Privacy policy
for candidates
1. Who we are
This careers site (careers.micadoni.com) is operated by Luxobesolux SARL, 4 rue Fort Wallis, L-2714 Luxembourg, VAT LU28279037, registered with the Luxembourg Trade and Companies Register under number B203271 ("Micadoni", "we"). We are the data controller for the personal data you provide when you apply for a role through this site. For roles based in Poland the controller is Beso Lux Sp. z o.o., ul. Gen. Jarosława Dąbrowskiego 234, 93-231 Łódź, NIP 7292718480. You can reach us about data protection at people@micadoni.com.
2. What data we collect
When you apply, we collect the information you enter in the application form - your first and last name, e-mail address, telephone number (optional), the languages you speak (optional), a message from you (optional) and your CV or résumé, including everything you choose to put in it. We also record the date and time of your application and the country from which it was sent, and we keep a technical log of the submission (such as the IP address used) for security purposes.
Please do not include special categories of personal data in your application (for example information about your health, religion, political opinions, trade union membership, sexual orientation or ethnic origin) unless you consider it necessary. If you include such information, you consent to us processing it for the purposes described below.
3. Why we process your data and on what legal basis
- Assessing your application for the role you applied for, contacting you, arranging interviews and deciding whether to make you an offer - necessary to take steps at your request prior to entering into an employment contract (Article 6(1)(b) GDPR).
- Keeping your application on file for future openings - only if you tick the "keep my application on file" box; this is based on your consent (Article 6(1)(a) GDPR), which you can withdraw at any time.
- Protecting the site against abuse (spam, automated submissions) and keeping a security log - our legitimate interest in keeping the site secure (Article 6(1)(f) GDPR).
- Establishing, exercising or defending legal claims relating to the recruitment process - our legitimate interest (Article 6(1)(f) GDPR) and, where applicable, compliance with legal obligations (Article 6(1)(c) GDPR).
We do not use automated decision-making or profiling in our recruitment. Every application is read by a person.
4. Who has access to your data
Your application is accessible only to the people at Micadoni involved in recruiting for the role (the People team and the hiring managers for that position). We use the following service providers (processors), who act on our instructions and are bound by data processing agreements:
- Cloudflare, Inc. - hosting of the site and storage of applications and CVs in data centres located in the European Union (EU jurisdiction storage).
- Resend, Inc. - sending transactional e-mails (your application confirmation; internal notifications that contain no personal data).
We do not sell your data and we do not share it with third parties for their own purposes.
5. International transfers
Applications and CVs are stored within the European Union. Some of our providers are established outside the EU (in the United States). Where personal data is transferred outside the European Economic Area, we rely on the European Commission's adequacy decision for the EU-US Data Privacy Framework and/or the Standard Contractual Clauses, together with additional safeguards where required.
6. How long we keep your data
- Applications are kept for 180 days after submission, which allows us to complete the recruitment and respond to any questions about it. After that period they are deleted automatically from our systems.
- If you asked us to keep your application on file, we keep it for 12 months so that we can contact you about other openings, and then delete it.
- If you are hired, the data from your application becomes part of your personnel file and is kept in line with our employee privacy notice and the applicable employment and tax laws.
- Security logs are kept for up to 30 days.
You can ask us to delete your application earlier at any time (see section 7).
7. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you and receive a copy of it;
- have inaccurate data corrected or incomplete data completed;
- have your data erased, for example by withdrawing your application;
- restrict the processing of your data in the circumstances provided by law;
- receive the data you provided to us in a structured, commonly used, machine-readable format (data portability);
- object to processing that is based on our legitimate interests;
- withdraw your consent at any time where processing is based on consent, without affecting the lawfulness of processing before the withdrawal.
To exercise any of these rights, write to people@micadoni.com. We will respond within one month. You also have the right to lodge a complaint with a supervisory authority, in particular the Commission nationale pour la protection des données (CNPD) in Luxembourg (cnpd.public.lu) for roles in Poland the President of the Personal Data Protection Office (UODO) in Warsaw (uodo.gov.pl), or the data protection authority of the EU country where you live or work.
8. Is providing data mandatory?
Providing your name, e-mail address and CV is necessary to consider your application; without them we cannot assess it. All other information is optional.
9. Security
Applications are transmitted over an encrypted connection (HTTPS), stored in a private, access-controlled storage located in the European Union, and never sent by e-mail. Access to the recruitment panel is protected by individual logins. Applications are deleted automatically at the end of the retention period.
10. Cookies and analytics
This site works without cookies and does not use tools that track you across websites. If we add analytics in the future, any analytics cookies will be set only after you accept them in a cookie banner, and declining them will have no effect on your application.
11. Changes to this notice
We may update this notice from time to time. The version published on this page applies; the date of the last update is shown below.
Last updated: 21 October 2026