Boyden Executive Search

Privacy Policy

(Effective May 23, 2018)

Privacy Information

Protecting your privacy is important to Boyden World Corporation, 3 Manhattanville Road, Suite 104, Purchase, NY 10577, United States of America, privacy@boyden.com, +1 914 747-0093 ("Boyden," "we," "us," or "our"). This Privacy Policy explains how Boyden collects, uses, and discloses the personal information as a controller and as joint controller with individual local Boyden offices.

The Data Protection Officer and data protection representative of Boyden according to Article 27 GDPR (EU General Data Protection Regulation) is Rechtsanwalt Nikolaus Bertermann (attorney at law), daspro GmbH, Kurfürstendamm 21, 10719 Berlin, Germany, phone +49 30 88 77 41 50, Email: boyden@daspro.de.

Please find below the most important information about typical data processing sorted by groups of data subjects. For data processing activities, which relate only to specific groups and processing activities controlled only by local Boyden offices, the obligation to provide information are met separately.

Where the term “data” is used in the text, in each case it refers only to personal data as defined in the GDPR.

  1. Website Visitors
  2. Potential Candidates
  3. Candidates
  4. Service Providers, Business Partners and their Employees
  5. Business Contacts and Communication Partners
  6. Your rights

1.

Website Visitors

1.1

Server log data
Our web server processes a range of data for each request, which your browser automatically transmits to our web server. This includes the IP address allocated to your device, the date and time of the request, the time zone, the specific page or file accessed, the http status code and the data quantities transmitted; in addition, the website from which your request originated, the browser used, the operating system of your device and the language used. The web server uses these data to make the contents of this website available in the best possible way on your device.

1.2

Web analysis
We use Google Analytic, a web analytics service of Google Inc. ("Google"). Google Analytics uses small text files (“cookies”) on your device to enable us to analyse your visitor behaviour with a pseudonym. Information about your visitor behaviour stored in such cookies will be transferred to web servers of Google in the USA and will be stored there. For this website the function anonymize IP has been activated, therefore Google will anonymize your IP address on Google servers within the EU or the EEC prior to the transfer of data to the USA. In rare cases full IP addresses may be transferred to the USA and will then be anonymized there.
Google will use the information transferred as a Processor (Article 28 GDPR) to analyse your visitor behaviour, to provide reports about web activities and to provide further services in relation to website use and internet use to the Controller. Your IP address will not be combined with other data of Google.
You may prevent the storage of cookies (including your IP address) by using appropriate settings in your browser or object to further processing by downloading and installing a browser plugin. Alternatively you may store an opt-out cookie on your device to prevent future analysis of your visitor behaviour.

1.3

The purpose of the data processing is the online presentation of Boyden and our services as well as the interaction with communication partners. The purpose of the analysis of user behavior on the website is the needs-oriented design of the website. No change in this purpose is planned.

1.4

The legal basis for the processing while using the website is Article 6(1)(f) GDPR (legitimate interest, specifically operation of a website and user interaction). The legal basis for the analysis of user behavior is Article 6(1)(f) GDPR (legitimate interest, specifically the needs-oriented design of the website).

1.5

Log and communications data are not passed on to third parties except under special circumstances. In the event of the suspicion of a crime or in investigative proceedings, data may be transmitted to the police and the public prosecutor’s office. We use processors by means of service agreements to perform services, in particular to provide, maintain and support IT systems.

1.6

IP addresses are anonymized at the latest after 24 hours. Pseudonymous usage data are deleted in each case after three months. Communication content is deleted after six calendar years.

1.7

Use of the website without disclosure of personal data such as the IP address is not possible. Communication via the website without providing data is not possible. Use of the website is possible if the user has objected to pseudonymous usage analysis.

2.

Potential Candidates

2.1

When we or a local Boyden office collect business card data from public accessible sources, we and the local Boyden office are joint controllers for the processing of your data and entered into an agreement on joint controllership. According to the agreement the local Boyden office are responsible to ensure the fulfilment of your rights and will inform you in a privacy notice about the contact details of the local office and the publicly accessible sources of your data. However all data subjects may contact both of the controllers regarding any claims or complaints.

Data Protection Officer and data protection representative according to Article 27 GDPR of the Controllers is Rechtsanwalt Nikolaus Bertermann (attorney at law), daspro GmbH, Kurfürstendamm 21, 10719 Berlin, Germany, phone +49 30 88 77 41 50, Email: boyden@daspro.de.

2.2

Boyden collects and processes name, title, position, employer and business contact data (business card data) from potential candidates.

2.3

We collect data from the following publicly accessible sources: Public business websites, services such as LinkedIn, Xing or other business press or publications.

2.4

Your data are processed for the purpose of providing executive search services to potential employers worldwide.

2.5

The legal basis for the processing activity is our legitimate interest to provide such services (Article 6 (1) point (f) GDPR).

2.6

No retention period has been defined for your data. It is deleted upon your request.

2.7

Data is shared with Boyden offices worldwide upon request. A full list of Boyden offices is provided here.

2.8

Some Boyden offices are located outside the EU. All Boyden offices have entered into EU Standard Contractual Clauses. You may request a copy of the EU Standard Contractual Clauses from the Controllers at any time.

3.

Candidates

3.1

If you authorize Boyden to list you as a candidate for job offerings we and the local Boden office are joint controllers for the processing of your data and have entered into an agreement on joint controllership. According to the agreement the local Boyden offices are responsible to ensure the fulfilment of your rights. However all data subjects may contact both of the controllers regarding any claims or complaints.
Data Protection Officer and data protection representative according to Article 27 GDPR of the Controllers is Rechtsanwalt Nikolaus Bertermann (attorney at law), daspro GmbH, Kurfürstendamm 21, 10719 Berlin, Germany, phone +49 30 88 77 41 50, Email: boyden@daspro.de.

3.2

Boyden may process personal data like name, business and private contact data, résumé (including place of birth and nationality), qualifications, skills, testimonials, certifications, records of interviews and assessments, personal interests, hobbies, marital status and background check information (like identity verification, education and employment history, criminal, civil and regulatory judgements, financial and credit checks) or any other details you choose to share with us.

3.3

Your data may be collected from you, from publicly accessible sources like websites (e.g. Company or private websites, LinkedIn) and third parties that you or your testimonials have named as potential references.

3.4

Your data are processed for the purpose of providing you with employment opportunities and job or career related information as well as providing executive search services to potential employers worldwide.

3.5

The legal basis for our processing activity is your consent (Article 6 (1) point (a) GDPR) and – as far as only your business card details or data collected from publicly available sources are processed – for our legitimate interest to provide such services (Article 6 (1) point (f) GDPR).

3.6

The data retention period is seven calendar years from the last completion of the client engagement or documented contact with you, whichever is later.

3.7

Data are shared with Boyden offices worldwide upon request and with potential employers. A full list of Boyden offices is provided here.

3.8

Some Boyden offices are located outside of the EU. All Boyden offices have entered into EU Standard Contractual Clauses and set up internal privacy and data collection policies. You may request a copy of the EU Standard Contractual Clauses from the Controllers at any time. Potential employers may be located outside of the EU and may not have adopted appropriate or suitable safeguards according to Art. 44 GDPR.

3.9

You are not obliged to provide personal data. Without your personal data we will not be able to provide you with employment opportunities.

4.

Service Providers, Business Partners and their Employees

4.1

We process your data for the purpose of preparation and performance of the contractual relationship and for the fulfilment of legal requirements. No change in these purposes is planned.

4.2

The legal bases for processing are in case of contracts with natural persons Article 6(1)(b) GDPR (contract), in case of contracts with legal entities Article 6(1)(f) GDPR (legitimate interest, specifically communication with contact persons relevant to the contract), as well as always Article 6(1)(c) GDPR (legal obligations, in particular commercial and tax provisions). When checking, asserting or rejecting claims, the legal basis is Article 6(1)(f) GDPR (legitimate interest, specifically asserting or defending claims).

4.3

Recipients of data may include banks for the processing of payments. Public authorities and offices may receive data within the scope of their duties, insofar as we are obligated or entitled to transmit data. Moreover in specific cases data may be transmitted to collection service providers, legal advisors and courts. We also use processors by means of service agreements to perform services, in particular to provide, maintain and support IT systems.

4.4

All contractual data and data relevant for accounting are stored for 10 calendar years in accordance with the storage periods under tax and commercial law. Inquiries and communication data are automatically deleted after 10 years.

4.5

Processing of the contact data from service providers and business partners is necessary in order to perform the contract or order. If the data are not provided, the contract cannot be established or carried out. The provision of data is required for prospective service providers, business partners and their employees. The communication is not possible without the data.

5.

Business Contacts and Communication Partners

5.1

We process the data from prospective business contacts and communication partners for the purpose of communication with the data subjects.

5.2

The legal basis for processing data from prospective business contacts and communication partners is Article 6(1)(f) GDPR (legitimate interest, specifically communication with prospective business contacts and communication partners).

5.3

We also use processors by means of service agreements to perform services, in particular to provide, maintain and support IT systems.

5.4

Inquiries and communication data are automatically deleted after 10 years.

5.5

The provision of data is required for prospective business partners and communication partners. The communication is not possible without the data.

6.

Your rights

Provided the GDPR applies to our processing of your data, in particular if you are in the European Union, you have the following rights:

6.1

You may withdraw your consent at any time, if your data is processed based on your consent. The withdrawal of consent does not affect the lawfulness of processing before the withdrawal of consent.

6.2

You may at any time object to the further processing of your data if your data is processed based on our legitimate interest.

6.3

You may at any time request access to your personal data processed by the Controllers.

 

6.4

If the processing is based on your consent you have the right to data portability.

6.5

You may request rectification of your personal data at any time.

6.6

You may request erasure of your personal data at any time provided that no right or legal obligation of the Controllers requires further processing of your personal data.

6.7

You may request restriction of processing for your data at any time.

6.8

You may at any time lodge a complaint with a supervisory authority.

Your request was successful.

Your request was not successful. Please note that web browser cookies must be enabled to opt-out.

This website uses cookies to ensure you get the best experience on our website.  Learn more