Data protection – people appearing in our research.
If you landed on this page, it may be because your professional data appears in our research work, without you ever having contacted us. Here is what that data is, where it comes from, why we process it, and how to have it removed.
01 · Controller
Controller
Data controller
Gates Solutions Sàrl
Route du Risoud 9
1348 Le Brassus
Switzerland
UID CHE-210.509.281
[email protected]
02 · Scope
Who this page is for
Anyone whose professional data appears in our research work, whatever their country of residence.
The legal framework that protects you does depend on where you live:
- European Union and European Economic Area: GDPR (Regulation (EU) 2016/679).
- Switzerland: revised Federal Act on Data Protection (FADP), in force since 1 September 2023.
- United Kingdom: UK GDPR, whose rights are equivalent to those of the GDPR.
We apply the same standard to everyone. If you live elsewhere and neither the GDPR nor the FADP applies to you, your request is handled in the same way, within the same time frame, free of charge, and without you having to give a reason. We do not reserve these rights to European and Swiss residents.
03 · Data
What data
- First name and last name
- Current job title and previous positions
- Employers and dates
- Education and institutions
- Locality
- Link to the public professional profile
What we do not collect
No health data, no political, religious or trade-union opinions, no banking data, no element of private life, no biometric or genetic data, no information relating to legal proceedings.
We keep neither the free-text description of the profiles consulted, nor any assessment comment.
04 · Source
Where it comes from
From public professional sources:
- Public profiles on professional networks, including LinkedIn
- Employer websites
- Trade press and professional publications
It was not obtained from your employer.
05 · Purpose
Why
To map the skills present in a market and identify people who may be approached about a role, on behalf of client companies.
No automated decision-making and no profiling producing legal effects is carried out: the judgement calls are made by a person.
06 · Legal basis
On what basis
Residents of the European Union
Legitimate interest in carrying out a profile research activity, balanced against your rights and freedoms (art. 6(1)(f) GDPR). This balancing test is documented and can be provided on request.
Switzerland
Processing of non-sensitive data drawn from sources made public by the individuals themselves, in compliance with the principles of good faith, proportionality, purpose limitation and transparency (art. 6 and 19 FADP).
07 · Notice
Why we did not notify you individually
Notifying every single person appearing in a market map, one by one, would involve a disproportionate effort in relation to the processing at hand (art. 14(5)(b) GDPR; art. 20 FADP).
This page constitutes our notice: that is why it is public, indexed, and reachable from every page.
08 · Recipients
Where it is hosted, who receives it
Processor
Jarvi, our recruitment management tool
Jarvi Tech, 10 rue du Réage
35510 Cesson-Sévigné, France
A processor acting solely on our instructions.
Infrastructure: Amazon Web Services, London region, United Kingdom.
Some of Jarvi's technical providers are established in the United States; those transfers are governed by the standard contractual clauses (Implementing Decision (EU) 2021/914). Up-to-date list: www.jarvi.tech/en/legals/dpa-and-gdpr/
Where an assignment warrants it, your data may be passed to the client company concerned, under a confidentiality obligation.
No sale, no rental, no advertising network.
09 · Retention
For how long
24 months from collection, then deletion.
Early deletion is possible at any time, without you having to give a reason.
10 · Your rights
Your rights — and the one that matters most here
The right that matters most here
Access, rectification, erasure, restriction, portability. And above all: you can object.
Because the processing rests on legitimate interest, your objection is enough — you do not have to justify it for us to stop, and we then delete your record.
Answer within 30 days, free of charge.
Exercise my rights →You may also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, or with the supervisory authority of your country of residence.
11 · Form
Exercise my rights
This form asks for the bare minimum needed to find you in our records and get back to you. It creates no prospect record and feeds no commercial tool: your request goes to [email protected] and nowhere else.
No identity document is required: demanding an ID card in order to process an erasure would be disproportionate, and would amount to collecting data more sensitive than what we hold. Should there be serious doubt about your identity, we may ask you for an additional verification element.
Request received
Your request has reached us.
An acknowledgement has just been sent to the address you provided. We will reply within 30 days, free of charge.
Nothing after a few minutes? Check your spam folder, or write directly to [email protected].
You can also write directly to [email protected].