Juridique
Déclaration RGPD
HCIA – Human Capital Intelligence Agent Website: hcia.ai Last Updated: June 1, 2026
1. Our Commitment to the GDPR
HCIA – Human Capital Intelligence Agent ("HCIA", "we", "us", or "our") is committed to protecting personal data in line with the EU General Data Protection Regulation (GDPR) and the UK GDPR. This statement summarises how we comply; for full detail, see our Privacy Policy.
HCIA operates from the United Arab Emirates and offers services to users in the European Economic Area (EEA), the United Kingdom, and Switzerland.
2. Controller and Processor Roles
- For data we collect about our own users (for example, recruiter account data and website visitors), HCIA is the data controller.
- For Candidate data that a Recruiter uploads and processes through the platform, the Recruiter is the controller and HCIA acts as a processor on the Recruiter's behalf, under written terms (including a Data Processing Agreement where applicable).
3. Lawful Bases for Processing
We process personal data only where we have a lawful basis under Article 6 GDPR:
| Lawful basis | Example |
|---|---|
| Contract | Operating accounts and providing the Service |
| Legitimate interests | Security, fraud prevention, and product improvement |
| Consent | Optional cookies and marketing communications |
| Legal obligation | Complying with applicable laws |
4. Your Rights
If you are in the EEA, UK, or Switzerland, you have the right to:
- Access the personal data we hold about you;
- Rectify inaccurate or incomplete data;
- Erase your data ("right to be forgotten");
- Restrict processing in certain circumstances;
- Data portability — receive your data in a machine-readable format;
- Object to processing based on legitimate interests, and to direct marketing at any time;
- Withdraw consent at any time, without affecting prior processing;
- Not be subject to solely automated decisions with legal or similarly significant effects (see Section 5);
- Lodge a complaint with your local supervisory authority.
See our Privacy Policy for a full description of these rights and how to exercise them.
5. Automated Decision-Making
HCIA uses AI to assist with candidate screening. Directly identifying information is removed before content is processed by AI models, and no final hiring decision is made solely by automated means — a human reviews AI outputs before any hiring action. Where automated processing significantly affects you, you may request human review, express your point of view, and contest the outcome under Article 22 GDPR.
6. International Data Transfers
Because HCIA operates from the UAE, personal data may be transferred outside the EEA and UK. Where a destination does not benefit from an adequacy decision, we rely on appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission and UK International Data Transfer Agreements (IDTAs). You may request a copy of the relevant safeguards.
7. Data Security and Retention
We apply appropriate technical and organisational measures, including encryption in transit, access controls, and redaction of identifying information before AI processing. We retain personal data only as long as necessary for the purposes set out in our Privacy Policy, or as required by law. In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours where required.
8. Data Protection Contact
To exercise your rights or raise a data-protection concern, please use our legal contact form. We will respond within the timeframes required by law.
EEA users may also contact their local supervisory authority. A list is available from the European Data Protection Board: https://edpb.europa.eu/about-edpb/about-edpb/members_en.
Des questions sur cette politique ? Contactez notre équipe juridique.