1. Information We Collect
[cite_start]We collect personal information necessary to provide specialized advisory services and manage professional recruitment[cite: 4]. This includes:
- [cite_start]Contact Data: Name, email address, and mobile number provided through our inquiry forms[cite: 5].
- [cite_start]Professional Data: LinkedIn profiles, portfolios, and professional backgrounds[cite: 6].
- [cite_start]Recruitment Data: Curriculum Vitae (CVs) and cover letters uploaded for open advisory roles[cite: 7].
- [cite_start]Technical Data: IP addresses and browsing activity collected for security and bot prevention[cite: 8].
2. Legal Basis for Processing (GDPR Compliance)
For individuals residing in the European Economic Area (EEA), we process your personal data under the following legal bases:
- Consent: By voluntarily submitting your CV or inquiry, you provide explicit consent for us to process your data for recruitment or advisory purposes.
- Contractual Necessity: To take steps at your request prior to entering into a professional engagement or employment contract.
- Legitimate Interests: To ensure the security of our website and to improve our service offerings.
3. International Data Transfers
[cite_start]PDI Partners is headquartered in the United Arab Emirates.
- Data Location: By submitting your CV, you acknowledge that your personal information will be transferred to and processed in the UAE, which may have different data protection laws than your home jurisdiction.
- Safeguards: We implement robust administrative and technical safeguards to ensure that international transfers of data from the EU/EEA receive a level of protection substantially equivalent to that guaranteed within the EU.
4. Data Retention & CV Handling
- [cite_start]Confidentiality: Professional documents are handled with heightened confidentiality[cite: 10]. [cite_start]Access is restricted to our internal talent acquisition team[cite: 11].
- Retention Period: We retain CVs only for as long as necessary to fulfill recruitment purposes or as required by law. Candidates may request the immediate deletion of their files at any time.
5. Third-Party Processors
[cite_start]We utilize trusted service providers, including Netlify, to process form submissions[cite: 12]. [cite_start]These providers are contractually obligated to maintain data security[cite: 13]. [cite_start]Please note that these platforms may utilize randomized cryptographic URLs for secure file storage[cite: 14].
6. Your Rights under GDPR & PDPL
Regardless of your location, PDI Partners grants you the following rights:
- Right to Access & Portability: Request a copy of the data we hold about you.
- Right to Erasure (“Right to be Forgotten”): Request the permanent deletion of your CV and personal records from our systems.
- Right to Restriction: Object to or restrict the processing of your data.
7. Contacting the Privacy Team
[cite_start]PDI Partners periodically updates this policy to reflect changes in global regulations such as GDPR and PDPL[cite: 15, 16]. To exercise your data rights or report a privacy concern, contact us at contact@pdipartners.com.
