• Personal data processed in the platform is encrypted both at rest in the system and during transmission (encryption in transit and at rest).

• Personal data is stored on servers within the EU/EEA (Ireland and Germany).

• Assessio's DPA with the sub processorsub processorss based on Standard Contractual Clauses (SCC).

• Assessio's sub processors provide transparency reports (Transparency Reports)

• ISO 27001 certification

• Two-factor authentication for login & Single Sign On (SSO) available.

• In addition to the above security measures, we have also developed an anonymization/pseudonymization function in our platform Ascend. This, in accordance with the European Data Protection Board's recommendations regarding supplementary measures during transfers, more specifically Use Case 2. This function acts as an additional guarantee of GDPR compliance in the event of a potential involuntary transfer.

We have developed our services with privacy by design and default in mind. This means that our systems support basic data protection principles such as data minimization. Personal data that is no longer necessary to achieve the purpose must be deleted. Within Assessio, standard times are used for checking and, where applicable, deleting personal data. However, you as Controller have full control over this and set the rules for when personal data is to be deleted automatically.

We only process the personal data we are instructed by our customers to process. The categories of personal data vary depending on the service. But most often it is the candidates' names, e-mail addresses and assessment results. For more information look at the instructions for the respective service.

No. The European Data Protection Board has clarified in its guidance 05/2021 that there is no third country transfer just because a European established company has an overseas parent company.

Within the EU, more information can be found under in our list of sub-processors. 

We work with a number of third-party service providers. We require that all our suppliers work to the same high standard as Assessio. We regularly audit our sub processors to make sure they comply with necessary certifications and established processes.

Assessio process personal data in accordance with given instructions from our clients. The purpose is to deliver the service our clients purchased from us. For more information, take a closer look at our DPA, based on the European Commission's Standard Contractual Clauses (SCC).

Yes, this feature is available in Ascend.

We have developed our services with privacy by design and default in mind. This means our systems support basic data protection principles such as legality and transparency. Our platform enables you to carry out the processing based on the legal basis you consider correct.

We have developed our services with privacy by design and default in mind. This means our systems support basic data protection principles such as transparency. Candidates have the right to be informed about both the collection and use of their personal data and their rights. The information must include, among other things, the purpose of the processing, the storage period, the type of data that will be processed and who will have access to the data. Candidates should also be informed if there is automated decision-making involved (and if so the logic behind it), as well as if data will be transferred outside the EU/EEA.

Candidates also have the right to receive a register extract of what data is processed. Please note that this information must be provided to the candidate at the time of collection.

The information must be transparent, easily accessible and in simple language.

Our platform Ascend enables you to link to your privacy policy and thereby comply with your obligation to provide information.

We have an established processes in place to respond to candidate exercise of rights. When a candidate contacts us, we inform our client (data controller) as soon as possible you. The client can hereafter decide to delete data. We will also inform the candidate we have informed our client and the client will get in contact.