GDPR & Data Processing — withWilma

This page summarises how withWilma supports customers with data-protection obligations under the GDPR, UK GDPR, Swiss data protection law, and similar privacy frameworks.

In most cases, the customer organisation using withWilma is the data controller for candidate and recruiter data processed in the platform.

withWilma acts as the data processor or service provider, processing personal information on the customer’s behalf and according to the customer’s instructions.

• Application collection and candidate workflow management
• Recruiter-to-candidate communication
• Interview scheduling and coordination
• Transcription, summarisation, and structured review support

withWilma may engage subprocessors to provide hosting, infrastructure, email delivery, analytics, customer support, and AI-assisted functionality. We require subprocessors to implement appropriate safeguards and contractual protections.

Where withWilma processes data on behalf of customers, we support customers in responding to valid requests relating to access, correction, deletion, portability, or objection rights.

Where personal information is transferred outside the EEA, UK, or Switzerland, withWilma relies on appropriate safeguards such as contractual protections, including Standard Contractual Clauses where applicable.

withWilma can provide a Data Processing Agreement where required for customer use of the service. Customers who need a DPA in place should contact privacy@withwilma.com.