Privacy policy

Last updated: 11 September 2026

Who we are

Zarya Consultants ("Zarya", "we", "us") is a workforce solutions and international recruitment company registered in Denmark. We are the data controller for the personal data described in this policy, within the meaning of the General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR").

Contact address: Ørestads Blvd. 106, 2300 København, Denmark

For any question about this policy or your data, contact info@zaryaconsultants.com.

What we collect

If you are a candidate

Identity and contact details: name, email, phone/WhatsApp number, nationality, current location
Professional details: industry, desired roles, years of experience, skills and certifications, relocation preferences
Documents you upload: your CV, and optionally certificates, licences or passport copies
Application records: which vacancies you applied to and the status of each

If you are an employer

Company name, contact person, job title, business email and phone
Requirement details: roles, volumes, location, package, timeline, and any job description you upload

If you are a recruitment partner

Agency name, contact person, email, phone, country, licence or registration number, website
Capability information: partner type, industries, corridors covered, capacity, and licence documents you upload

Everyone

Technical data: IP address and the page you submitted a form from, kept for security and lead-source reporting
Consent records: what you agreed to, and when

Why we use it, and our legal basis

Under the GDPR we must have a lawful basis for each use of your data. Ours are:

To match candidates to roles and present shortlists to employers, the core service you approached us for. Basis: steps taken at your request before entering a contract, and our legitimate interest in operating a recruitment service (Art. 6(1)(b) and 6(1)(f)).
To process a hiring requirement and contact you about it. Basis: contract, or legitimate interest in responding to a business enquiry (Art. 6(1)(b) and 6(1)(f)).
To verify partner agencies before granting access to live requirements. Basis: legitimate interest in preventing fraud and protecting candidates (Art. 6(1)(f)).
To meet legal and regulatory obligations, including those applying to recruitment businesses in Denmark and the labour, immigration and tax rules of the countries involved in a placement. Basis: legal obligation (Art. 6(1)(c)).
To send resources or job alerts, where you have asked us to. Basis: your consent, which you may withdraw at any time (Art. 6(1)(a)).
To protect the service against spam, fraud and abuse. Basis: legitimate interest in keeping the service secure (Art. 6(1)(f)).

Sensitive data

Some placements require a medical examination, and some destination countries require data that the GDPR treats as a special category, such as health information. We collect it only where a specific role or destination genuinely requires it, and we rely on your explicit consent (Art. 9(2)(a)) or, where applicable, on obligations in the field of employment law (Art. 9(2)(b)). You can refuse, though we will tell you plainly if that means a particular role cannot proceed.

We do not ask for information about your race, religion, political opinions, trade union membership or sexual orientation, and you should never be asked for it by anyone claiming to recruit on our behalf.

Automated decision-making

We do not make decisions producing legal or similarly significant effects about you by automated means alone. Shortlisting is carried out by people. Filters on our vacancy listings only sort what you see; they do not decide anything about you.

Who we share it with

We do not sell your personal data. We share it only as follows:

Employers. A candidate CV is sent to a named employer for a named role, and we tell the candidate which employer before it is sent. We do not circulate CVs speculatively.
Partner agencies. Where a partner sourced or is servicing a placement, limited candidate data is shared for that purpose only.
Service providers. Medical centres, attestation services, visa processing agents and travel providers, strictly as required to complete a placement.
Authorities. Where a government body legally requires it as part of an emigration, licensing or work-permit process, or where we are compelled by law.

Sending data outside the European Economic Area

International recruitment means your data will cross borders. Many of the countries we place into, including the Gulf states, have not been recognised by the European Commission as providing an adequate level of data protection.

Where we transfer personal data outside the EEA, we rely on one of the safeguards the GDPR allows:

an adequacy decision by the European Commission, where one covers the country (Art. 45);
Standard Contractual Clauses approved by the European Commission, in our agreements with employers and partner agencies (Art. 46);
where neither applies, the derogation for a contract concluded in your interest, because a placement abroad cannot be completed without sending your details to the employer and the relevant authorities in that country (Art. 49(1)(b) and (c)). We tell you which employer and which country before we send anything.

You may ask us for a copy of the safeguards that apply to a transfer involving your data.

How long we keep it

Candidate profiles and CVs: retained while your profile is active and for a reasonable period afterwards so we can contact you about suitable roles. You can ask us to delete it sooner.
Employer and partner records: retained for the duration of the relationship and for the period required by contract and applicable law.
Placement records: retained as long as required by the labour, immigration and tax rules of the countries involved.
General enquiries: retained for a limited period sufficient to handle and follow up the enquiry.

Your rights

The GDPR gives you the following rights over your personal data:

Access. A copy of the personal data we hold about you (Art. 15).
Rectification. Correction of anything inaccurate or out of date (Art. 16).
Erasure. Deletion of your data, where we are not required to keep it (Art. 17).
Restriction. To have us pause processing while a dispute about accuracy or legitimate interest is resolved (Art. 18).
Portability. To receive the data you gave us in a structured, commonly used, machine-readable format, or have it sent to another controller (Art. 20).
Objection. To object to processing based on our legitimate interests, and to object to direct marketing at any time, which we will always honour (Art. 21).
Withdraw consent. At any time, without affecting processing carried out before you withdrew it (Art. 7(3)).

To exercise any of these, email info@zaryaconsultants.com. We respond within one month, and may need to verify your identity first, which itself protects you against someone else requesting your data. Exercising these rights is free.

Complaints

If you believe we have handled your data unlawfully, please tell us first so we can put it right. You also have the right to lodge a complaint with the Danish supervisory authority:

Datatilsynet (the Danish Data Protection Agency)
Carl Jacobsens Vej 35, 2500 Valby, Denmark
datatilsynet.dk

If you live in another EU or EEA country, you may instead complain to the supervisory authority where you live or work.

Security

Form submissions are protected against cross-site request forgery and automated abuse. Uploaded files are type- and size-checked, stored outside the executable path, and served only as downloads. Access to candidate, employer and partner records is limited to staff who need it for their role. No system is perfectly secure, but we take these obligations seriously.

Where a personal data breach is likely to result in a risk to your rights and freedoms, we notify the President of the Personal Data Protection Office within 72 hours as required by Art. 33 GDPR, and we notify you directly where the risk is high (Art. 34).

Cookies

This site uses a session cookie to keep forms working correctly and to protect against cross-site request forgery. It is essential to the operation of the site. See our cookie policy for detail, including any analytics cookies added later.

A note on recruitment fraud

Zarya never charges candidates illegal placement fees, and never asks for payment into a personal account. If you receive such a request from someone claiming to represent us, do not pay. See our anti-fraud policy and report it to us.

Changes to this policy

If we change this policy we will update the date at the top of this page. Material changes affecting how we use data you have already given us will be notified directly where we hold contact details for you.