Overview
Personio is an HR management platform popular among small and mid-size European businesses, providing applicant tracking, employee management, and payroll functionality. When detected on websites, Personio appears through embedded career pages and job application forms that allow candidates to browse open positions and submit applications. The platform replaces custom-built career sections with hosted job listings and application workflows that feed directly into Personio's applicant tracking system (ATS).
What This Script Does
Personio embeds career pages and application forms on employer websites.
- Career page embed: Personio's career page widget loads from Personio's infrastructure, displaying current job listings with search, filtering by department/location, and job detail views. The widget can be styled to match the employer's website branding.
- Application forms: Each job listing includes an application form collecting candidate data — name, email, phone, cover letter, CV/resume upload, and custom screening questions configured by the employer
- Scripts loaded: The career page and application forms load from
personio.deor Personio's CDN via iframe or JavaScript embed - Cookies set: Session cookies for maintaining the application form state (multi-step forms, uploaded files). Tracking cookies may be set for application source attribution — tracking which job boards, social media posts, or career page visits led to each application.
- Data collected: Candidate personal data (name, email, phone, address), CV/resume documents, cover letters, screening question responses, and application source metadata. This data is stored in Personio's ATS under the employer's data processing terms.
Consent & Compliance
Personio falls under the functional consent category.
Under GDPR and ePrivacy, the career page and application form serve a functional purpose — enabling candidates to apply for jobs. Application session cookies are required for the multi-step form process. Source attribution cookies that track how candidates arrived at the career page may require consent under the ePrivacy Directive if they go beyond strictly necessary functionality. Personio is headquartered in Munich, Germany, and processes data under GDPR with EU data residency.
Under CCPA/CPRA, candidate application data constitutes personal information. HR data collected during the application process has specific exemptions under CCPA's employment-related provisions.
Should You Block This Without Consent?
No. Personio's career page and application forms serve a functional purpose — enabling job applications that candidates explicitly initiate. Blocking them would prevent candidates from viewing open positions and submitting applications. Source attribution cookies are a minor concern that can be addressed separately if the employer requires strict consent management for those tracking cookies.
Consent Categories
Also Known As
Industries
Tracked Domains (1)
personio.comFunctionalFrequently Asked Questions
Does Personio require consent?
No. Personio career pages and application forms serve a functional purpose — enabling candidates to apply for jobs they have explicitly sought out. Session cookies for multi-step application state management are technically necessary and exempt from consent under ePrivacy.
What does the Personio script collect?
Personio collects candidate personal data (name, email, phone, address), CV and cover letter uploads, screening question responses, and application source metadata. Source attribution cookies may track which job boards or campaigns drove the application, scoped to the Personio domain.
How does ConsentStack handle Personio?
ConsentStack classifies Personio as functional, allowing career page embeds and application forms to load without requiring visitor consent. Candidates can discover positions and complete applications without encountering a consent barrier, keeping the hiring funnel fully operational.
Related Vendors
Manage consent for Personio
ConsentStack automatically detects and manages Personio trackers so your site stays compliant with global privacy regulations.