Information Security Statement

This document complements the Privacy Policy and GDPR notice. It describes the security measures used to protect personal data and recruitment information handled by Arctic Mango Agency.

1. Scope

This statement applies to the recruitment process, candidate data, CV files, contact details, and operational information stored, processed, or transmitted by the company in connection with worker placement and hiring services.

2. Responsibility and governance

Access to personal data is restricted to authorized personnel involved in recruitment, placement, or administration. The company assigns responsibility for reviewing access rights, monitoring systems, and responding to incidents to the relevant internal manager.

3. Technical and organizational measures

We use modern security controls including encrypted HTTPS connections, access control to internal systems, secure hosting environments, restricted file access, limited administrative rights, logging of system activities, and regular review of the tools and services used. Uploaded CV files and personal data are stored only in the systems required for recruitment and client coordination.

4. Data minimization and handling

We process only the personal data necessary for recruitment and placement. Candidate information is not shared more widely than required for recruitment purposes, and we limit access to staff who need it for legitimate business functions.

5. Incident response and notifications

If a security incident affecting personal data is identified, the company will assess the impact, contain the issue, and take appropriate remedial action. Where required by applicable law, we will notify the relevant authority and affected individuals as soon as reasonably possible.

6. Contact

For questions or concerns regarding security practices, please use the Contact Us page and include the subject line: Information Security.