WorkDirect Privacy Policy

WorkDirect is operated by KEINN S.R.L., a company registered in Romania. Registered office: Str. Dascălilor nr. 2, Sat Dancu, Comuna Holboca, Județul Iași, Romania. CUI: 51781577. Trade Register No.: J2025034047001.

This Privacy Policy applies to workdirect.eu, app.workdirect.eu, the WorkDirect and DirectWork domains, authorised subdomains, account areas, recruitment functions, payment-related pages, communications and services operated or controlled by KEINN S.R.L. It applies to candidates, workers, employers, recruiters, business clients, partners, website visitors and people who contact us.

The public website explains WorkDirect and its services. The application provides account, job-posting, candidate-search, application, subscription and related technical functions. Features may change over time. If a change materially affects personal-data processing, we will update this Policy or provide an additional notice where legally required.

Depending on how a person uses WorkDirect, we may process name, contact details, account information, CV and professional history, qualifications, skills, job preferences, employer or company information, job advertisements, applications, messages, support requests, photographs, identity or work-authorisation documents when required, payment and invoice information, declared representative details, authorisation and revocation records, consent records, and information connected with complaints, fraud reports or disputes.

Users should provide only information that is accurate, relevant and lawfully obtained. Candidates should avoid placing unnecessary sensitive information in a CV or public profile. Employers and recruiters must not upload another person’s information unless they have a lawful basis and the necessary authority.

When the Platform is used, technical information may be recorded automatically. This may include IP address, date and time, account or session identifier, browser, device, operating system, language, pages viewed, referring page, login events, failed-login attempts, error or crash information, security actions, approximate location inferred from IP, network or ISP information, and indicators of VPN, proxy, Tor, automated or suspicious access where technically detectable.

Routine technical, access and session logs are normally retained for between 30 and 90 days. Login, security, anti-fraud and incident-related logs may be retained for up to 180 days. A specific record may be kept longer where reasonably necessary for an active security investigation, legal claim, contractual dispute, fraud-prevention measure or binding legal obligation.

We use personal data to create and manage accounts, provide candidate and employer functions, publish and manage jobs, enable applications and candidate searches, verify information where appropriate, communicate with users, provide support, manage subscriptions and invoices, protect accounts, detect fraud or misuse, improve reliability, comply with law and establish, exercise or defend legal claims.

The legal basis depends on the activity and may include steps requested before a contract, performance of a contract, compliance with legal obligations, legitimate interests in operating and securing the Platform, or consent where consent is legally required and appropriate. Consent can be withdrawn without affecting processing already carried out lawfully.

Candidate information may be visible to WorkDirect administrators and, depending on the service and the candidate’s settings or actions, to registered employers, their declared account representatives, or authorised recruitment partners. Information may also be sent to an employer when a candidate applies for a job or asks WorkDirect to support a recruitment process.

Identity documents, private verification materials, passwords, full payment-card details and internal security notes are not intended for public display. Employers receiving candidate information must use it only for lawful recruitment, employment, verification or related purposes and are responsible for their own data-protection duties. Paying for Platform access does not mean that an employer purchases ownership of candidate data.

Every employer, recruiter, agency, representative or other person publishing a job or submitting company information is responsible for the truth, legality, authority and accuracy of what they publish. This includes company identity, vacancies, salary, duties, location, working hours, accommodation, transport, visa or work-permit support, fees, refunds, start dates and every other condition or promise.

WorkDirect may perform reasonable registration, document, fraud or compliance checks, but it does not have the legal authority, access or operational control required to independently verify every company record, workplace, financial condition, employment term or statement. A registered company, approved account, published job, verification step or payment to WorkDirect is not a guarantee, endorsement or warranty of a user, vacancy, employer, candidate, recruiter or outcome.

WorkDirect is a technology and recruitment platform. Unless KEINN S.R.L. expressly agrees otherwise in a separate signed written contract, WorkDirect is not the employer, employee, immigration authority, embassy, law firm, tax adviser, financial adviser, insurer, guarantor, escrow service or party to an agreement made between users or third parties.

No job offer, salary promise, visa assurance, relocation commitment, accommodation promise, payment request, refund promise, employment guarantee or other statement made by an employer, recruiter, candidate, agent, partner or any third person—whether made through the Platform, by email, phone, messaging application, social media, meeting or outside WorkDirect—binds KEINN S.R.L. unless it is expressly confirmed in a written agreement signed by an authorised KEINN S.R.L. representative.

Users must independently check material facts before signing a contract, travelling, resigning from existing work, paying money, handing over original documents or relying on a promise. WorkDirect content is general information and is not legal, immigration, tax, financial or professional advice. Nothing in this Policy excludes liability or legal duties that cannot lawfully be excluded.

An employer or recruiter may authorise an employee, consultant, recruitment agency, administrator, representative or other third party to assist with management of its WorkDirect account. Before access is granted, the account holder must declare and authorise the person or organisation through Dashboard > Account Management where that function is available. Separate representative access should be used instead of sharing the primary password whenever the Platform provides that option.

The account holder remains responsible for selecting, authorising and supervising the representative; protecting account credentials; controlling permissions; reviewing jobs, searches, messages, offers, document requests, payments and other actions; ensuring lawful and confidential use of candidate information; and revoking access immediately when the authority ends or misuse is suspected.

Actions performed through the account by a declared representative may be treated as actions authorised by the account holder unless unauthorised access is reported promptly. WorkDirect does not employ, supervise, recommend or guarantee the representative. Any offer, promise, statement, payment instruction or commitment made by the account holder or its representative is made on their own behalf and does not bind KEINN S.R.L. unless expressly accepted in a separate signed written agreement by an authorised KEINN S.R.L. representative.

WorkDirect may record representative identity, authorisation status, account activity, access times, IP addresses and related security events for account administration, privacy, fraud prevention, dispute handling and Platform security. Undeclared, suspicious, misleading or unlawful account management may result in restricted access, suspension, removal of content or account termination. Nothing in this section removes duties or liability that cannot lawfully be excluded or responsibility arising directly from KEINN S.R.L.’s own conduct.

Paid plans, job postings, candidate-search access and other services may be processed by Stripe or another authorised payment provider. Where a hosted payment page is used, complete card numbers and card security codes are normally collected and processed directly by the payment provider rather than stored by WorkDirect. WorkDirect may receive limited billing details, transaction identifiers, payment status, currency, amount, invoice information, refund status and fraud signals.

Payment providers process data under their own legal responsibilities and privacy terms. Payments, renewals, cancellations, refunds and disputes are also governed by the applicable Payment Terms and Terms of Service.

We may share information only where reasonably necessary and lawful, including with selected employers, declared account representatives, recruitment partners, hosting and database providers, software developers and maintenance providers, email or messaging services, payment processors, accountants, lawyers, security specialists and competent public authorities.

Some recipients may act as processors following WorkDirect’s instructions; others, such as employers, payment providers or authorities, may act as independent controllers. Where data is transferred outside the European Economic Area, WorkDirect will use an appropriate legal mechanism where required, such as an adequacy decision, Standard Contractual Clauses or another legally recognised safeguard.

The Platform may use cookies, local storage and similar technologies for authentication, security, sessions, language or preference settings, error detection, performance and analytics. Non-essential analytics or marketing technologies will be used only after consent where required. Users should be able to reject or later change non-essential choices.

WorkDirect may send service messages about accounts, applications, verification, payments, security, legal notices or Platform operation. Promotional messages are sent only where legally permitted, and users may unsubscribe or object to direct marketing at any time.

Account and profile data may be retained while an account is active and for a reasonable period after closure or inactivity. Recruitment and application records may normally be retained for up to three years after the last meaningful activity. Identity and verification files should be kept for the shortest practical period and may normally be deleted within 12 months after the relevant verification or process ends, unless an active recruitment, fraud, immigration, contractual or legal matter requires longer retention.

Representative authorisation and revocation records may be retained while access is active and for a reasonable period afterwards for account administration, security and disputes. Invoices and accounting records are kept for the period required by Romanian law. Complaints, fraud reports and dispute records may be retained until the matter is resolved and for the relevant limitation period. At the end of the applicable period, information will be deleted, anonymised or restricted where continued retention is legally required.

KEINN S.R.L. operates WorkDirect but is not the original developer of every software component and does not represent itself as a specialist cybersecurity company. Hosting, development, infrastructure, payment and maintenance functions may be supplied by independent providers, each responsible for its services within its contractual and legal role.

KEINN S.R.L. nevertheless remains responsible for the obligations that apply to it as data controller. Within its practical control, it uses reasonable measures such as access restrictions, password and administrator controls, available security settings, provider management, updates, confidentiality requirements, logging, backups and incident escalation. No online system can be guaranteed to be completely secure.

If KEINN S.R.L. becomes aware of a suspected personal-data breach affecting data under its responsibility, it will assess the incident, contact the relevant technical provider, take reasonable containment steps, keep the records required by law and notify the supervisory authority or affected individuals where the law requires notification.

Subject to the GDPR and applicable exceptions, individuals may request information, access, correction, deletion, restriction, portability or a copy of certain personal data. They may object to processing based on legitimate interests or direct marketing, withdraw consent and request human review where rights concerning significant automated decisions apply.

Requests may be sent to support@directwork.eu. We may ask for proportionate identity verification. Requests are normally answered within one month, subject to a legally permitted extension. Account closure does not require immediate deletion of records that must be retained for accounting, fraud prevention, disputes, legal claims or another lawful reason.

Individuals may contact WorkDirect first so that a concern can be investigated, but they also have the right to complain to the Romanian data-protection authority, ANSPDCP, or another competent supervisory authority where the law permits.

This summary may be updated when the Platform, providers, processing activities or law changes. The latest date will be displayed on the page. Material changes may also be communicated by email, account notice or website notice where appropriate.

This website summary should be read with the Complete Privacy Policy, Terms of Service, Payment Terms, Cookie Policy, Anti-Scam & Candidate Protection Policy and other applicable WorkDirect documents. For privacy matters, the Complete Privacy Policy prevails if there is an inconsistency.