This document is intended for informative purposes only. It does not constitute legal advice regarding the GDPR or any other matter, and may not be used or relied on for such purposes.
This guide is part of Comeet’s GDPR compliance options. See the overview here.
As part of your compliance with the GDPR, your company may choose to request the consent of candidates to retain their data for a longer period of time. If you wish to do so, Comeet provides an automated method to request consent and extend the data retention period accordingly.
What consent means
If candidates consent to having their data retained for a longer period of time, their candidate profiles will be retained for the duration of the consent that you specified, allowing you to more easily contact them about positions in your company. If you choose to request consent, you must configure the data retention period for consent in your GDPR settings and state your data retention period for consent in your privacy notice to candidates.
Set up consent request
Go to your GDPR settings in Comeet – Company Settings > GDPR. (this requires an Admin or Owner role)
Enable Request Consent.
To request consent by email, click on the template name to open the auto-templates for requesting consent. Revise the templates to fit your needs. To send consent request emails automatically, set to Send automatically.
Requesting consent on the application form
When you enable request for consent in Comeet, candidates who apply on your careers website will see a checkbox on the application form that allows them to provide consent. The checkbox is unchecked by default. Candidates provide consent by ticking the box and submitting the application .
Note that if you define that only candidates for positions in EU countries are subject to GDPR (see Data Subject) then the consent option on the application form will only appear on application forms for EU positions.
Send consent requests by email
When you enable request for consent in Comeet, two auto-templates are added to your templates settings:
Request consent – outreach – activated 30 days before the data retention period ends.
Request consent – reminder – activated 7 days after the previous message, in case the candidate has not responded and the time retention period was not extended by other means.
Revise the templates to fit your needs. Note that you cannot:
Edit the text of the consent and the text that appears on the buttons.
Add recipients as CC/BCC to these messages.
Set request for consent messages to be sent automatically
You can set the auto-templates to one of the following options:
Don’t send – messages will not be sent automatically but can still be sent manually
Send automatically – messages will be sent automatically. Messages will not be sent if the candidate has received a request for consent or responded to a request for consent within the previous 30 days.
Send request for consent manually
Send request for consent to a single candidate or multiple candidates at once:
On the candidate card – click on GDPR.
Select Request consent from candidate…
You can edit the message before sending.
Candidates may request to withdraw their consent. To specify that a candidate has withdrew their consent:
Go to the candidate profile
Click on GDPR
Select Candidate withdrew consent
Events of giving or withdrawing consent are logged in the candidate activity on their profile.
Have more questions? Contact us at firstname.lastname@example.org