You
If you use Recruitee’s ATS, then you are seen as a data controller. As a data controller you have the responsibility for the protection of your applicants' personal data. This means you'll need to have full control over how your ATS processes personal data.