Skip to main content
GDPR for Sourced Candidates

How are GDPR settings applied to candidates that were added to the system by you or your colleagues and didn't apply themselves.

Updated over a week ago

What is GDPR and is it applicable to me?

Since May 25, 2018, the General Data Protection Regulation (GDPR) is in effect, reviewing how the personal data of EU citizens is being collected and shared. With TalentLyft, you can set up your GDPR settings to be 100% GDPR compliant. Here is the link to the official regulation document, published in the Official Journal of the European Union.

How does TalentLyft help me and my company?

GDPR states that there are two legal bases on which you can store and process candidates’ personal data:

  1. Consents for data processing and data retention or

  2. Legitimate interest to store their data

Sourced candidates are passive candidates that were found and added to your system. These candidates didn’t apply for the job themselves and they haven’t given you their data processing and data retention consents. The legal base for you to use their personal data is your legitimate interest to hire them.

Sourced candidates will appear on the Needs to be deleted list when:

  • The job they applied for is archived or

  • The inactivity period has expired

How to be GDPR compliant?

You should always inform sourced candidates that you stored their profile information in your database and give them access to the personal data that you stored. TalentLyft candidate portal allows candidates to view, export, update and delete their data, so you should send them the link to the portal via email. As this is an email that you will be sending regularly, we suggest creating an email template for this purpose.

Make sure you are regularly tracking and deleting candidates that should be deleted from your system according to GDPR. The list of people that must be deleted will be generated in the Engage module, and accessed by using the "Needs to be deleted" filter.

Feel free to help yourself with the email template for Sourced candidates, that we are adding below:

Subject line: {CompanyName} is looking for a {JobTitle}

Hi {FirstName},

I am {MyName}, {MyHeadline} at {CompanyName}. I found your profile online and I was really impressed by your experience, knowledge and skills.

We are currently looking for a {JobTitle} to join our team. You look like a great candidate for the position and I wanted to let you know that we stored your profile information in our database with the purpose of potential hire for this position.

You can view, update, export or delete the stored data and read our privacy policy on this link: {CandidatePortal}

I hope you have a great day,


NOTE: While TalentLyft has consulted with legal professionals both in the creation of this article and for our own product features, we are not a law firm. All information that is used in this article is general information and is not intended as legal advice. Users should take independent legal advice regarding their own data protection policies.

Did this answer your question?