GDPR

Last updated October 27, 2026

This page is for customers. If you are looking for information about your own privacy rights, read the Privacy Policy.

Common terms

A candidate, applicant, or other person in a hiring process is a data subject. That person has rights over their personal data.

The customer is the controller of personal data about candidates, applicants, resumes, interviews, and messages. The customer decides why that data is processed and is responsible for handling it.

Dover is the processor. Dover processes that personal data on the customer's instructions.

Candidate rights

The customer gives candidates the notice about how their personal data is used and handles their requests to access, correct, delete, restrict, or export that data, or to object to processing.

A request about a person in a customer's hiring process should be sent to that customer. If Dover receives the request, Dover will forward it to the customer.

The Privacy Policy describes requests about personal data Dover controls for its own purposes, including accounts, billing, the website, and Dover's own sales contacts.

Data processing agreement

Dover provides a data processing agreement for customer personal data on request. Email [email protected] to request it. Section 17 of the Terms states the same roles.

Where we store personal data

Dover stores personal data in the United States and does not store it in the European Union. Dover is not certified under the EU-U.S. Data Privacy Framework. The safeguard for a customer's transfer to Dover is set out in the data processing agreement Dover provides on request.

Vendors that receive personal data are listed on the subprocessor page.

Questions

Questions about this page can be sent to Dover's Data Protection Officer, George Carollo, at [email protected], or by post to Staya, Inc., 2261 Market Street #4158, San Francisco, CA 94114, United States.