Privacy Policy
At a Glance
- Your data is hosted in the EU - we do not store data in the United States
- ProScore is a decision-support tool, not an automatic judge
- You can request deletion of your data at any time
- DPO contactable at dpo@open-hr.work for any questions
This policy describes how Open HR collects, uses and protects your personal data on our website and professional reference verification platform.
Open HR
SASU (French simplified joint-stock company)
Capital social : EUR 1,500.00
60 rue Francois Ier 75008 Paris FranceRCS : Paris 994 927 242
EUID : FR7501.994927242
3.1Candidates
- Identification data: name, email, telephone
- Professional data: career history, positions, skills
- Identity verification: identity document (via IDnow)
3.2Employers
- Company data: company name, registration number, address
- Representative: name, position, contact details
- Billing: payment details (via Stripe)
3.3Referees
- Identification: name, professional email, telephone
- Professional data: position, relationship with candidate
- Reference questionnaire responses
Legal bases for processing
| Purpose | Legal Basis | Data |
|---|---|---|
| Verification service | Performance of contract | Identification, career, references |
| Account management | Performance of contract | Identification, login |
| Identity verification | Fraud prevention (legitimate interest) | Identity document |
| Billing | Legal obligation | Payment data |
| ProScore generation | Performance of contract | Questionnaire responses |
| Service improvement | Legitimate interest | Anonymized navigation |
In plain terms: We use an algorithm to analyze responses from your former colleagues and calculate a professional reliability score.
How it works:
- Several people who supervised you complete a questionnaire
- A score from 0 to 100 is calculated reflecting your professional reliability
- Questions are tailored to your sector and target position
Important: ProScore is a decision-support tool. Employers make final hiring decisions.
Our service providers
| Provider | Service | Location |
|---|---|---|
| Bunny.net | Marketing site CDN | Slovenia (EU) |
| Clever Cloud | Application platform | France |
| OVHcloud | MongoDB database | France |
| Brevo | Transactional emails | France |
| Plausible | Analytics (no cookies) | EU |
| IDnow | Identity verification | Germany |
| Stripe | Payments | Ireland/USA |
Retention periods
| Data | Duration |
|---|---|
| Active account | Duration of relationship |
| References | 3 years |
| After account deletion | 30 days |
| Billing | 10 years (legal requirement) |
| Connection logs | 1 year |
Access
Obtain confirmation of processing and access to your data
Rectification
Correct inaccurate or incomplete data
Erasure
Request deletion of your data
Restriction
Restrict processing of your data
Portability
Receive your data in a structured, readable format
Objection
Object to processing based on legitimate interest
Withdraw consent
Withdraw your consent at any time
Automated decisions
Request human intervention for ProScore
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
- Right to Know: You can request disclosure of the categories and specific pieces of personal information we have collected about you.
- Right to Delete: You can request deletion of your personal information, subject to certain exceptions.
- Right to Opt-Out: You have the right to opt-out of the sale or sharing of your personal information. Note: Open HR does not sell your personal information.
- Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
To exercise your CCPA rights, contact us at dpo@open-hr.work or use the 'Do Not Sell My Personal Information' link in our footer.
Open HR - DPO
60 rue Francois Ier 75008 Paris France