Candidate data, handled with care
Assessment results say something personal about people. We treat them that way: processed under the GDPR, separated per organisation, kept only as long as you decide and seen only by those who need them.
How we protect candidate data
Processed under the GDPR
As the organisation that invites candidates, you decide why their data is used. Making Moves B.V. processes it on your behalf, under the GDPR.
Separated per organisation
Each organisation's data is kept apart, and that separation is enforced by the platform itself, not by a logo, brand or domain name.
A retention period you set
You decide how long candidate data is kept, so it matches your own privacy policy and what you have told candidates.
An agreement with every customer
We sign a data processing agreement with every business customer, setting out what we process, for which purpose and under which safeguards.
Access by role
People in your organisation see what their role needs. A hiring manager does not need the same access as an HR administrator.
Only what is needed
We ask for and keep only the data an assessment needs. Less data means less to protect and less that can go wrong.
Built for the EU AI Act
AI used to rank or select candidates is high-risk under the AI Act. We build for its requirements now, so you can explain how assessments were used in every decision.
- Transparent scores, with norm group and score range
- Human oversight: no automatic rejections, a person decides
- Documentation per test version
- Audit logs
- No reuse of personal test data for model training without a separate legal basis
Candidates' rights
These rights apply to everyone who takes an assessment, whichever organisation invited them.
Knowing what happens
Candidates should know what an assessment is for, who sees the results and how long they are kept. We recommend saying so in the invitation.
Access to their data
Candidates can ask to see the data held about them, including their results. We support you in answering such requests.
Correction and deletion
Candidates can ask for their data to be corrected or deleted. Requests run through you as the employer, and we help you handle them.
For your security review
This page describes our approach; it is not a certification. If your IT, privacy or procurement team needs details, such as where data is processed, which subprocessors are involved or how access is secured, ask us for the data processing agreement and send us your questions.
Frequently asked questions
Where is candidate data stored?
Where and by whom data is processed, including any subprocessors, is set out in the data processing agreement. Ask us for it before you start; your privacy officer will want to read it.
Who is responsible for the data: you or us?
As the organisation that invites candidates you are the controller: you decide why candidates are assessed. Making Moves B.V. acts as processor under the data processing agreement and supports you with candidate requests and retention.
Do you use candidate data to train AI or for research?
Personal test data is not reused for model training without a separate legal basis and adequate safeguards. Research by the Psychometric Lab into reliability, norms and fairness uses anonymised data only.
How long is candidate data kept?
For the period you set. Choose one that fits your process, for example how long you keep application files, and tell candidates in the invitation. Candidates can still ask for earlier deletion.
Related pages
Test your first candidate today
Free account, no credit card, results in minutes.