What is a DPA?
DPA is short for Data Processing Agreement. It is a legal document that governs the sharing of personal data between the data controller (you) and the data processor (Homerun). Homerun provides you with a DPA to help you meet your data protection obligations.
Before we continue, we'll shortly tell you a little bit more about the General Data Protection Regulation. The GDPR is an important piece of legislation that is designed and intended to strengthen and unify data protection laws for all individuals within the European Union. The regulation has become effective and enforceable since the 25th of May 2018.
In more detail, the GDPR regulates the processing of personal data about individuals in the European Union including its collection, storage, transfer or use. The GDPR gives Data Subjects more rights and control over their data by regulating how companies should handle and store the personal data they collect.
Why do I have to sign it?
In the sense of the EU General Data Protection Regulation, Homerun will act as a processor of personal data on behalf of you our customer, the controller. Together we ensure that your users’ personal data is protected. To define our mutual rights and obligations, you must enter into a Data Processing Agreement (DPA) with us. The DPA shall state the purpose of the processing, what data is processed, how they shall be protected, and more. It is both parties responsibility that such a DPA is in place.
As Data Controller you decide which data you will be collecting from or about candidates. Personal data is then collected either by candidates filling out the application form (which you have customized to include certain fields or questions), by the hire team manually adding a candidate (sourcing) or by the hire team interacting with the candidate through (free-form) email via the Homerun platform. Ultimately, as ‘data controller’ the responsibility for compliance rests with you.
How do I sign the DPA?
You can digitally request and then sign our DPA in a few simple steps:
Log in to your Homerun account
Click your profile in the top right corner and click Company details
At the left, scroll down a bit and click Privacy
You can request the DPA by clicking Create your DPA, in the first box
On the next page, fill in the requested information and click Send DPA
The DPA will be sent to the authorized signer
He or she can digitally sign the DPA and send it back to Homerun, automatically
What do I fill in under "trade register" as a US company?
In the DPA we request you to fill out your trade register number. The equivalent for US companies would be the state registration number (where the company is incorporated). For us it's important to have proof that your company is a legal entity.
If you still have any questions, feel free to send us a message.