Last Updated: February 14, 2025
Migrolo processes personal data under the EU General Data Protection Regulation (GDPR). This notice explains what we collect, the legal bases we rely on, how long we keep data, and how you can exercise your rights.
Migrolo acts as data controller in the countries where services are provided. When users access from the EU/EEA, contractual and technical safeguards aligned with GDPR apply.
Our lawful bases: - Performance of a contract or pre-contract steps (registration, consultant matching). - Consent (marketing communications, cookies/analytics). - Legal obligation (billing, accounting). - Legitimate interest (security, fraud prevention, product improvement).
Main purpose categories: account and identity management; consultant/employer matching; application and document workflows; fraud detection; product improvement and performance measurement; legal reporting.
Personal data is anonymized or deleted when legal obligations, contractual needs, or legitimate interests end. Deletion/update requests are fulfilled within 30 days after verification.
We work with cloud, analytics, email, and payment vendors as data processors. All vendors sign GDPR-compliant Data Processing Agreements (DPAs) and undergo additional security reviews.
Before transferring data outside the EU, we rely on Standard Contractual Clauses (SCCs) and apply extra technical safeguards. When non-EU hosting is required, encryption, access limits, and audit logging are mandatory.
You may exercise your rights under GDPR Articles 12-23: access, rectification, erasure, restriction, objection, data portability, and complaint. Requests are served free of charge after identity verification.
We do not run profiling or fully automated decision-making. If we introduce such features, we will provide clear notice and request explicit consent where required.
Data Controller: Migrolo Bilgi Teknolojileri A.Ş., Istanbul/Türkiye. Contact: [email protected] EU Representative (if applicable): Provided through our authorized consultants when needed.