated by Gloura AI in Vienna, Austria. This policy explains what personal data we collect when you visit this website or use our product, why we collect it, and what rights you have over it. We have written it in plain language on purpose. If anything here is unclear, write to us at nikon.mazur@candidesk.io and a person will answer.
Data we collect on this website
If you book a demo or contact us, we store the contact details you give us and use them only to respond and to talk to you about CandiDesk. We do not buy visitor lists, we do not sell your address, and we do not add you to unrelated mailing lists.
This website itself keeps data collection to a minimum. We do not run advertising trackers. Basic technical logs, such as requests to our servers, are kept for security and reliability and are deleted on a rolling basis.
Data we process in the product
When a recruitment agency uses CandiDesk, two very different kinds of personal data are involved. The first is customer account data: names, work email addresses, and billing details of the people at the agency. For this data, CandiDesk is the data controller.
The second is candidate data: the CVs, conversations, call transcripts, and screening results that agencies process through the platform. For this data the agency is the data controller and CandiDesk acts strictly as a data processor on the agency's instructions. Our dedicated GDPR page explains this split, and every right you hold under it, in detail.
How we use data
We use personal data to provide and improve the service, to communicate with customers, to meet legal obligations, and to keep the platform secure. We do not use candidate data to train models for other customers, and we do not sell personal data to anyone, for any reason.
Cookies
This site uses only what is technically necessary. Your language preference is stored locally in your browser. We do not set advertising or cross site tracking cookies.
Sharing and transfers
We share data only with service providers who help us run CandiDesk, under contracts that hold them to the same standards we hold ourselves. Where any processing happens outside the European Economic Area, we rely on the safeguards described on our GDPR page, including Standard Contractual Clauses.
Retention
We keep personal data only as long as it is needed for the purpose it was collected for, or as long as the law requires. Candidate data inside the product follows each agency's own retention settings and is swept automatically when those windows expire.
Your rights
You can ask us at any time what data we hold about you, ask us to correct it, or ask us to delete it. You can also object to processing, ask for a copy you can take elsewhere, and complain to a supervisory authority. Each of these rights is explained in plain language on our GDPR page. To exercise any of them, email nikon.mazur@candidesk.io.
Contact
For anything related to privacy or data protection, contact nikon.mazur@candidesk.io. We answer quickly and we do not hide behind forms.
