Steps Recruitment ("we", "us", "our") is committed to protecting your privacy. This policy explains what personal data we collect, why we collect it, and your rights under the EU General Data Protection Regulation (GDPR). We are based in Bulgaria, European Union, and act as the data controller for the information described below.
1. Data We Collect
When you contact us or submit your details through our website, we may collect:
- Identity & contact data - your first and last name and email address.
- Application data - your CV/resume and any information you choose to include in your message (e.g. work history, availability, qualifications).
- Role preference - whether you are a job seeker or a hiring company.
2. How We Use Your Data
We use the personal data you provide to:
- Respond to your enquiry and communicate with you.
- Match candidates with suitable roles and clients with suitable workers.
- Maintain our professional candidate database for recruitment purposes.
3. Legal Basis for Processing
We process your data on the basis of your consent (which you give by submitting your information to us) and our legitimate interest in providing recruitment services. You may withdraw your consent at any time (see "Your Rights" below).
4. Data Sharing
We may share your details with prospective employers or clients only where relevant to a role you have expressed interest in, and to service providers who help us operate our business (for example, hosting or email providers). We do not sell your personal data to third parties.
5. Data Retention
We keep your personal data only for as long as necessary to provide our recruitment services, or until you ask us to delete it. After that, your data is securely removed or anonymised.
6. Your Rights
Under the GDPR you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request erasure of your data ("right to be forgotten").
- Object to or restrict processing of your data.
- Request data portability.
- Withdraw consent at any time.
- Lodge a complaint with your local data protection authority - in Bulgaria, the Commission for Personal Data Protection (CPDP).
7. Data Security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure.
8. Cookies
This website does not use tracking or advertising cookies. All fonts, scripts, and styles are served directly from our own servers, so no third-party font or content-delivery provider receives your IP address when you browse this site.
9. Contact Us
To exercise any of your rights, or if you have questions about this policy, please contact us through the form on our homepage or via the details listed there.