Careers Privacy Notice
Daily Christians: Careers Privacy Notice
Last Updated: April 14, 2026
Effective Date: April 14, 2026
This notice explains how SIMPLISIO INNOVATION SRL (operating as “Daily Christians”, “we”, “our”, “us”) collects and processes your personal data when you apply for a job through our Careers page. This notice is separate from our main Privacy Policy, which covers the Daily Christians mobile application. Only the information in this notice applies to job applications.
1. Data Controller
- Company: SIMPLISIO INNOVATION SRL
- Address: Bucharest, Sectorul 3, Strada Nerva Traian, Nr. 27-33, Birou 6, Bl. B, Etaj 1, Ap. 6, Romania
- EUID: ROONRC.J2021014613408
- Contact: [email protected]
2. What Data We Collect
When you submit an application on our Careers page, we collect:
- Contact details: full name, email, phone number, country/city
- Professional information: social media or portfolio links you choose to share, your CV or resume file (PDF, DOC, or DOCX, up to 5 MB), your motivation (“Tell us your why”), relevant experience, availability, and your answer to “Why should we choose you”
- Faith journey: a written response describing your faith. Because this reveals information about your religious beliefs, it constitutes “special category” personal data under GDPR Article 9
- Custom questions: additional answers you may provide for specific job postings (for example, a link to a portfolio reel or your preferred software)
- Consent record: the date and time you agreed to this notice when submitting your application
- IP address: recorded alongside your application for rate-limiting, spam prevention, and abuse investigation
3. Why We Collect This Data & Legal Basis
We collect this information solely to evaluate your application and decide whether to invite you for an interview or make you an offer.
Explicit Consent (GDPR Article 6(1)(a))
We process the personal data you submit on the application form based on your explicit consent. You provide this consent by checking the required consent box when submitting your application. You can withdraw your consent at any time by emailing [email protected].
Explicit Consent for Special Category Data (GDPR Article 9(2)(a))
Because your “Faith Journey” response reveals information about your religious beliefs, we rely on your explicit consent under GDPR Article 9(2)(a) to process this specific data. By ticking the consent box and submitting your application, you give your explicit consent to the processing of this special category data for the sole purpose of evaluating your application. Faith alignment is relevant to the nature of our work.
Withdrawing your consent will result in the deletion of your application, unless we are otherwise required to retain it by law. Providing this information is voluntary, but without it we may not be able to consider your application.
4. Automated Decision-Making
We do not use automated decision-making or profiling to evaluate applications. All hiring decisions are made by human members of our recruitment team. Our application form does not score, rank, or automatically filter applicants.
5. Who Has Access to Your Data
Only authorized members of our recruitment team have access to your application.
Service providers (data processors): Your data may be processed by the following infrastructure providers acting strictly on our behalf and under contractual obligations to protect your data:
- Our web hosting provider: stores the database and uploaded files
- Our email infrastructure: used when our team corresponds with you about your application and for internal recruitment notifications
We do not share your application with any other third parties unless:
- You explicitly authorize us to (for example, to contact a reference you have provided)
- We are required to do so by law, court order, or governmental request
We do not sell your personal data. We do not use it for marketing. We do not share it with data brokers or advertisers.
6. Where Your Data Is Stored & International Transfers
Your application is stored in our secure WordPress database, which is hosted on infrastructure located within the European Union. Uploaded CV files are stored with randomized filenames and directory listing disabled as a basic protection measure.
If any transfer of your data outside the European Economic Area (EEA) becomes necessary (for example, when our team corresponds with you via email infrastructure that routes through non-EEA servers), we rely on appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission.
7. Data Retention
- If you are hired, your application becomes part of your employee record and is retained in line with our employment records policy and applicable law
- If you are not hired, we retain your application for as long as necessary to evaluate it and consider you for similar future openings, after which it will be deleted
- If you submit an open application (not tied to a specific role), we retain it for as long as necessary to evaluate it for suitable openings, after which it will be deleted
- You can request immediate deletion at any time by emailing [email protected]
- Your IP address is retained alongside your application and is deleted at the same time as the rest of your application data
8. Minimum Age
You must be legally eligible to work in your country of residence to submit a job application. You must also be at least the minimum age at which you can enter into an employment relationship under applicable local law. If we discover that a person below the applicable age has submitted an application, we will delete it.
9. Your Rights
Under GDPR and other applicable data protection laws, you have the following rights regarding your application data:
- Right to access: request a copy of the personal data we hold about you
- Right to rectification: correct inaccurate or incomplete data
- Right to erasure: request deletion of your application at any time
- Right to withdraw consent: withdraw the consent you gave at submission, which results in deletion of your application
- Right to restrict processing: limit how we process your data in certain circumstances
- Right to data portability: receive a copy of your data in a machine-readable format
- Right to object: object to processing based on legitimate interests
- Right to lodge a complaint: contact your local data protection authority. In Romania, this is ANSPDCP (Autoritatea Nationala de Supraveghere a Prelucrarii Datelor cu Caracter Personal). In the UK, the ICO (Information Commissioner’s Office). If you are located in another EU/EEA country, you can contact your local data protection authority
To exercise any of these rights, email [email protected]. We will respond within 30 days.
US Residents (State Privacy Rights)
If you are a resident of California, Virginia, Colorado, Connecticut, or Utah, you have the following rights regarding your application data under your state’s privacy law:
- Right to know: what personal data we collect and how we use it (described in this notice)
- Right to delete: request deletion of your application at any time
- Right to correct: correct inaccurate personal data
- Right to data portability: receive a copy of your personal data
- Right to opt out of sale: we do not sell personal data
- Right to non-discrimination: we will not treat you differently for exercising your rights
- Right to appeal: if we deny a request, you can appeal by contacting us
We do not sell your personal data. We do not share your personal data for cross-contextual behavioral advertising.
For requests, email [email protected]. We will respond within 45 days.
10. Security
We use commercially reasonable technical, administrative, and organizational measures to protect your application:
- All data is encrypted in transit (TLS/HTTPS)
- Database data is encrypted at rest at the infrastructure level
- Administrative access is limited to authenticated team members
- CV files use randomized, unguessable filenames and directory listing is disabled on the upload folder
- Rate limiting is applied at the submission endpoint to mitigate automated abuse
No system is 100% secure. If you discover a security vulnerability, please contact us at [email protected].
Data breach notification: In the event of a data breach that poses a risk to your rights, we will notify affected individuals and the relevant supervisory authorities in accordance with applicable law (within 72 hours where required by GDPR).
11. Changes to This Notice
We may update this notice from time to time. Material changes will be reflected with a new effective date at the top of this page. Your consent at the time of submission applies to the version of this notice published on that date. For material changes affecting data you have already submitted, we will seek renewed consent where required by law.
12. Contact Us
If you have questions about this notice or want to exercise your privacy rights:
- Email: [email protected]
- Company: SIMPLISIO INNOVATION SRL
- Address: Bucharest, Sectorul 3, Strada Nerva Traian, Nr. 27-33, Birou 6, Bl. B, Etaj 1, Ap. 6, Romania