Do you have to store personal data the company receives with a CV?

These data have to be stored as well. The company must decide how long the data is stored, considering the purpose for storage, whether to store all CVs or part of them, etc. You should develop a procedure for receiving applicant approval of their data being stored, for example, you can post this in the job advertisement and in the e-mail about you receiving the application provide information on how long you will store the CV and why. You should also develop a procedure containing applicant rights for demanding data erasure (the right to “be forgotten”): You should indicate your phone, e-mail or other means of communication with the help of which the data subject can send their questions or demand the execution of data controller responsibilities regulated by GDPR.