01 / PRIVACY AND AI
Storage in the EU
Candidate and client data is stored on our own servers in the European Union (Hetzner, Germany). For calendar invitations and email we also use a processing route within the EU. We share only what the relevant service requires.
02 / PRIVACY AND AI
A European route for AI
We work with language models from multiple providers. The processing of candidate and client data takes place within the EU, even when we use a model from a different provider.
03 / PRIVACY AND AI
Shielding personal data before it reaches the language model
We remove or replace recognisable personal data in text. A name becomes [kandidaat], for example; an email address becomes [e-mailadres]. This allows the model to understand the content without that directly identifying information. Below you can read how we apply and continue to improve this protection.
At the points that pass through our PII gate, a filter removes personal data from text or replaces it with placeholders before that text is sent to a language model: phone numbers, email addresses, BSN, address and postcode, date of birth and age, and sensitive attributes such as nationality, marital status, gender and religious belief, plus the names of candidates on file with us. We work on this system every day to make it as watertight as possible. We are improving the recognition of personal data and extending the application of the filtering step by step. The level of protection varies by function and data type: not every processing operation falls under this text filter, and full anonymity is not guaranteed.
04 / PRIVACY AND AI
As little origin data as possible
For leads from social media, we deliberately retain as little as possible about their origin: only what is needed to conduct and account for the conversation.
05 / PRIVACY AND AI
Data processing agreement per client
Our role varies by phase. During recruitment and the AI conversation, Red Rocket is an independent data controller: we determine how we recruit and qualify. Once we pass a qualified profile to the employer, the employer becomes the data controller and we become the processor for that part. We enter into a data processing agreement with every employer for this purpose.
06 / PRIVACY AND AI
Consent and retention periods applied in practice
We process your data on the basis of our legitimate interest: we act as intermediary in employment and you have responded to a vacancy. You have the right to object to this. Retention periods are applied automatically: data is anonymised daily once the period expires, and the audit log is cleared after 90 days.
07 / PRIVACY AND AI
Automated assessment, and how to get a human involved
The AI recruiter puts the employer's qualification questions and assesses the answers automatically. If you do not meet an essential requirement, or score below the set threshold, no invitation is issued – that decision is made without human intervention. Even without an invitation, your conversation remains visible to the employer, along with the answers you gave. The employer always decides for themselves who to invite and hire. If you would like a person to review it after all, please contact us using the details at the bottom of this page.
08 / PRIVACY AND AI
Frequently asked questions
Where is candidate data stored?
Candidate and client data is stored on our own servers in the European Union (Hetzner, Germany). For calendar invitations and email we also use a processing route within the EU. We share only what the relevant service requires.
Which AI models does Red Rocket use?
We use language models from multiple providers. The processing of candidate and client data takes place within the EU, even when we use a model from a different provider.
What is the PII gate?
A filter that removes personal data from text or replaces it with placeholders before that text is sent to a language model: phone numbers, email addresses, BSN, address, date of birth, and sensitive attributes such as nationality and religious belief, plus the names of candidates on file with us. We improve this system daily. The text filter is a protective layer for the functions connected to it. The recognition of names depends in part on the dossier data available. Voice recordings fall outside this text filter; full anonymity is not guaranteed.
Is there a data processing agreement?
Yes. We enter into a data processing agreement with every client. Our role varies by phase: during recruitment and the AI conversation we are the independent data controller, and from the moment we pass on a qualified profile, the employer becomes the data controller and we become the processor for that part.
How long does Red Rocket retain candidate data?
Retention periods are applied automatically: candidate data is anonymised daily once the period expires, and the audit log is cleaned after 90 days. We process your data on the basis of our legitimate interest: we facilitate employment and you have applied for a vacancy. You may object to this.
Does the AI decide who gets hired?
No, but the AI automatically assesses the answers: anyone who fails to meet an essential requirement or scores below the set threshold receives no invitation, without human involvement. If the model rejects you whilst your score was sufficient, a notification goes to a team member. Your conversation remains visible to the employer, who always decides for themselves who they invite and hire. If you'd like a person to review it anyway, please contact us using the details at the bottom of this page.
Can a candidate have their data deleted?
Yes. A candidate can request access, correction or deletion; if your request concerns the recruitment and interview stage, we handle it ourselves; if it concerns what the employer does with your profile afterwards, we do that together with them.
10 / PRIVACY AND AI
Voluntary registration as a jobseeker
Do you register via our registration page without responding to a specific vacancy? Then Red Rocket stores your contact details, region, work preference and CV solely with your consent, for possible future vacancies with employers. This registration is separate from processing when you apply.
We store your registration for a maximum of 90 days. If we want to extend your registration, we ask you again via WhatsApp for consent. Only after your confirmation is the retention period extended by a maximum of 90 days. Without confirmation we automatically delete your registration when the period expires.
We use your CV for analysis and qualification with AI, to assess your profile for possible vacancies. Our model is not trained on individually identifiable data from your CV. Your CV is not passed directly to employers via this form.
You can unsubscribe, withdraw consent, request access or have your data corrected or deleted via [email protected]. Provide the email address you registered with. This has no effect on what we lawfully processed before that.
11 / PRIVACY AND AI
Questions or a request about your data?
Do you want to request access, correction or deletion, withdraw consent or request human review? Email [email protected] or call 020 241 6284. You don't need to book a business introduction meeting for this.
Also see the full privacy statement.