Well, it is in the EU. GDPR commonly is perceived as applying to online businesses alone, which of course is wrong. As a company you’re only allowed to ask for

Well, it is in the EU. GDPR commonly is perceived as applying to online businesses alone, which of course is wrong. As a company you’re only allowed to ask for and record the data that’s required to conduct the business at hand. Otherwise, you have to tell your customers how their data will be used. This of course absolutely applies to traditionally offline businesses such as recruitment agencies as well.