Last update: 16/10/2026 

 

Nalgoo s.r.o develops and operates a recruitment management system. Our customers entrust us with the personal data of people applying for jobs. If that data is lost or misused, it can harm a person at a sensitive point in their life, and they have no way of preventing it. 

For us, protecting information is therefore not an add-on to the service. It is a condition of being able to provide it. The company's management has implemented an information security management system in accordance with ISO/IEC 27001:2022, has decided to have it certified, and commits to maintaining and continually improving it. 

 

We commit to  

– meeting legal and contractual requirements for the protection of information and personal data, – systematically assessing risks and making informed decisions about which risks we accept, – providing adequate resources for information security, 

– ensuring that every person working for the company knows the rules that apply to them, 

– handling security incidents, learning from them, and notifying the affected customer no later than 24 hours after discovery. 

 

We follow these principles 

– Information is available to those who are entitled to it, and to no one else. 

– Everyone is given access only to the extent they need for their work. 

– Security is part of the requirements, not a fix added after deployment. 

– We use only fictitious data for development, testing and demonstrations. 

– Responsibility is personal, and the rules apply equally to everyone. 

 

Report any security event, suspected data misuse or discovered vulnerability to incidents@nalgoo.com. We do not take legal action against anyone who reports a vulnerability in good faith and does not exploit it.