GDPR Compliance

This draft describes how Corpshore Solutions Corporation intends to apply the EU General Data Protection Regulation (GDPR) and the UK GDPR on Corpshore Work. It has not yet been reviewed by counsel and should not be treated as a final or legally sufficient compliance statement. It should be read alongside our general Privacy Policy, which this page narrows to the specific rights and obligations GDPR creates.

Who this applies to

This page applies to personal data of individuals located in the European Union, the European Economic Area, and the United Kingdom, whether they use Corpshore Work as a candidate, an employer-side contact, or a site visitor.

Our legal bases, mapped to what we do

GDPR requires a lawful basis for every processing activity. Here is how Corpshore's main processing activities map to the regulation's six bases:

• Contract: creating and running your candidate profile or employer account, matching you to roles, and administering an employer-of-record or contractor-of-record engagement you've entered into.
• Legitimate interests: platform security and fraud prevention, improving matching quality, and core product analytics, carried out in a way that does not override your own rights and interests.
• Consent: optional marketing communications, and any use of your personal data to train a machine-learning model, which we only do with your explicit, separately obtained consent.
• Legal obligation: identity verification, tax withholding, and anti-money-laundering checks required in the countries where engagements take place.

We do not currently rely on the remaining two GDPR bases (vital interests or a task carried out in the public interest) for any processing activity on the platform.

Your rights under GDPR

If GDPR applies to you, you have the right to:

• access the personal data we hold about you
• have inaccurate data corrected
• have your data erased, where there's no overriding reason for us to keep it
• restrict how we process your data in certain circumstances
• receive your data in a portable, machine-readable format
• object to processing based on our legitimate interests, including profiling
• withdraw consent at any time, where processing is based on consent

To exercise any of these, contact us at support@corpshore.work. We will respond within the timeframe GDPR requires, and will ask for reasonable information to verify your identity before acting on a request.

Automated decision-making (Article 22)

Corpshore Work uses AI to assist with matching, screening, and job-description drafting. Consistent with Article 22's protections around solely automated decisions with legal or similarly significant effect, no automated process on Corpshore Work makes a final hiring or rejection decision on its own. Every AI-assisted screen or match carries a human-review option on the employer's side, and an applicant can request human review of a decision that affects them.

Data minimisation and the four-region model

Corpshore stores candidate identity documents and profiles in one of four regional databases, matched to where the candidate lives (Americas, Europe, Middle East & Africa, or Asia-Pacific), rather than in one global store. For EU and UK data subjects, this generally means your data is held in the European regional database and is not moved elsewhere unless you apply to a role that requires it, which limits unnecessary cross-border transfer as a matter of system design, not just policy.

International transfers from the EU/UK

Where personal data does need to leave the EU or UK, for example because you apply to a role based in another region, we rely on an appropriate transfer mechanism recognised under GDPR, such as the European Commission's standard contractual clauses or an equivalent UK mechanism, with any recipient of that data.

EU representative

Where GDPR requires us to appoint an EU representative, that appointment is [EU representative — to be appointed]. Until then, direct any GDPR-related query to support@corpshore.work.

Lodging a complaint

If you believe we have not handled your personal data in line with GDPR, you can contact us directly to resolve it, or lodge a complaint with your local data protection supervisory authority. You do not need to contact us first before complaining to a regulator.

Contact

Questions about how GDPR applies on Corpshore Work can be sent to support@corpshore.work.