This Privacy Notice explains how Andersen sp. z o.o. processes personal data when candidates and users take part in interviews, assessments or self-assessments supported by the Recruiter AI platform. We process your personal data according to the provisions of Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of Personal Data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation; hereinafter: GDPR). Below we provide you with all the important information about processing personal data:
Data Controller of your personal data is Andersen sp. z o.o. with its registered office in Warsaw, Republic of Poland, address: Rondo Organizacji Narodów Zjednoczonych 1 / XXV p., 00-124 Warsaw, entered into the Registry of Entrepreneurs of National Court Registry by the District Court for the Capital City of Warsaw in Warsaw, XII Commercial Division of National Court Registry under KRS No.: 0000773985, NIP: 5252782536, REGON: 382686004.
Contact with us is possible via:
e-mail to the address: recruitment@andersenlab.com,
mail, by sending a letter to the address: Andersen sp. z o.o., Rondo Organizacji Narodów Zjednoczonych 1 / XXV p., 00-124 Warszawa.
You can also contact our Data Protection Officer (DPO) by sending an e-mail to the address: dpo@andersenlab.com
Recruiter AI is a platform used to organise and conduct interviews, technical assessments, self-assessments and related candidate evaluations.
Depending on the specific recruitment or assessment scenario, the platform may be used to:
send invitation links to candidates;
conduct video, audio, written or task-based interviews or assessments;
record interview or assessment sessions, where enabled;
generate transcripts from audio recordings;
analyse candidate answers against role-related criteria;
generate AI-assisted summaries, feedback and assessment reports;
support authorised recruiters and technical experts in reviewing candidate suitability;
record limited technical integrity indicators during the session;
maintain technical logs for security, troubleshooting and audit purposes.
Recruiter AI is a support tool. It does not independently decide whether a candidate is hired, rejected or invited to the next stage. Final decisions are made by authorised human decision-makers. Human reviewers may accept, modify, override or disregard AI-generated outputs and may conduct their own independent assessment.
This Privacy Notice applies to you if you use Recruiter AI in connection with Andersen’s recruitment or assessment activities. In particular, it applies where:
you are an Andersen job candidate and you are invited to take part in an interview, technical assessment or other recruitment-related assessment using Recruiter AI, usually through an invitation link; or
you voluntarily complete a self-assessment using Recruiter AI.
If you complete a self-assessment, we may also give you a separate option to allow Andersen to retain your details and assessment results so that we can consider you for future recruitment opportunities. This is referred to in this Notice as the “talent pool” option.
The legal basis for processing personal data varies depending on the situations described below and depends on the interaction you have with us:
| If you are invited to, or take part in, a recruitment interview or assessment using Recruiter AI | We process your personal data to organise and conduct the recruitment process, create and manage your interview or assessment session, send you an invitation link, identify the relevant vacancy and recruitment stage, collect and review your answers, assess your professional experience, skills and role-related competencies, document the assessment process, include you in future recruitment processes, train our recruitment team, and establish, exercise or defend against legal claims. This may include your name, email address, phone number, date of birth, education, professional qualifications, employment history, spoken and written answers, completed tasks, submitted files or links, audio or video recordings, transcripts, reviewer notes, ratings and assessment reports. Legal basis: Article 6(1)(b) GDPR - processing is necessary in order to take steps prior to entering into an employment, cooperation or other contract with you, in conjunction with Article 22(1) § 1 of the Polish Labour Code - in respect of the following data: name and surname, date of birth, contact details, education, professional qualifications, and employment history, for the purpose of carrying out the current recruitment process; Article 6(1)(a) GDPR - the data subject has given consent to the processing of his or her personal data for one or more specific purposes: - based on your consent for the processing of personal data provided in the CV, application form, cover letter and other application documents in relation to other data than those indicated in the provisions of the Polish Labour Code; - based on your separate consent to participate in future recruitment processes; - based on your separate consent to the recording and transcribing of the interview for the purpose of training our recruitment team; Article 6(1)(f) GDPR - processing is necessary for the purposes of our legitimate interests, which are: - organising, managing, documenting and conducting recruitment processes, managing assessment sessions and selecting suitable candidates for relevant roles; - establishing, exercising or defending against potential legal claims related to the recruitment process (pursuant to Article 18(3a) and subsequent articles of the Polish Labour Code regarding equal treatment in employment). |
| If Recruiter AI generates AI-assisted assessment outputs | We process your personal data to generate AI-assisted outputs that support authorised human reviewers in the recruitment process. These outputs may include transcripts, summaries of your answers, interview summaries, skill-related feedback, identified strengths and areas for improvement, answer quality or relevance indicators, vacancy-related match or score indicators, recommendations for further review or development, and reports for recruiters or technical experts. Recruiter AI does not make final recruitment, employment or hiring decisions. AI-assisted outputs are advisory and are reviewed by authorised human reviewers. Legal basis: Article 6(1)(b) GDPR — processing is necessary in connection with the recruitment process and steps prior to entering into a contract with you; Article 6(1)(f) GDPR – processing is necessary for the purposes of our legitimate interests, which are supporting efficient, consistent and role-related candidate evaluation. |
| If you complete a voluntary self-assessment using Recruiter AI | We process your personal data to provide the self-assessment functionality, generate your result and provide feedback or recommendations. This may include your answers, completed tasks, assessment results, AI-assisted feedback and technical session data. Legal basis: Article 6(1)(b) GDPR — processing is necessary to provide the self-assessment service at your request; Article 6(1)(f) GDPR — processing is necessary for the purposes of our legitimate interests, which are providing, securing and improving the self-assessment functionality. |
| If you choose to join our talent pool for future recruitment opportunities | If you separately agree to join our talent pool, we process your personal data to retain your details and relevant assessment results, assess whether future opportunities may be suitable for you and contact you about such opportunities. This may include your name, email address, phone number, location, role preferences, professional information, assessment results, reports and recruiter notes relevant to future recruitment opportunities. Legal basis: Article 6(1)(a) GDPR — your consent. You may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn. |
To operate Recruiter AI and support Andersen’s recruitment and assessment processes, we use selected third-party service providers. Therefore, your personal data may be transferred to:
entities providing hosting, server infrastructure and database services, including Hetzner Online GmbH, with its registered office in Gunzenhausen, Germany;
entities providing cloud storage and cloud infrastructure services inculding Amazon Web Services EMEA SARL with its registered office in Luxembourg, Microsoft Ireland Operation Limited with its registered office in Dublin or Google Ireland Limited with its registered office in Dublin. In each of these cases, the data may also be transferred outside of the European Economic Area, to other companies from the Amazon, Microsoft or Google groups - in this case, the transfer of personal data to these entities to the USA is based on Data Privacy Framework, accepted by the European Commision;
entities providing transcription or speech-to-text services, where such services are used to generate interview or assessment transcripts;
entities providing AI and large language model services used to support the analysis of answers and the generation of summaries, feedback, assessment indicators and reports, including:
OpenAI Ireland Ltd., with its registered office in Dublin, Ireland, and OpenAI OpCo, LLC, with its registered office in San Francisco, USA;
Anthropic Ireland, Limited, with its registered office in Dublin, Ireland, and Anthropic PBC, with its registered office in San Francisco, USA;
Amazon Web Services EMEA SARL, with its registered office in Luxembourg;
entities providing technical integrity, security or anti-abuse services, where such services are used to support the security, reliability or integrity of interviews or assessments;
entities providing email delivery or platform notification services, where such services are used to send platform-related notifications, confirmations or access information;
other Andersen Group companies - the legal basis for the transfer of personal data outside EEA is the standard contractual clauses, approved by the European Commission;
external service providers and subcontractors supporting us in IT, security, maintenance, legal, compliance or audit matters, acting under appropriate contractual obligations.
Your personal data may be transferred outside the European Economic Area (EEA) in connection with our use of third-party service providers (including artificial intelligence tools providers). Such transfers are carried out in compliance with Chapter V of the GDPR, based on Standard Contractual Clauses (SCCs) approved by the European Commission, combined with appropriate technical and organizational measures to ensure data security. You have the right to obtain a copy of these safeguards by contacting us.
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Once this period ends, we securely delete or anonymize your data. The retention periods depend on how and why the data was obtained:
If you take part in an Andersen recruitment interview or assessment using Recruiter AI – video and audio recordings, as well as full transcripts, are deleted within 30 days after the recruitment process for the specific role is closed, unless they need to be retained for longer to investigate a dispute, technical issue, suspected misuse or legal claim.
Final assessment reports and basic candidate data – we retain the final assessment report, relevant assessment results, basic candidate details and reviewer notes for up to 6 months after the end of the recruitment process.
If you complete a voluntary self-assessment using Recruiter AI – we retain your self-assessment data and results for up to 30 days after the results are delivered to you, unless you choose to join the talent pool or a longer period is necessary for security, troubleshooting or legal reasons.
If you choose to join our talent pool – we retain your details and relevant assessment results for up to 12 months from the date of your consent, unless you withdraw your consent earlier or actively renew it.
Establishment, exercise or defense of legal claims – we retain necessary personal data contained in your application documents, verification tasks, and assessment notes for up to 3 years from the end of the recruitment process in which you participated. This period corresponds to the limitation period for employment-related claims (including claims regarding equal treatment and non-discrimination) under Article 291 § 1 of the Polish Labour Code.
In relation to the processing of your personal data, you have the following rights:
| Right of access | You can request confirmation from us as to whether or not your personal data is being processed and obtain information about which data are being processed and what is the purpose of the processing. |
| Right to rectification | You can request immediate rectification of inaccurate personal data and completion of incomplete personal data. |
| Right to erasure | You can request immediate erasure of personal data, when one of the following grounds applies: personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; you have withdrawn the consent to processing and there is no other legal ground for the processing; you have objected to the processing and there are no overriding legitimate grounds for the processing; the personal data have been unlawfully processed; the personal data must be erased for compliance with a legal obligation. Abovementioned shall not apply to the extent that processing is necessary: for exercising the right of freedom of expression and information; for compliance with a legal obligation which requires processing; for the establishment, exercise or defense of legal claims. |
| Right to restriction of processing | You can request restriction of processing if: you contest the accuracy of the personal data – for a period enabling us to verify the accuracy of the personal data; the processing is unlawful you oppose the erasure of personal data and request the restriction of their use instead; we no longer need personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims; you have objected to processing pending the verification whether our legitimate grounds override yours. |
| Right to data portability | You have the right to receive your personal data in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller if the processing is based on consent and the processing is carried out by automated means. |
| Right to lodge a complaint | You have the right to lodge a complaint about unlawful processing of the personal data with a supervisory authority – President of Personal Data Protection Office (address: Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw). |
| Right to object | You have the right to object to the processing of your personal data, to the extent that the processing is based on our legitimate interest. |
| Right to withdraw the consent | If personal data is processed based on the consent, you have the right to withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. The right to withdraw the consent also applies to the personal data processing in situations where other legal provisions require consent. |
We apply appropriate technical and organisational measures to protect personal data processed through Recruiter AI against unauthorised access, accidental loss, destruction, alteration, disclosure or misuse. The specific measures applied may vary depending on the nature of the personal data, the purpose of processing, and the risks involved.
Because Recruiter AI may process interview recordings, transcripts, candidate answers, assessment reports and other recruitment-related materials, access to such data is restricted to authorised persons who need it for their role.
The security measures applied to Recruiter AI include:
role-based access controls and restricted user permissions;
access to personal data only where it is necessary for the performance of the relevant role;
secure transmission of data;
logging and monitoring of system access and user actions;
restrictions on administrative access;
internal policies and procedures designed to ensure the security and confidentiality of personal data;
confidentiality obligations for personnel and service providers who may have access to personal data;
technical and organisational measures supporting the detection, investigation and handling of security incidents.
We also maintain technical and security logs to help ensure platform security, troubleshoot technical issues, prevent unauthorised access or misuse, and verify relevant activity within the system.
Recruiter AI may generate automated outputs, such as transcripts, summaries, skill-related feedback, score or match indicators, recommendations for further review and assessment reports. These outputs are intended to support authorised recruiters and technical experts.
Recruiter AI does not make final recruitment, employment or hiring decisions. Final decisions are made by authorised human decision-makers. Human reviewers may accept, modify, override or disregard AI-generated outputs and may conduct their own independent assessment.
Integrity indicators, where enabled, are supporting information only. They do not constitute proof of misconduct and must not be used as the sole basis for rejecting a candidate or making another adverse recruitment decision.
We do not ask you to provide special categories of personal data through Recruiter AI, such as health data, disability information, racial or ethnic origin, political opinions, religious beliefs, trade union membership, biometric data used for identification, or information about sex life or sexual orientation. Please do not include such information in your answers, recordings, uploaded files or other materials.
Recruiter AI is not designed to identify, infer or evaluate sensitive characteristics, including health status, disability, ethnic origin, accent, neurodiversity, emotional state, psychological condition or other protected characteristics. If you voluntarily disclose such information, we will not use it as an assessment criteria.
We reserve the right to modify or amend this Privacy Notice at its own discretion from time to time.
This version was last updated on 23.06.2026 and historic versions can be obtained by contacting us.
Cookie files
Cookies are small files that enable or facilitate the use of certain website functions. They may be saved on your device directly by us or by third parties with whom we cooperate. As part of the use of cookies, we may process your personal data, in particular such as your IP address, the history of your use of the website, or information about the device or software you are using.
The following cookies can be distinguished:
Session cookies: these are stored on your device for the time that you use our website (they are deleted when you close your browser). Session cookies enable the correct use of our website. Blocking them may result in errors or prevent you from using our website.
Persistent cookies: these are stored on your device until you delete them or until they expire.
Recruiter AI uses only strictly necessary (technical) cookies and similar technologies required for the platform to function properly. These cookies are necessary for the proper display and operation of the website. They can also detect malfunctions of the site and help to fix errors, as well as allow to verify the extent of the user's consents to other cookies. Blocking them may cause the Platform to malfunction.
It is possible to restrict or disable cookies within your device, using your browser settings. Web browsers allow you to disable all cookies or a portion of them (such as those from third parties). If you disable cookies in part, cookies generated by our website may be stored on your device, enabling the website to function properly. However, if the use of cookies is restricted, the use of our particular services provided may be limited and in some cases may not be possible.
Session cookies may remain active for up to 14 days. The session may be renewed or updated when you continue using the platform, depending on the platform’s session management settings.