Recruitment
Privacy Notice
Effective Date: May 5, 2026
Last Updated: May 5, 2026
If you are reading this notice, you are considering applying, or have already applied, for a role with us.
We are Dataflow Forensics Inc., a Delaware corporation (“DATAFLOW”, “we”, or “our”).
For the processing activities described in this notice, DATAFLOW acts as the data controller.
Privacy contact: privacy@df-f.com
Depending on how you apply and how the process develops, we may process some or all of the following.
This may include:
Providing your data is voluntary, but if you do not provide the information we need, we may be unable to consider you for a role or proceed with the hiring process.
IF YOU SHARE PERSONAL DATA RELATING TO THIRD PARTIES (SUCH AS REFEREES OR YOUR FAMILIAR PERSONAL DATA), YOU ARE RESPONSIBLE FOR ENSURING YOU ARE AUTHORISED TO DO SO. YOU ASSUME ALL THE OBLIGATIONS AND RESPONSIBILITIES PRESCRIBED BY THE LAW, CONFERRING THE WIDEST INDEMNITY WITH RESPECT TO ANY DISPUTE, CLAIM, REQUEST FOR COMPENSATION FOR DAMAGE, ETC. THAT WE MAY RECEIVE FROM THIRD PARTIES WHOSE PERSONAL DATA WERE TRANSMITTED BY YOU AND THEREFORE PROCESSED IN VIOLATION OF THE APPLICABLE DATA PROTECTION LAWS.
Your application may contain special categories of personal data (e.g., health, disability of oneself or a family member, racial or ethnic origin, religious beliefs, trade union membership). Please do not include such data unless strictly relevant to the role or required by law — for example, where the role is reserved for protected categories, you request reasonable accommodation, or processing is necessary for employment or social protection purposes. The collection of sensitive data is necessary to establish the relationship, or justified by determined and legitimate purposes, the processing will be based on fulfilling the obligations and exercising ours or your specific rights in the field of labor law and social security and social protection.
If such data is not relevant, we will not use it for evaluation.
We may receive your data from head-hunters, external recruiters, recruiting platforms, professional networking platforms, or employee referral sources. Where we receive your data from a third party, we expect that party to have a valid legal basis for sharing it with us.
Where permitted by law, we may collect or supplement your data using publicly accessible professional sources (such as professional profiles, portfolios, publications, or professional directories), where relevant to assessing suitability or verifying your application.
If you apply through our website, we may process technical data about your browser or device. See the privacy and cookie information at df-f.com.
We collect personal data directly from you, from recruitment partners or referrers, from public professional sources, and from our website or application tools when you interact with them.
This includes receiving and reviewing your application, contacting you, arranging interviews, evaluating your qualifications and suitability, keeping records of the process, and responding to your questions.
Legal basis: necessary to take steps at your request prior to potentially entering into an employment or other working relationship.
Legal basis: compliance with a legal obligation to which we are subject.
This includes protecting our company, personnel, systems, and services; preventing fraud and security incidents; verifying application information using limited public professional sources; and defending legal claims.
Legal basis: our legitimate interests in maintaining a secure recruitment process, protecting our business, and verifying information relevant to recruitment.
Where permitted by law, we may retain your application after a selection process ends to consider you for future relevant roles. This is particularly important in our sector, where qualified candidates with the specialised expertise we require are scarce.
Legal basis: our legitimate interest in maintaining a pipeline of qualified candidates for highly specialised roles. You may object at any time (see Section 8), and we will cease retention unless we demonstrate compelling legitimate grounds.
We process personal data using organisational, electronic, and manual means, with appropriate security measures. Your data may be reviewed by authorised personnel and, where relevant, combined with information from recruitment partners or public sources.
We may use tools that support recruitment administration, organisation, scheduling, and review of candidate information. We do not make hiring decisions based solely on automated processing that produces legal effects or similarly significant effects. Final recruitment decisions involve human assessment.
We may share your data with:
We require our data processors to act only on our instructions with appropriate contractual safeguards.
Some recipients may be located outside the American territory. Where we transfer data outside the US territory, we rely on appropriate safeguards with any required supplementary measures.
Contact privacy@df-f.com for more information on the transfer mechanisms we use.
You may request deletion before the end of the applicable retention period.
Subject to applicable law, you may:
How to exercise your rights: contact privacy@df-f.com. You can also contact the HR Partners who shared your application with us (e.g. LinkedIn) by writing to them.
Supervisory authority: you may lodge a complaint with the competent supervisory authority, including the authority where you live or work.
This notice covers only processing for which DATAFLOW acts as data controller in connection with recruitment. It does not cover processing by third parties acting as independent controllers (such as recruiting platforms or social media providers), who operate under their own privacy notices.
We may update this notice from time to time. The version on our website is the current version. We will provide appropriate notice of material changes where required by law.
