Recruitment Privacy Policy
1. Introduction
At Bluestone PIM, we uphold the highest standards of data protection. We are committed to safeguarding your personal information in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR). This Recruitment Privacy Policy outlines how we collect, process, retain, and disclose your personal data throughout the recruitment process, subject to the specified retention period.
To facilitate our recruitment and selection procedures, we utilize BambooHR, an applicant tracking system, which assists us in managing candidate data in a structured and secure manner.
2. Categories of Personal Data Collected
During the recruitment process, we may collect and process the following categories of personal data:
- Identification and contact details (e.g., full name, email address, phone number)
- Professional and employment history (e.g., CV, cover letter, previous work experience)
- Reference details (if applicable)
- Other relevant information provided voluntarily in the application process
We do not intentionally collect or process special categories of personal data (e.g., health data, racial/ethnic origin) unless explicitly required by law and with your consent.
3. Legal Basis and Purpose of Data Processing
The processing of personal data is conducted based on the following lawful grounds under Article 6(1) of the GDPR:
- Legitimate interest – to assess your qualifications, experience, and suitability for employment at Bluestone PIM, ensuring an effective and fair recruitment process while maintaining business continuity
- Performance of a contract or pre-contractual measures – where necessary for progressing your application
- Legal obligation – to comply with applicable employment laws and regulatory requirements
4. Data Retention and Storage
Your personal data will be retained for three (3) years following the conclusion of the recruitment process, irrespective of the hiring decision. This retention period allows us to comply with legal obligations and maintain records for potential future employment opportunities.
Upon expiry of this period, all personal data will be securely and permanently erased unless an extended retention period is required by law.
5. Data Sharing and Third-Party Disclosures
We may disclose your personal data to the following categories of recipients where necessary and appropriate:
- Internal personnel involved in the recruitment process (e.g., hiring managers, HR representatives)
- Third-party service providers who assist in recruitment and HR operations (e.g., payroll and accounting firms, hiring platform Deel where applicable)
- Regulatory authorities or law enforcement agencies, where legal or statutory obligations mandate disclosure
Where personal data is shared with third-party service providers, Bluestone PIM ensures that appropriate contractual, technical, and organizational safeguards are in place to protect your data in compliance with GDPR requirements.
6. Your Data Protection Rights
Under the GDPR, you have the following rights regarding your personal data:
- Right of access – You may request confirmation of whether we process your personal data and obtain a copy thereof
- Right to rectification – You may request inaccurate or incomplete personal data correction
- Right to erasure ("right to be forgotten") – You may request deletion of your personal data, subject to legal and regulatory limitations
- Right to object – You may object to data processing based on legitimate interests
- Right to restriction of processing – In certain circumstances, you may request that we temporarily restrict the processing of your data
7. Contact Information
For any privacy-related requests and inquiries, or if you wish to rectify or delete your personal data before the expiration of the retention period, please contact us at talent@bluestonepim.com