Privacy notice for job applicants
Who we are. Cercle d.o.o., Ulica Divka Budaka 1A, 10000 Zagreb, Croatia, OIB 29060223576 ("CERCLE", "we"), is the controller of the personal data you send us when you apply. Contact: .
What we collect. Whether you apply through the form on our website or by email, we collect your name, email address, the role you apply for, any link you give us, your note or message, your CV and anything in it, and the date you applied. Our spam check (Cloudflare Turnstile) processes technical data such as your IP address and browser signals to tell people from bots. It does not read the form.
Why, and on what legal basis. To assess your application and decide whether to offer you a role: steps taken at your request before entering into a contract (GDPR Art. 6(1)(b)) and our legitimate interest in recruiting (Art. 6(1)(f)). If you tick the box, to contact you about future roles for 12 months: your consent (Art. 6(1)(a)), which you can withdraw at any time.
Who sees it. CERCLE's partners who take hiring decisions, and the engineers you'd meet in the process. Your data is stored in our Microsoft 365 environment. Microsoft acts as our processor, and so does Cloudflare for the spam check. We do not sell your data or use it for anything else.
Outside the EU. Microsoft and Cloudflare may process some of this data outside the European Economic Area, including in the United States. Where they do, the transfer is covered by the EU–U.S. Data Privacy Framework or the European Commission's standard contractual clauses.
How long we keep it. 180 days after we decide on your application, then we delete it. If you agreed to be contacted about future roles, 12 months from your application, unless you withdraw sooner. If we hire you, your application becomes part of your employee file.
Do you have to give us this data? No. But without your CV and a way to reach you, we can't consider your application.
Your rights. You can ask for access to, correction or deletion of your data, restriction of processing, data portability, or object to processing, by writing to us at the address above. You can withdraw consent at any time. You can complain to the Croatian data protection authority, Agencija za zaštitu osobnih podataka (azop.hr).
No automated decisions. A person reads every application. We make no decisions about you by automated means alone.
Last updated 8 October 2026.