your privacy, explained.

This Data Protection Notice applies to: the processing of personal information we collect when you visit our website, use our mobile application, or when we provide you with recruitment services and comprehensive human resources solutions, such as professional recruitment services, executive search, HR business process outsourcing, recruitment process outsourcing (RPO), HR vendor management services, and outplacement/career transition services; and the processing of personal information of employees of companies with which we conduct (or plan to conduct) business. 

Your privacy and the security of your personal information are of paramount importance to Randstad Enterprise Management (Shanghai) Co., Ltd. and its affiliated companies in China (hereinafter referred to as "Randstad China"), as well as the entire Randstad Group. We are responsible for ensuring that all personal information entrusted to us is processed in accordance with applicable data protection laws and regulations. 

This Notice sets forth: our identity, the purposes for which we use your personal information, how it is processed, the parties to whom it may be disclosed (such as clients, service providers, and/or other Randstad Group companies), the locations to which it may be transferred or accessed, and your relevant rights. 

• about randstad

  Randstad Enterprise Management (Shanghai) Co., Ltd. and its entities under its jurisdiction within the territory of China (referred to as "we" or "Randstad China" in this Notice) will process your personal information (such personal information is also sometimes referred to as "information") in accordance with this Data Protection Notice. 

  Except as otherwise provided below, Randstad China is the controller of personal information (as defined under applicable data protection laws and regulations for "data controller"). 

  To ensure efficient business operations and management, companies under the Randstad Group may, under specific circumstances, jointly determine the purposes and means of processing personal information, thereby acting as joint controllers ("joint controllers" as defined by applicable data protection laws and regulations). The contents of the Joint Controller Agreement between Randstad Group companies can be accessed via the following link: Summary of Joint Personal Information Processing Agreement. 

  If you need details about these joint controller processing activities, request a summary of the distribution of responsibilities among joint controllers, and/or exercise your data protection rights regarding the joint processing of personal information, please contact us via the "Contact Us" section below. 

• HR technologies

  We utilize innovative HR technologies for talent matching and service delivery. 

  Our ultimate goal is to empower individuals and organizations to reach their true potential. We firmly believe that combining a passion for talent with the power of modern HR technology is the best way to achieve this goal. By HR technology, we mean technologies that help us digitize and streamline recruitment-related processes. 

  For example, we use chatbots to enhance your candidate experience. This technology provides tailored Q&A services to candidates based on job requirements, offering a convenient way to: 

  • Provide us with key information that may not be fully reflected in your application form, profile, or resume.
  • Instantly learn whether your skills meet the core job requirements—if not, you can easily explore other positions or identify skill gaps.
  • Answer flexibly anytime, anywhere. 

  Furthermore, we may use artificial intelligence technologies (such as generative AI or resume parsing tools) to intelligently extract and structurally analyze the resume and professional information you submit, assisting our consultants in evaluating your job compatibility more efficiently.  

  As part of the broader recruitment process, HR technologies enable us to connect candidates with our consultants more quickly. This, in turn, allows our consultants to better support candidates in exploring career opportunities and present suitable candidates to clients faster. HR technologies also empower our consultants to search for talent based not only on the positions candidates qualify for, but also on the roles they are interested in. 

  Improving Client Experience 

  HR technologies empower us to screen a broader and more diverse pool of candidates, enabling us to pinpoint the right talent with the most fitting skills for our clients. By leveraging these technologies, our consultants can focus on areas where tech cannot replace human touch: tasks that require creativity and emotional judgment. 

  Tracking Pixels or Web Beacons 

   

  Our emails may contain "web beacons" or "tracking pixels" tailored for various marketing activities. These tools enable us to understand the actual reach of our emails, whether an email has been opened, and to verify whether users have clicked links or forms within the email (such as downloading relevant reports), thereby helping us evaluate and optimize the effectiveness of our marketing campaigns. 

   

  Recipients do not need to download or install any additional plug-ins or attachments to read or interact with our emails. Such tracking is based on your prior authorization, which is obtained together with consent for email marketing purposes. Every marketing email includes a clear unsubscribe button, allowing you to freely withdraw your consent at any time. Upon withdrawal, we will stop sending you future marketing emails, and the associated tracking will cease accordingly. If you do not wish for pixels to be loaded onto your device, you can also prevent pixel triggering by setting your email client to "disable automatic image downloads"; furthermore, relevant pixels will be deleted when you delete the email.

   

   

  Responsible Use of HR Technology 

  Randstad is committed to using innovative HR technologies in an ethical and responsible manner (you can view our AI Principles here). Randstad will never replace humans or human interaction with technology in any aspect of our business; instead, we use technology to make interactions with clients and candidates more personalized, relevant, and meaningful. 

  When major decisions are involved, we always ensure human intervention. If, under exceptional circumstances, a decision needs to be made through a fully automated process (i.e., without human intervention), we will only do so where permitted by law and with prior notice to you. 

  To ensure fair treatment for all candidates, we take measures to avoid bias when using HR technology, including: 

  • Regularly testing the results generated by these technologies to identify potential unfair bias.
  • Frequently seeking expert advice to continuously improve our methods for identifying and eliminating bias.
  • Ensuring our consultant teams and search-matching algorithms are rigorously trained and always work in synergy.  

• with whom do we share your personal data

  We may share your personal information with the following parties: 

  Randstad Group Entities:  

  • Shared with other entities within the Randstad Group. As a member of a multinational corporate group, we sometimes share personal information with other Randstad Group companies for the purposes of efficiently managing our business, complying with legal and regulatory requirements, and delivering services to you (including matching services) and our clients. Click here to view an overview of our entities. 

  Our "Partner for Talent" strategy is dedicated to building long-term relationships with clients and talent, understanding their unique challenges, and delivering customized solutions to help them thrive in a dynamic global talent market. Leveraging data, technology, and deep industry expertise, we precisely match talent with opportunities. 

  Overseas Data Recipients	Country/City	Contact	Type of Personal Information	Personal data transfer and Purposes of personal information processing
  Randstad Hong Kong Limited	Hong Kong	privacy@randstad.com.hk	Basic personal information, including full name, gender, ethnicity, nationality, residential address, personal phone number, email address, occupation, job title, employer, educational background, degree, education history, work history, and training records.	As a multinational corporate group, we may sometimes transfer and share your personal data with other Randstad Group companies to effectively manage our business and comply with legal and regulatory requirements. This means that, with your consent, your personal information may be transferred outside the People's Republic of China or accessed from these overseas regions.
  Randstad Pte. Limited	Singapore	privacy@randstad.com.sg
  Randstad Pty Limited	Australia	privacy@randstad.com.au
  Randstad Solutions Limited	Ireland	privacyofficer@randstad.co.uk
  Randstad Deutschland GmbH & Co.KG	Germany	datenschutz@randstad.de
  Randstad B.V	Netherlands	privacyofficer@randstad.com
  Randstad India Private Limited	India	dpis.india@randstad.in
  Standard Corporate Translation				In order to effectively fulfill key contractual obligations between us and our clients or suppliers, we may need to transfer your personal information outside the People's Republic of China under specific circumstances. Prior to conducting such cross-border transfers, we strictly adhere to applicable data protection regulations to ensure that your explicit consent has been obtained, and we take all necessary measures to protect the security of your personal information.

   

  External Service Delivery Partners: 

  • Randstad Clients: Shared to provide our scope of services, including recruitment and temporary staffing.
  • Shared with third parties providing HR-related services to us (such as payroll service providers).
  • IT Service Providers: Shared with third-party providers of IT-related services (e.g., external vendors supporting our IT infrastructure, or third-party cloud environments hosting key portions of our software and databases).
  • Marketing Service Providers: Shared with third-party marketing service providers (e.g., storing your personal information in a third-party hosted cloud CRM, or sharing details with event organizers to send you event invitations).
  • Professional Service Providers: Shared with professional advisors (e.g., our auditors, tax advisors, and legal counsel).
  • Financial & Insurance Institutions: Shared with banks and insurance providers (e.g., providing employee details to partner banks to process payroll for temporary workers).
  • pension fund.

   

  Public and Regulatory Authorities: 

  • Shared with public authorities (for example, where Randstad is required under applicable law to disclose personal information to social security bodies and tax authorities).
  • Shared with law enforcement agencies, courts, and regulatory authorities (for example, in a criminal investigation, police may require us to disclose personal information to them). 
    
     

  We may also disclose your personal information to third parties: 

  • In the event that we sell or buy any business or assets, in which case we may disclose your personal information to the prospective seller or buyer of such business or assets; or
  • If all or substantially all of our assets are acquired by a third party, in which case personal information held by us about you may be among the transferred assets. 

   

  When we share your personal information in the manner described above, such personal information may be transferred both within and outside the European Economic Area (EEA).  
  
  Where cross-border transfers are involved, we will strictly comply with applicable laws to ensure that your personal information receives adequate protection and that appropriate security measures are implemented. 
  
  Your personal information may be transferred from countries within the EEA to countries outside the EEA (such as the United States). In such cases, we require compliance with the following safeguards: 

  • The laws of the receiving country ensure an adequate level of personal data protection. Click here to view the European Commission's list of countries (non-EEA) recognized as providing adequate personal data protection; or
  • Such transfer is subject to standard data protection clauses approved by the European Commission. For more information on these clauses, please click here;
  • Other applicable safeguards pursuant to Article 46 of the EU General Data Protection Regulation (2016/679). 

  For personal information collected within Mainland China, we will fulfill statutory obligations—such as security assessments for outbound data transfers, filing of standard contracts, or personal information protection certification—in accordance with legal requirements, and inform you of the overseas recipient's specific name, contact details, processing purposes, and other required information. 

  If you would like to know more about the specific safeguards we implement to protect personal information during cross-border transfers, please contact us at Privacy@cn.randstad.com. 

• how we will protect your personal data

  We have implemented technical and organizational security measures to protect your personal information against accidental loss, misuse, alteration, destruction, disclosure, or unauthorized access. Access to your personal information is restricted solely to employees who have a legitimate business need to know. Employees who process your personal information are bound by Randstad's Information and IT Security Rules, data protection policies, and other applicable internal rules and regulations governing personal information processing. 

  While we have implemented protective measures, please be aware that absolute security cannot be 100% guaranteed. Accordingly, we have established procedures for handling data security incidents and strictly comply with legal requirements regarding the detection, management, and notification of personal information breaches. 

• your data protection rights

  You have the following rights regarding your personal information: 

  Right	Specific meaning
  1. Right to be Informed	You have the right to receive clear, transparent, and easily understandable information about how we use your personal information and your rights. This notice serves to provide you with that information.
  2. Right of Access	You have the right to access the personal information we hold about you. This allows you to know what personal data we hold and verify whether we are processing it in accordance with applicable data protection laws and regulations.
  3. Right to Rectification	You have the right to request the correction of your personal information if it is inaccurate or incomplete.
  4. Right to Erasure	Also known as the "right to be forgotten," this right allows you to request the deletion or removal of your personal information where there is no compelling reason for us to keep using it. This is not an absolute right to erasure, as exceptions apply.
  5. Right to Restrict Processing	Under certain circumstances, you have the right to "block" or suppress further use of your personal information. When processing is restricted, we may still store your personal information, but we cannot use it further. We maintain a list of individuals who have requested to block further use of their personal information to ensure the restriction is respected in the future.
  6. Right to Data Portability	You have the right, under certain circumstances, to obtain and reuse your personal information in a structured, commonly used, and machine-readable format. Additionally, where technical conditions permit, you have the right to request that such personal information be transmitted directly to a third party.
  7. Right to Object	You have the right to object to certain types of processing under specific circumstances, including: processing based on our legitimate interests or public interests; processing for direct marketing purposes (including profiling); and, under certain conditions, processing for scientific or historical research and statistical purposes.
  8. Right to Withdraw Consent	Where our processing of your personal information is based on your explicit consent, you have the right to withdraw that consent at any time. This includes the right to withdraw consent for the use of your personal information in voluntary employee surveys.
  9. Right to Object to Automated Decision-Making	You have the right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning you or similarly significantly affects you. Automated decision-making occurs when electronic systems use personal information to make decisions without substantial human intervention.    Certain exceptions apply to this right. For instance, we may carry out automated decision-making when necessary for entering into or performing a contract with you (pre-contractual or contractual necessity), or with your explicit consent (where you have freely consented to such automated processing), provided that appropriate safeguards are implemented, including:  The right to obtain human intervention; The ability to express your point of view; and The right to contest the decision or request a review.   If the automated processing is necessary for entering into or performing a contract, your objection may result in our inability to conclude or continue performing the contract. If automated processing is based on a legal ground other than contractual necessity (such as consent), you have the right to object or withdraw your consent at any time, and we will review your request in accordance with data protection requirements. For more information, please refer to the "HR Technology" section.

  You can exercise your rights by contacting: Privacy@cn.randstad.com. 
  
  We will handle your request with utmost care to ensure that your rights are effectively exercised. To ensure that personal information is disclosed only to you, we may require you to provide proof of identity.

  Please note that in certain circumstances (for example, due to legal requirements), we may not be able to comply with your request immediately.

  In any event, we will inform you of the actions taken within 15 working days of receiving your request.

  You have the right to lodge a complaint with the data protection authority: the Cyberspace Administration of China (CAC) or other relevant industry regulatory authorities.

• changes to this data protection notice

  We may update this notice from time to time. You can check the date of the most recent modification at the end of this notice. We encourage you to review this notice regularly to stay informed of any changes. 

• contact us

  If you have any questions, privacy concerns, or wish to exercise your rights regarding this notice, or if you would like to learn more about the safeguards we have implemented to ensure adequate protection of personal information transferred outside of Europe, please contact us at: Privacy@cn.randstad.com 

  This notice was updated on: September 1, 2026