Datenschutzrichtlinie

1. Introduction and Scope

1.1 Brain Source SRL operates the BrainSource.Network platform. We are dedicated to maintaining the privacy and security of information entrusted to us by our platform users, business partners, talent networks, candidates, and site visitors.

1.2 This document details how information is handled, collected, stored, and protected across our services in accordance with applicable European business standards and local data protection regulations.

2. Information Collection

2.1 We gather information necessary to facilitate specialized B2B recruitment marketplace activities and manage professional partnerships:

• Clients and Business Partners: Names, corporate contact addresses, phone numbers, organization names, titles, billing details, tax identifiers, and role requirements.
• Recruiters and Network Partners: Names, professional contact information, independent credential records, banking arrangements, and communications.
• Candidates: Work histories, qualifications, candidate profiles, contact details, notes, compensation goals, and placement consent statements.
• Website Visitors: Network identifiers, browser type, device details, and site usage metrics captured via standard analytics mechanisms.

3. Processing Rationale and Purpose

3.1 Information processing is conducted under standard operational frameworks:

• Contractual Obligations: Fulfilling recruitment agreement terms, candidate matching, interview arrangements, partner management, and billing processing.
• Legitimate Operations: System safety management, verification processes, business communications, platform enhancements, and quality evaluations.
• Legal Requirements: Meeting tax reporting, financial accounting, corporate governance, and operational standards.
• Direct Authorization: Where explicit permission is provided for candidate evaluation or platform notices.

4. Data Retention Framework

4.1 Records are preserved only for durations required to achieve business and statutory goals:

• Candidate Profiles: Kept up to 12 months from active submission before removal or anonymization, unless engagement continues.
• Commercial Accounts: Retained during active working terms plus 5 years following termination.
• Accounting and Invoices: Preserved for 10 years per standard financial statutory requirements.
• Usage Logs: Retained up to 14 months in aggregated analytical formats.

5. Distribution and Sharing

5.1 We do not sell or monetize personal information. Information distribution occurs strictly as needed for operational delivery:

• Marketplace Operations: Candidate qualifications are shared with hiring partners for evaluation. Client requisitions are provided to verified sourcing networks.
• Technical Infrastructure: Managed third-party tools assist with hosting, communication delivery, and database operations under standard confidentiality terms.
• Legal Disclosures: Information may be disclosed if required by legal summons, court direction, or formal government mandate.

6. International Processing

6.1 Operations are centered within the European Union. Should cross-border processing occur with external technical providers, appropriate operational safeguards and standardized protective clauses remain active.

7. Operational Security

7.1 Technical protective steps including transmission encryption, strict access management, updated environments, and isolated storage solutions are maintained to prevent unauthorized access or disclosure.

8. Individual Rights

8.1 Under privacy frameworks, individuals retain clear rights regarding their recorded details:

• Access: Requesting confirmation of information on record.
• Correction: Requesting updates to inaccurate details.
• Removal: Requesting record deletion when processing criteria cease.
• Restriction: Requesting temporary holds on processing.
• Portability: Obtaining recorded data in standard structured formats.
• Objection: Objecting to legitimate interest or promotional processing.

9. Supervisory Oversight

9.1 Questions or concerns regarding data processing practices may be directed to our administration or brought before regional national data protection supervisory bodies.

10. Document Revisions

10.1 Operational or regulatory changes may require document updates. The modification date displayed at the head of this statement marks active updates.