The Privacy Settings tab allows you to configure how candidate data is handled and displayed within the Harver Platform. These settings help ensure compliance with data protection regulations such as GDPR while maintaining transparency for candidates.
Privacy Permission
Enable this option to allow Account Admins and Recruiters to view candidate details and results during the In Progress stage (did not complete) of the assessment process.
When disabled, candidate details remain hidden until the process is completed.
Toggle this setting based on the customer’s internal privacy policy and compliance requirements.
Candidate Personal Data Removal Rules
This section defines the retention period for candidate data. After the set period, personal data is automatically deleted to comply with privacy regulations.
Click Add a New Rule to create or update a removal policy.
It is recommended to set the data removal period to 12 months or less to maintain compliance and data minimization best practices.
Privacy Policy - Legacy, Depricated functionality
The Privacy Policy section is depricated and not usable with Hiring Studio vacancies. You can set Privicy Policy directly on the Landing Page module configuration.
Adding a New Candidate Personal Data Removal Rule
The Add a New Rule window allows you to define when candidate personal data should be automatically deleted, helping ensure compliance with data protection regulations such as GDPR.
1. Candidate Status
Select the candidate statuses for which the rule applies.
You can select one or multiple statuses depending on your data retention policy. We recommend to apply a rule for all the stages to ensure compliance.
2. Retention Period
Set the retention period by defining the number of days and/or months after which candidate personal data will be deleted.
Recommendation: Set this period to 12 months (1 years) or less to align with Harver’s best practices for data protection.
3. Effective Date (“Since”)
Use the date selector to define when the rule should start applying.
For example, if set to 01/11/2025, candidates meeting the criteria will have their data deleted 12 months after this date.
Click Save to activate the rule. Once saved, the system will automatically enforce it for all future and existing candidates who match the defined conditions.
Tip: Review data removal rules regularly to ensure they comply with your customer’s privacy policy and local legal requirements.
Data Retention and Anonymization
When candidate personal data is deleted according to the defined removal rules, all Personally Identifiable Information (PII) is permanently removed from the platform.
However, PII-reduced data remains available in Insights for analytical and reporting purposes. This ensures customers can still analyze overall hiring trends and performance metrics without compromising candidate privacy.
All candidate attributes are fully anonymized, meaning no individual can be identified from the remaining data. This approach supports compliance with data protection regulations while maintaining valuable insights for continuous improvement.
Once a candidate’s personal data has been anonymized, the candidate will no longer appear in the Candidate Management page.
Anonymized records are retained only for aggregated analytics within Insights and cannot be accessed, restored, or identified at the individual level.
This ensures strict adherence to privacy and data protection standards while preserving high-level reporting accuracy.