GDPR and ethics – How we protect your privacy
Fully GDPR compliant
Compliant with European and German privacy regulation – arguably the toughest privacy laws worldwide
Audited AI-models
Our AI has been debiased and tested on global datasets, incl. the UCLA Fairface dataset
Candidate friendly
Not only do we empower candidates to show their best side, we also give them full control over their data
Secure cloud hosting
We exclusively host client and candidate data on ISO-certified servers within the European Union
Data handling & data storage
We’re committed to ensuring the security and protection of the personal information that we process. We provide a GDPR-compliant and consistent approach to our data protection and only work with certified partners.
Candidate information
Your candidates' information is very sensitive and needs to be protected. Retorio has no access to personal data, as all data and analyses are anonymized and securely encrypted.
Data storage and transfer
Committed to remaining GDPR compliant, Retorio transfers data confidentially and exclusively on European servers. All servers are ISO 27001 Certified to guarantee data protection and privacy.
Data deletion
Your candidates' information is very sensitive and needs to be protected. Retorio has no access to personal data, as all data and analyses are anonymized and securely encrypted.
Our ethics go far beyond GDPR compliance
Our values directly translate into how we deal with candidates.
Voluntariness
Participants are informed that using Retorio is absolutely voluntary and that there are other alternative application options (e.g. uploading a cover letter) and that there is no risk of disadvantages in the event of non-participation. The voluntariness of the participation is also guaranteed by the fact that the participant can stop and delete the recording at any time or delete the completed recording at any time (as long as it has not yet been sent to the company).
Fairness
Retorio was designed to support organizations to drive sustainable behavior change, at scale. With AI-powered training simulations, every employee has a personal AI coach on demand to support their development.
Anonymity
Retorio anonymizes and encodes all user data in advance to guarantee that an identification of your applicants and employees is not possible.
Support
Retorio was designed to support recruiters with recommendations. Automated individual decisions about whether or not an application should be considered are not possible. For example, Retorio allows recruiters to sort applications according to various criteria (similar to the sort function in existing application tracking systems), but the human still has the authority to make decisions.
Flexibility
We want to be adaptable to and respectful of candidates' time schedule and resources. Participants using Retorio can easily access and upload videos from their mobile device independent of time and location. Furthermore, time consuming preparation of motivational letter and CV are omitted from the process.
Transparency
Retorio believes in providing feedback and making hiring decisions transparent. The scientific foundation of Retorio's software stands as warrantor for the ultimate goal of sustained candidate and employer satisfaction enabled by optimal objective fit.
Continuous improvement
We are committed to continuous improvement rather than unattained perfection. Retorio works relentlessly on mending bugs, collecting data and increasing accuracy.
FAQs
We’re committed to ensuring the security and protection of the personal information that we process. We provide a GDPR-compliant and consistent approach to our data protection and only work with certified partners.
Retorio is a cutting-edge AI Coaching Platform that takes learning to the next level. Retorio’s AI coach simulates typical challenges that your learners face in their career. It has assimilated knowledge from tens of thousands of professionals worldwide, enabling it to address sales, service, and leadership challenges adeptly. Retorio’s AI coach prepares learners to navigate the most challenging situations in their careers.
Retorio's AI Coaching Platform does not fall under the prohibited AI use cases under the AI Act, Chapter II, Article 5 or any other articles.
The EU AI Act explicitly addresses the use of emotion recognition systems and social scoring classifies them as prohibited AI applications when used in certain contexts. This regulation primarily targets AI systems that attempt to infer emotional states from biometric data such as facial expressions, body language, or physiological signals and scoring systems that aim at preventing individuals from getting access to certain resources.
While detecting emotions is forbidden by the AI Act, detecting readily apparent facial expressions, such as “smiling” is explicitly exempted from the list of prohibited use cases in Article 5 of the AI Act.
* Compliance with GDPR and the EU AI Act.
* Capturing and analyzing only empirically relevant data.
* Rigorous testing and quality checks of AI models.
* Training AI on diverse and debiased datasets.
* Not using biometric data for individual recognition or emotion recognition.
* Offering optional personal data usage with anonymization available.
* Allowing users to delete all data within the system.
* Hosting the platform in the EU on ISO-certified servers.
* Conducting quarterly penetration tests for robustness.
* Implementing disaster recovery plans to prevent data loss.
* Limiting platform access to authorized users.
* Providing transparency by informing users about the AI system in use.
* Not collecting data from external sources like the internet or CCTV footage.
* Maintaining a commitment to meeting future regulatory requirements.
* Holding ISO 27001 certification.
* Ensuring data from subprocessors is automatically deleted after sessions.
* Providing mandatory GDPR training for employees and having an external data protection officer.
* Designing AI coaching models to avoid identifying users or their inner emotions.
* Processing data without controlling end-user data.
* Compliance: Retorio is compliant with GDPR and designed to align with the proposed EU AI Act. It is also ISO 27001 certified.
* Data Relevance: Only empirically examined and relevant data is captured and analyzed.
* Anonymization: Person-related data is optional, and the platform can work with full anonymization using token login.
* Deletion: All data can be deleted by the user within the system.
* Hosting: The platform is hosted in the EU on ISO-certified servers.
* Security Testing: Penetration tests are performed quarterly to check robustness.
* Access Control: The platform can only be accessed by authorized users.
* Transparency: Users are informed that an AI system is in use.
* Subprocessor Data: Data from subprocessors is automatically deleted after each session.
* No Personal Identification: Retorio is not designed to identify individuals and does not record identifying characteristics. It does not conduct biometric analysis.
Retorio addresses ethical AI use by adhering to several key principles. It prioritizes user privacy and data protection by being GDPR and EU AI Act compliant. Retorio's AI is designed to analyze communication for coaching, not to infer emotions or collect biometric data for identification.
The platform operates transparently by informing users that an AI system is in use. Retorio focuses on relevant, empirically examined data and actively works to debias its datasets and models to prevent unequal treatment. The platform does not record sensitive personal characteristics like skin color, gender, or age. Retorio emphasizes enabling people's growth in a psychologically safe environment, not monitoring their performance for employment decisions. The company is ISO-certified, indicating adherence to data protection and process standards.
* Compliance with EU AI Act and GDPR.
* Focus on analyzing behavior for coaching, not inferring emotions or identifying individuals.
* Transparent use of AI, informing participants.
* Use of relevant, empirically examined, and debiased data.
* Avoidance of capturing discriminatory data like skin color, gender, or age.
* Models tested against scientific datasets to ensure robustness and mitigate bias.
* Commitment to ethical AI development guidelines.
* Option for data deletion and anonymization.
* External data sources are not collected.
* Emphasis on enabling user growth in a psychologically safe environment, not performance monitoring for employment decisions.
* ISO certification indicating adherence to data protection and process standards.
* Legal assessment confirming compliance with AI Act regulations.
Click here 
to view the entire FAQ version
Do you have any questions regarding our ethics or GDPR compliance? Talk to us!
