Privacy Policy

Last updated: 31 August 2026

This Privacy Policy explains how HireGate ("HireGate", "we", "us", or "our") collects, uses, stores, shares, and protects personal data when you access or use the HireGate platform available at https://hiregate.eu, its subdomains, applications, APIs, and related services (collectively, the "Platform").

HireGate is a recruitment and workforce collaboration platform connecting candidates, employers, and authorized recruitment partners.

1. Data Controller

The Platform is operated by:

Synergy Solution Ltd. (Синерджи Сълюшън ООД)
UIC/EIK: 208131587
Registered office: 40–42 Buzludzha Street, Triaditsa District, 1463 Sofia, Bulgaria
Country: Bulgaria
Email: hiregate.info@synergy-solutions.bg
Support: hiregate.support@synergy-solutions.bg

For personal data processed directly by HireGate for operating the Platform, Synergy Solution Ltd. (Синерджи Сълюшън ООД) acts as the data controller within the meaning of Regulation (EU) 2016/679 ("GDPR"). Employers and recruitment partners may separately act as independent data controllers for personal data they receive or process for their own recruitment, employment, immigration, compliance, or human-resources purposes.

2. Who this Privacy Policy applies to

This Policy applies to candidates and job seekers; employees or prospective employees; employer and recruitment-partner representatives; authorized organization staff; website visitors; users connecting Google or other third-party accounts; and persons whose information is legitimately entered by an authorized organization. The Platform is intended for persons aged 18 or older and is not intended for children.

3. Personal data we collect

The information collected depends on your role and how you use HireGate.

3.1 Account and identity information

first and last name, email address, telephone number and profile photograph;
country, nationality, preferred language, account type, role and organization;
login and authentication information, account status and communication preferences.

Passwords are not stored in plain text. Where third-party authentication such as Google OAuth is used, we may receive identifiers and basic account information authorized by you.

3.2 Candidate and recruitment information

For candidates, HireGate may process CVs/resumes, employment history, education, qualifications, certificates, skills, languages, preferred occupations and locations, salary expectations, availability, interviews, applications, recruitment status, employer or recruiter feedback, process notes, recommendations, application history and job preferences.

Where legitimately required for recruitment, employment, immigration, visa, migration or regulatory processes, the Platform may also process passport or identity-document details, work authorization, residence-permit and visa information, diplomas, certificates, proof of qualifications, accommodation and employment documentation, and other documents required by competent authorities. Users should not upload information unnecessary for the relevant process.

3.3 Sensitive and specially protected information

HireGate does not ask users to provide special-category personal data unless genuinely necessary and supported by an appropriate legal basis. CVs and uploaded documents may nevertheless contain health, ethnicity, religion or other specially protected information; users should not include it unless necessary. Criminal-conviction or offence information is processed only where permitted by applicable law and necessary for a legitimate recruitment, employment, immigration or regulatory procedure.

3.4 Company and recruitment-partner information

We may process organization name, registration information, business address, sector, representatives, contact details, authorized users, contracts and relationships, vacancies, recruitment requirements, candidate assignments, workflows, interviews, notes and internal collaboration information.

3.5 Communications

When users communicate through HireGate or contact us, we may process messages, support requests, notifications, interview communications, timestamps, attachments and correspondence relating to recruitment processes.

3.6 Technical and usage data

We may automatically process IP address, browser type, operating system, device information, session identifiers, authentication logs, access date and time, pages and features used, security logs, error logs and actions performed within the Platform. We use this primarily for security, fraud prevention, diagnostics, system administration and service improvement.

4. Google API data usage and Limited Use

HireGate allows users to connect certain Google services through Google OAuth and Google APIs. It uses Google APIs only for user-authorized Platform functionality, including account connection and authentication, retrieving authorized basic account information, checking calendar availability, and creating, updating, cancelling or deleting calendar events for interview and recruitment scheduling.

HireGate requests only scopes reasonably necessary for the relevant functionality. HireGate's use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including the Limited Use requirements. The use of raw or derived user data received from Google Workspace APIs adheres to the Google User Data Policy, including applicable Limited Use requirements.

Google user data is not used for advertising, sold, used to create advertising profiles, or used to develop, improve or train generalized AI/ML models unless Google's policies expressly permit it and a valid legal basis exists. Human access is permitted only with explicit user consent; for security, abuse investigations or legal compliance; to provide or maintain requested functionality with appropriate protections; or otherwise as Google's policies permit. Google API data is transferred only to provide requested functionality, for security or legal compliance, with appropriate consent, or as Google policies permit.

Disconnecting Google

Users may disconnect their Google account through account or integration settings where available, or revoke access through Google Account permissions. After revocation, HireGate stops requesting new Google data. Previously created records, such as interview records or calendar event identifiers needed for audit, security or transaction integrity, may remain subject to the retention rules below.

5. How we use personal data

We process data to create and maintain accounts, authenticate users, provide profiles and recruitment workflows, manage applications and pipelines, enable candidate recommendations and collaboration, and facilitate recruitment and interviews. We also use data to secure the Platform, prevent unauthorized access and fraud, maintain audit logs, diagnose errors, communicate transactional, recruitment, support and security information, comply with accounting, tax, employment, recruitment, immigration, authority-request and litigation obligations, and improve HireGate using aggregated or appropriately de-identified usage information.

6. Legal bases for processing

6.1 Performance of a contract

We process information where necessary to provide HireGate and perform contractual obligations, including operating accounts, recruitment functionality, applications, interview scheduling and requested integrations.

6.2 Legitimate interests

We may process information for Platform security, fraud prevention, improving HireGate, maintaining business records, protecting legal rights and providing appropriate recruitment functionality, after considering users' rights and interests.

6.3 Consent

Where required, we rely on consent for optional integrations, non-essential cookies, certain marketing communications and processing for which law specifically requires consent. Consent may be withdrawn without affecting earlier processing.

6.4 Legal obligations

We process certain information when necessary to comply with Bulgarian, EU or other applicable law.

7. Candidate profiles and visibility

HireGate may make candidate information visible to selected organizations involved in recruitment, including employers, authorized company representatives, recruitment partners and authorized recruiter representatives. We aim to restrict access by roles, permissions, relationships and configuration. Candidate information is not intended to be publicly searchable on the open Internet unless the candidate expressly uses a public-visibility feature.

8. Employers and recruitment partners

When an employer or recruitment partner receives candidate information and determines its own purposes, it may act as a separate independent controller. It is responsible for applicable privacy, recruitment and employment-law compliance for its own processing. HireGate does not control independent subsequent processing outside the Platform. Organizations must use candidate data only for lawful recruitment, employment and related purposes.

9. Information entered about other people

Organizations may upload or enter another individual's data only with lawful basis and authority. They are responsible for ensuring lawful collection, required privacy information, relevance and accuracy, lawful disclosure to HireGate and relevant users, and all required permissions or consents.

10. Matching, recommendations and profiling

HireGate may use profession, skills, experience, education, language, location, preferences, requirements and recruitment status to organize information, rank potential matches, generate recommendations or identify relevant jobs or candidates. These systems assist recruiters, employers and candidates. Unless expressly stated otherwise, HireGate does not make final employment decisions solely through automated processing. Employers and recruiters remain responsible for decisions. Users may contact us about applicable GDPR rights relating to automated decision-making.

11. Who we share personal data with

We may disclose personal data, where necessary, to employers and recruitment partners in the relevant process; service providers for cloud infrastructure, hosting, email, authentication, monitoring, cybersecurity, analytics, support, communications and document storage; Google where a user chooses Google functionality; authorities and legal recipients for law, court requests, rights, fraud or safety; and parties to a merger, acquisition, restructuring, financing or transfer of business subject to safeguards. Providers receive data only as necessary and subject to applicable contractual and security obligations.

12. International data transfers

HireGate may facilitate recruitment involving users inside and outside the EEA. Where a transfer requires GDPR safeguards, we use an appropriate mechanism, such as an adequacy decision, Standard Contractual Clauses or another legally recognized mechanism. Independently receiving employers and partners may be subject to their own jurisdictions' laws.

13. Data retention

We retain personal data only as long as reasonably necessary for collection purposes and legal, contractual, security and dispute-resolution requirements. Active account information is generally kept while the account exists; recruitment records while a process is active and for an appropriate period; audit logs for limited security/compliance periods; billing records for legal periods; and data subject to disputes, investigations or preservation obligations until resolved. Data no longer necessary is deleted or anonymized where possible.

14. Account deletion

Users may request account deletion through Platform functionality or by contacting hiregate.info@synergy-solutions.bg. Deletion may remove or anonymize account-only information, but data may remain where retention is required by law, security or fraud prevention, legal claims, another organization's independent records, limited backups, or transaction/recruitment-history integrity. Requests for another controller's copy may need to be made directly to that controller.

15. Your GDPR rights

Subject to applicable conditions and exceptions, individuals may have rights to access, correct, delete, restrict, object, portability, withdraw consent, object to direct marketing, information about qualifying automated decision-making, and complain to a supervisory authority. To exercise rights, contact hiregate.info@synergy-solutions.bg. We may need to verify identity.

16. Supervisory authority

Individuals in Bulgaria may lodge a complaint with the Commission for Personal Data Protection (CPDP), Republic of Bulgaria, or another competent EU/EEA supervisory authority depending on their circumstances.

17. Security

HireGate applies reasonable technical and organizational safeguards, including encrypted communications, access and authentication controls, role-based permissions, secure password storage, network protections, logging, monitoring, backups, production-environment separation, updates and restricted administrative access. No Internet-based system can guarantee absolute security. Users must protect credentials and report suspected unauthorized access promptly.

18. Cookies and similar technologies

HireGate may use cookies, local storage and similar technologies. Necessary technologies may be used where permitted for authentication, security, session management, load balancing and privacy preferences. Analytics, advertising and other non-essential technologies are used only in accordance with applicable consent requirements. See the Cookie Policy.

19. Marketing communications

Where permitted, we may send information about HireGate. Where consent is required, marketing is sent only with valid consent and users may unsubscribe at any time. Transactional, administrative, security and recruitment messages may still be sent where necessary.

20. Third-party services and links

Integrations and links may lead to third-party services that process information under their own terms and policies. HireGate is not responsible for independent processing outside our control.

21. Changes to this Privacy Policy

We may update this Policy for changes in functionality, law, security, integrations or operations. The current version and effective date are published on HireGate; we may provide additional notice for material changes.