At Mercu we take data privacy and security seriously. This article outlines the basics of the European General Data Protection Regulation (GDPR), and how it affects our customers.

GDPR stands for General Data Protection Regulation and is the underlying regulation for all European Union countries relating to data security and privacy.

Full details relating to GDPR can be found here. In brief, these regulations are designed to enhance protections for data storage, access, and control.

Regardless of whether you are a Mercu customer or have responded interacted with Mercu as a team member or candidate, all data subjects within the European Union have the following rights under GDPR:

How you exercise these rights will differ depending on whether you are a Mercu customer using the platform, or if you have interacted with Mercu as a team member or candidate. The below guide will outline the steps you should take.

If you have interacted with Mercu as a team member or candidate and wish to exercise your data subject rights, please contact the organisation that reached out to you through Mercu. This would be either your current or past employer or the prospective employer you applied to.

If this isn't possible, please contact us via Intercom and we will assist in the process.

If you are a Mercu customer, and wish to exercise GDPR rights, please contact us with your enquiry via accounts@mercu.com.

Mercu's Data Process Amendment (DPA) is accessible here. This includes all obligations regarding the handling of personal data by the General Data Protection Regulation (GDPR).

Custom DPAs are available for customers on an Enterprise Mercu account.

Simply email accounts@mercu.com to get in contact with our Data Protection Officer.