Privacy policy

What personal information do we collect?

Mostly, the personal data we collect, and process is limited to the following types:

• Identification data: First name, surname
• Contact data: work/personal address, work/personal email, work/personal phone number
• Job position related data: Job title, employer name,

Electronic identification data: IP address or device ID, Cookie data, Browsing history Moreover, if you contact us for recruitment purposes, we may also collect and process other personal data, including:

• Qualifications, employment history, interview notes and any other information you have provided to us in your curriculum vitae and covering letter.
• Any information you provide to us during an interview.

Why do we use your personal data?

We will generally only use your personal data for the purpose described to you at the time of collection. Data protection legislation specifies that we must have one or more of these reasons for processing personal data:

• To fulfil a contract, we have with you or your employer, or take steps to enter into a contract with you or your employer
• When it’s our legal duty (e.g., in relation to supervisory authority investigations, fraud prevention or public planning consultations)
• When it is in our legitimate interest (e.g., connected to expanding our business network, ensuring our clients receive relevant advertisements or recruitment purposes)
• When you consent to it (e.g., through newsletter sign-ups)

Where you contact us in relation to recruitment purposes, we will use your personal data to:

• assess your skills, qualifications, and suitability for the role you are applying for;
• keep records related to our hiring processes; and
• comply with legal or regulatory requirements.

How long will we keep your personal data?

The information we hold about you will be retained in a manner consistent with the applicable data protection legislation. In any event, your information shall not be kept longer than is necessary to achieve the purposes stated in this Privacy Policy.

In determining the relevant retention periods, we will consider the following factors:

• our contractual obligations and rights in relation to the information concerned;
• legal obligation(s) under applicable law to retain data for a certain period of time;
• limitation periods in accordance with applicable law(s);
• our legitimate interests for which we have carried out a balancing exercise (see below);
• (potential) disputes; and
• guidelines issued by the relevant data protection authorities.

We have set out below, in a table format, a description of the legal bases described above. 

We may need to collect personal data by law, or under the terms of a contract we have with you. If you choose not to give us this personal data, it may delay or prevent us from providing our products or services to you or prevent us from using your services.

With whom do we share your personal data?

We may share your personal data with our contractors and service providers who perform certain business-related functions. These companies may include:

• Third-party marketing and advertising agencies
• Database service providers, including those providing cloud storage
• Backup and disaster recovery service providers
• Website hosting companies
• Email/mailing service providers
• Recruitment platform
• Recruitment & selection agencies
• IT-service providers

We may also need to disclose your personal data to public authorities where required to do so by law in order to, for example, respond to a request from a law enforcement authority, a court or a government agency (including in response to public authorities to meet national security or law enforcement requirements).

To safeguard your personal data, we require third parties receiving personal data from us to commit to respecting a similar level of the protection of personal data to that under the GDPR in their contracts with us. If we transfer information outside of the European Economic Area (EEA), we will make sure that it is protected in the same way as if it were being used in the EEA. To do this, we will use one or more of these safeguards:

• Only transfer it to a non-EEA country with privacy laws that give the same protection as the EEA, as deemed by the European Commission.
• Ensure that a contract with the recipient is in place that means they must protect it to the same standards as the EEA, such as through signed EU-approved Standard Contractual Clauses.

Do you want us to share what personal data we have about you, with you?

You have the right to question any information we have about you that you think is wrong or incomplete. Please contact us using one of the methods in the ‘How to contact us’ section.

If you do, we will take reasonable steps to check its accuracy and correct it.

Do you want us to stop using your personal data?

You have the right to object to certain ways that we use your personal data, or to ask us to restrict or stop the processing of, delete, remove, or stop using your personal data if there is no need for us to keep it. These are known as the ‘right to restrict’, ‘right to object’ and the ‘right to erasure’, or the ‘right to be forgotten’ respectively. In addition, you also have the right to data portability. This means that you can request a copy of your personal data for the purpose of transferring it to another data controller.

In some cases, there will be legitimate, legal, or other official reasons for us to keep your data. But you have the right to contact us using one of the methods in the ‘How to contact us’ section to request us to stop using your data.

If our processing of your personal information is based specifically on your consent, you have the right to withdraw that consent at any time.

If you exercise one of your data subject rights mentioned above, please note that we will need to verify your identity as to not provide your personal data to the wrong person.

Security of your information

To help protect the privacy of data and personally identifiable information you transmit through use of Yondr’s website, we maintain physical, technical and administrative safeguards. We update and test our security technology on an on-going basis. We restrict access to your personal data to those employees who need to know that information to provide benefits or services to you. In addition, we train our employees about the importance of confidentiality and maintaining the privacy and security of your information. We commit to taking appropriate disciplinary measures to enforce our employees’ privacy responsibilities.

Data storage

Your personal data is stored by Yondr on its servers, and on the servers of the third-party service providers Yondr engages, which are located within the European Union (EU) and in the United Kingdom. Yondr retains data for different durations depending on the purposes for data collection and use.