Abrivia Reviews 2

Abrivia is a small, agile recruitment agency that really stands out for its specialist, genuine approach.
They partner with companies across Ireland and the UK, providing tailored recruitment services backed by experienced consultants who are true local market experts in their niche areas.
Their size means they are flexible and responsive, while still offering the depth of knowledge you’d expect from a larger firm.

This balances credibility with brevity and focuses on agility, expertise, and local market knowledge.

Long story short, they kept information on me for 13 years and make it very difficult to get answers.

On the 13th March, I received an e-mail saying;

"It’s been a while since we last connected, and we’d love to make sure we’re reaching out with opportunities that truly match your career goals.

We currently have a range of exciting roles across the market, and 2025 is shaping up to be full of great opportunities. By updating your details, you’ll be the first to hear about relevant roles, salary insights, and market trends that align with your experience and ambitions.

It only takes 30 seconds to update your info, just click the button below!"

This was news to me since I had no record of contacting them so I sent a GDPR SAR to the e-mail and received an acknowledgement later that day that I would have my data in 1 month.
I sent a GDPR SAR not only requesting my data but with very specific questions on how my data was being processed including questions on Article 14 and Article 22.

27th March I received an e-mail saying
"Did we miss you? We emailed you a week ago, and just wanted to check with you again." and repeating the original e-mail.

On the 10th April I received what passed for a GDPR SAR and not only was it missing the data I requested, my very specific questions were plainly ignored.
The SAR amounted to;
"CV added to our database in 2012, it might have come from a jobs board"
and I found out "The purpose of you receiving our recent email was to get confirmation to either delete or retain your file."

On the 14th I responded asking for my data and answers to my questions.
On the 15th, I received a CV and an apology advising they were too busy buying easter eggs to deal with my GDPR SAR.
On the 16th I replied pointing out the SAR was very light and missing most of the information I requested and the organisation is obliged to provide.
I CCed some of the higher ups to get some answers before reporting the organisation to the Data Protection Commission.

I pointed out that that an organisation that I have no relationship with, keeping information on me for 13 years, and their method of asking if I want to delete it is to ask me to update my details comes across as very creepy!.

Maybe it was ill thought out, but from my perspective, it felt very sinister and stalkerish.

Later that day I received an answer from one of the people I CCed in the e-mail answering the questions I had about my data - finally.
I as asked if I wanted a copy of my data - I replied Yes and was told that I would receive a separate e-mail with a secure link.

Upon opening the link I found I had to create an account and the account would share some very specific and personal information.
Why do I have to create an account to get my data?.
Why do I have to allow this organisation to receive my profile data in order to get my data?.
Who do I have to allow this organisation to collect and log my activity in order to get my data?.
Who do I have to allow this organisation to use my profile data and activity data in order to get my data?.
Why do I have to give this organisation this kind of data in order to get my data?

This is a blatant violation of Article 5 of the GDPR - Data Minimisation.

I've made a complaint to the Data Protection Commission as they are playing silly buggers and I am sick to the back teeth of them.