Does Personio require consent?

No. Personio career pages and application forms serve a functional purpose — enabling candidates to apply for jobs they have explicitly sought out. Session cookies for multi-step application state management are technically necessary and exempt from consent under ePrivacy.

What does the Personio script collect?

Personio collects candidate personal data (name, email, phone, address), CV and cover letter uploads, screening question responses, and application source metadata. Source attribution cookies may track which job boards or campaigns drove the application, scoped to the Personio domain.

How does ConsentStack handle Personio?

ConsentStack classifies Personio as functional, allowing career page embeds and application forms to load without requiring visitor consent. Candidates can discover positions and complete applications without encountering a consent barrier, keeping the hiring funnel fully operational.

What tracker domains does Personio use?

ConsentStack has catalogued tracker domains for Personio including personio.com. These are the network destinations Personio's scripts contact, which a consent platform blocks until a visitor agrees.

Personio - HR Career Pages & Cookie Consent Profile

Back to Vendor Library

Overview

Personio is an HR management platform popular among small and mid-size European businesses, providing applicant tracking, employee management, and payroll functionality. When detected on websites, Personio appears through embedded career pages and job application forms that allow candidates to browse open positions and submit applications. The platform replaces custom-built career sections with hosted job listings and application workflows that feed directly into Personio's applicant tracking system (ATS).

What This Script Does

Personio embeds career pages and application forms on employer websites.

Career page embed: Personio's career page widget loads from Personio's infrastructure, displaying current job listings with search, filtering by department/location, and job detail views. The widget can be styled to match the employer's website branding.
Application forms: Each job listing includes an application form collecting candidate data — name, email, phone, cover letter, CV/resume upload, and custom screening questions configured by the employer
Scripts loaded: The career page and application forms load from personio.de or Personio's CDN via iframe or JavaScript embed
Cookies set: Session cookies for maintaining the application form state (multi-step forms, uploaded files). Tracking cookies may be set for application source attribution — tracking which job boards, social media posts, or career page visits led to each application.
Data collected: Candidate personal data (name, email, phone, address), CV/resume documents, cover letters, screening question responses, and application source metadata. This data is stored in Personio's ATS under the employer's data processing terms.

Consent & Compliance

Personio falls under the functional consent category.

Under GDPR and ePrivacy, the career page and application form serve a functional purpose — enabling candidates to apply for jobs. Application session cookies are required for the multi-step form process. Source attribution cookies that track how candidates arrived at the career page may require consent under the ePrivacy Directive if they go beyond strictly necessary functionality. Personio is headquartered in Munich, Germany, and processes data under GDPR with EU data residency.

Under CCPA/CPRA, candidate application data constitutes personal information. HR data collected during the application process has specific exemptions under CCPA's employment-related provisions.

Should You Block This Without Consent?

No. Personio's career page and application forms serve a functional purpose — enabling job applications that candidates explicitly initiate. Blocking them would prevent candidates from viewing open positions and submitting applications. Source attribution cookies are a minor concern that can be addressed separately if the employer requires strict consent management for those tracking cookies.

Is Personio GDPR compliant?

Personio typically loads functional trackers, which are not strictly necessary for your site to work. Under the GDPR and the ePrivacy Directive, non-essential cookies and trackers must stay blocked until a visitor gives clear opt-in consent. So Personio can be fully GDPR compliant, but only if your site holds its scripts until consent is granted and lets visitors decline just as easily. Compliance depends on how your site loads Personio, not on Personio itself.

Visit website