Data security and GDPR compliance with PastaHR: Secure application management via WhatsApp and Instagram

How WhatsApp and Instagram applications can be used in companies in compliance with GDPR

Data security and GDPR compliance especially when it comes to personal data in HR are of utmost importance. Companies must ensure that personal data of applicants and employees is protected throughout the entire recruitment process. PastaHR meets these requirements and even complies with the highest security standards, including ISO 27001 certification.

The Application Process with PastaHR

For Applicants

‍With PastaHR, the application process begins via WhatsApp or Instagram and is initiated by the applicants themselves. This ensures that the applicants have already agreed to the data protection policies of the respective platform. Additionally, in the first message of the application process, there is a confirmation of acknowledgment of the company's data protection guidelines. Without this confirmation, the process cannot proceed, ensuring compliance with GDPR.

For Companies

‍Once an application is completed, the data is either integrated directly into the company's existing applicant tracking system (ATS) or made available in the PastaHR recruiting application. Employees of the client company work exclusively with the ATS or the PastaHR application, without using WhatsApp or mobile phones themselves. The PastaHR web application is fully encrypted (HTTPS) and protected by secure login methods (such as email magic links, two-factor authentication, or social logins), ensuring that only authorized users have access to the application data.

At PastaHR

‍The data submitted to PastaHR is subject to strict access controls and is processed in compliance with ISO 27001 requirements. This certification ensures that PastaHR has implemented a comprehensive information security management system that is regularly reviewed and improved. More information about PastaHR's ISO certification can be found here.

WhatsApp
PastaHR uses the WhatsApp Business API, provided by a certified provider. This API ensures GDPR-compliant communication through the PastaHR app by deleting all messages and media files after processing to ensure data minimization. Further details about our providers, as well as hosting and the WhatsApp Cloud API, can be found in our factsheet.

Maximum Security for Companies and Applicants
By using PastaHR, companies can ensure that the entire application process is both GDPR-compliant and certified according to the highest security standards (ISO 27001). This provides maximum protection for the sensitive data of applicants and allows for seamless integration with existing applicant tracking systems.

Conclusion
In an increasingly digital work environment, data security plays a central role. PastaHR sets new standards by combining GDPR compliance and ISO 27001 certification with a user-friendly and secure recruitment platform. Choose PastaHR and protect your applicants' and employees' data at the highest level.

Act Now
See for yourself the benefits that PastaHR offers. Visit our website for more information or schedule a demo today.

‍