Information You Provide Directly
We may collect the following personal information from you when you apply for a position:
Information We Collect from Other Parties
We may collect personal information from other parties as part of the recruitment process. For example:
We may collect and use your personal information for the following purposes:
As part of the recruitment process, GitLab may disclose your personal information in the following circumstances:
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we collect and process your personal information on the following legal bases set out by applicable law:
Consent: We may ask you for your consent to process your personal information. You can withdraw your consent at any time, which will not affect the lawfulness of the processing before your consent was withdrawn.
Legitimate Interest: We process certain personal information for our legitimate interests. These legitimate interests include, for example, administering the recruitment process and managing applicants effectively.
Performance of a Contract: We process personal information to perform steps that are necessary prior to entering an employment contract with you, where you are considered for employment.'
Compliance with Legal Obligations: In some cases, we may have a legal obligation to process your personal information, such as to meet our legal requirements or in response to a court or regulatory order. We also may need to process your personal information to protect vital interests, or to exercise, establish, or defend legal claims.
Your personal information may be processed in the United States, the country where you have applied for a job, or any other country where GitLab or its subcontractors have team members or operations.
GitLab may transfer, store, or process your personal information in a country outside your jurisdiction, including countries outside the European Economic Area (“EEA”), Switzerland, and the United Kingdom. If we transfer personal information from the EEA, Switzerland, or United Kingdom to a country outside it, such as the United States, we will enter into EU standard contractual clauses with the data importer, or take other measures to provide an adequate level of data protection.
Access to your personal information is controlled and GitLab maintains a comprehensive information security program using administrative, physical, and technical safeguards.
Your personal information will be retained until the end of the employment application process plus a reasonable period thereafter. If your job application is successful, the personal information collected during the recruitment process will be added to your human resources file and retained for the duration of your employment.
You may access, correct, or delete your personal information at any time. You may also withdraw your consent, or object to the processing of your personal information when based on our legitimate interests. To do so, please contact us at:
If you have questions or concerns about the way we are handling your information, please email us with the subject line "Privacy Concern" at
The controller of your personal information is the GitLab affiliate who is hiring.
This policy was last updated on