Privacy policy for the Boardable employer branding and recruitment
Date of publication: 12/9/2025
We at Boardable manage our employer branding and recruitment process through our career site (the “Career Site”), and by using a related applicant tracking system.
In this privacy policy, we explain how we process your personal data if:
You visit our Career Site (you being a “Visitor”)
You connect with us via our Career Site to create a profile with us and receive information about current or future vacancies with us (you being a “Connecting Candidate”)
You apply for a position with us via our Career Site or a third party service (you being an “Applying Candidate”)
We collect information about you from other parties, sites and services, since we believe your profile is of interest for our current or future vacancies (you being a “Sourced Candidate”)
We receive information about you from our employees or partners, since they believe your profile is of interest for our current or future vacancies (you being a “Referred Candidate”)
We receive information about you from a Candidate who lists you as their reference (you being a “Reference”).
This privacy policy also describes what rights you have when we process your personal data and how you can exercise these rights.
When we use the term “Candidate” in this privacy policy, we are referring to each of Connecting Candidates, Applying Candidates, Sourced Candidates and Referred Candidates, unless it is stated otherwise.
1. About processing of personal data
Personal data is all information that can be directly or indirectly linked to a living, physical person. Examples of personal data are name, email address, telephone number and IP address. Processing of personal data is any use of personal data, such as collecting, creating, analyzing, sharing and deleting personal data.
There are laws and regulations on how companies may process personal data, often called data protection or privacy laws. Different laws apply to different types of use of personal data and in different parts of the world. Depending on where you are located, examples of such laws may include United States federal and state privacy laws and, where applicable, the data protection laws of the European Economic Area (EEA), the United Kingdom or other jurisdictions.
For the purposes described in this privacy policy, Boardable is the organization that decides for which purposes personal data will be processed and how the processing will be carried out. Where relevant, we may use service providers that process personal data on our behalf and only in accordance with our instructions.
We are responsible for the processing of your personal data as described in this privacy policy.
2. What personal data do we process?
All individuals
Device information – If you visit our Career Site, we collect information about your device, such as IP address, browser type and version, session behavior, traffic source, screen resolution, preferred language, geographic location, operating system and device settings or usage.
Technical and statistical data – If you visit our Career Site, we collect technical and statistical data about your use of the site, such as which URLs you visit and your activity on the site.
Communications data – We collect and store your communication with us, including the information you provide in the communication. This may include the content of emails, video recordings, messages on social media, the information you add to your account with us, and survey responses.
Contact details – Such as your name, email address, telephone number and physical address.
Candidates
Data from interviews, assessments and other information from the recruitment process – Such as notes from interviews with you, assessments and tests, salary requirements and availability.
Information in your application – Such as your CV or résumé, cover letter, work samples, references, letters of recommendation and education.
Information in your public profile – Information we collect about you from public sources related to your professional experience, such as LinkedIn or the website of your current employer.
Information provided by references – Information we receive from our employees or partners who refer you to us, or from the persons you have listed as your references.
3. Where do we receive your personal data from?
All individuals
From the Career Site. If you visit our Career Site, we collect technical and statistical information about how you use the Career Site and information from your device.
Directly from you. Most of the information we process about you, we receive directly from you. For example, when you apply for a position with us, connect with us, create an account or otherwise communicate with us. You can always choose not to provide us with certain information. However, some personal data is necessary in order for us to process your application or provide you with the information you request from us.
References
Candidates
From public sources. We may collect personal data about you from public sources, such as LinkedIn or the website of your current employer.
From our employees and partners. We may receive information about you from our employees or partners (such as recruitment service providers) when they believe your profile is of interest for our current or future vacancies.
From your references. If you provide us with references, we may collect information about you from them.
Data we create ourselves or in cooperation with you. Information about your application and profile is usually created by us, or by us in cooperation with you, during the recruitment process. This may include notes from interviews with you and results from assessments and tests.
4. For what purposes do we process your personal data?
We process your personal data for the following purposes:
Protect and enforce our rights, interests and the interests of others, for example in connection with legal claims.
Affected individuals: The individual or individuals affected by the legal issue. This may include persons from all categories of individuals listed above.
Categories of personal data used: Any of the categories of personal data listed in this privacy policy, as needed for this purpose.
Share your personal data with other recipients for the purposes mentioned in Section 5 below.
Affected individuals: Varies depending on the purpose of the sharing, see Section 5.
Categories of personal data used: Any of the categories of personal data listed in this privacy policy, as needed for this purpose.
Collect information about your use of the Career Site using cookies and other tracking technologies, as described in our Cookie Policy.
Maintain, develop, test and otherwise ensure the security and functioning of the Career Site.
Affected individuals: Visitors.
Categories of personal data used: Device information, technical and statistical data.
Analyze how the Career Site and its content is used and how it performs, to obtain statistics and improve operational performance and user experience.
Affected individuals: Visitors.
Categories of personal data used: Device information, technical and statistical data.
Provide you with updates about vacancies with us.
Affected individuals: Connecting Candidates.
Categories of personal data used: Contact details, communications data.
Review profiles and applications sent to us, and communicate with you about your application and profile.
Affected individuals: Connecting Candidates, Applying Candidates.
Categories of personal data used: Any of the categories of personal data listed in this privacy policy, as needed for this purpose.
Collect and evaluate your professional profile on our own initiative, and communicate with you regarding your profile.
Affected individuals: Sourced Candidates, Referred Candidates.
Categories of personal data used: Any of the categories of personal data listed in this privacy policy, as needed for this purpose.
Contact you directly about specific, current or future vacancies with us.
Affected individuals: Candidates.
Categories of personal data used: Any of the categories of personal data listed in this privacy policy, as needed for this purpose.
Record interviews with you, where you agree to this.
Contact you to ask for your participation in surveys related to our recruitment and employer branding activities.
Affected individuals: Candidates.
Categories of personal data used: Any of the categories of personal data listed in this privacy policy, as needed for this purpose.
Contact you to ask you to provide information about a Candidate, and evaluate the information you provide.
Affected individuals: References.
Categories of personal data used: Contact details, communications data.
5. Whom do we share your personal data with?
We share your personal data with:
Our service providers. We share your personal data with our suppliers who provide services and functionality in our employer branding and recruitment process. This includes, for example, recruitment service providers, background check providers where applicable, and the supplier of our Career Site and related applicant tracking system.
Our group companies. We share your personal data with our group companies when they provide us with services and functionality for our employer branding and recruitment process, such as access to particular systems and software or shared HR resources.
Companies providing cookies on the Career Site. If you consent to it, cookies are set by other companies than us. These companies will use the data collected by these cookies in accordance with their own privacy policies. You can find more information in our Cookie Policy.
Authorities and other public actors, when we are required to do so. We share your personal data with authorities and other public actors when we have a legal obligation to do so, such as in response to valid legal process or government requests.
Parties involved in legal proceedings. If needed to protect or defend our rights, we share your personal data with public authorities or other parties involved in a potential or existing legal proceeding. This can for example be in case of discrimination claims or other employment related disputes.
Parties in connection with a business transaction. In connection with a potential or actual merger, sale of company assets, financing or acquisition of all or part of our business to another company, we may share your personal data with other parties involved in the process, subject to appropriate confidentiality safeguards.
6. On what legal bases do we process your personal data?
We only process your personal data where we have a valid legal basis to do so under applicable law.
For the purposes described in this privacy policy, we typically rely on one or more of the following legal bases:
Legitimate business interests. We process your personal data where it is necessary for our legitimate interests in managing and improving our recruitment, hiring, employer branding and related HR processes, and where these interests are not overridden by your privacy or other fundamental rights and freedoms.
Compliance with legal obligations. We process your personal data where this is necessary for us to comply with legal obligations, for example in relation to equal employment opportunity, non-discrimination or record-keeping obligations, or to respond to lawful requests from public authorities.
Your consent. In some situations, we process your personal data only when you have given us your consent. This is for example the case if we record an interview with you where recording is not required for legal compliance or our legitimate interests. You can withdraw your consent at any time as described in Section 9.
Where we rely on legitimate interests, we have balanced our interests against your rights and concluded that our interests are not overridden by your privacy interests. You can contact us if you want more information about this assessment.
7. International data transfers
We are based in the United States and many of our systems are hosted there. This means that if you are located outside the United States, your personal data may be transferred to and processed in countries that may have different data protection laws than the country in which you are located.
When we or our service providers transfer personal data internationally, we take appropriate measures to protect your personal data in accordance with applicable law. These measures may include:
Using transfer mechanisms recognized under applicable data protection laws, such as standard contractual clauses approved by the European Commission for transfers from the EEA, or equivalent instruments under UK law.
Relying on adequacy decisions for certain countries, where applicable.
Implementing appropriate technical and organizational measures to protect personal data during and after the transfer.
If you would like more information about international transfers of your personal data, you can contact us using the details in Section 10.
8. For how long do we keep your personal data?
We keep your personal data only for as long as necessary to fulfill the purposes described in this privacy policy, unless a longer retention period is required or permitted by law.
All individuals
Visitors
We keep certain personal data for up to one (1) year for security purposes.
Retention periods for cookies are set out in our Cookie Policy.
We may keep personal data to analyze the performance of the Career Site for as long as we keep personal data about you for other purposes.
Candidates
If you are a Connecting Candidate only, we keep your personal data for as long as you remain connected with us (for example, while your account remains active and you have not requested deletion).
For other types of Candidates, we keep your personal data for as long as needed to decide if you are a suitable candidate for the relevant vacancy or vacancies with us.
If you do not succeed in an initial recruitment process, we may keep your personal data for a period of time after the process ends in order to consider you for and potentially contact you about relevant future job openings, where allowed by applicable law and your preferences.
If you are hired, we will keep your personal data during your employment and for any additional period required or permitted by law, for purposes other than those stated above. You will receive additional information about that processing as part of your employment documentation.
References
9. What rights do you have and how can you exercise them?
Depending on where you live and which laws apply to you, you may have certain rights in relation to the personal data we hold about you. These may include the rights listed below.
If you want to exercise any of these rights, we suggest that you:
Visit the Data & Privacy page on our Career Site, where we offer features to let you exercise certain rights.
Log in to your account with us, where you can use the settings in the account to exercise your rights (for example, by updating or deleting certain information).
Contact us directly at sydney.sikorski@boardable.com.
Possible rights include:
Right to be informed. You have the right to be informed about how we process your personal data. We provide information through this privacy policy, through our Career Site and by answering any questions you may have for us.
Right of access. You may have the right to know if we process personal data about you and to receive a copy of the personal data we hold, along with information about how we use it.
Right to rectification. You may have the right to request that we correct inaccurate personal data about you and complete personal data that you consider incomplete.
Right to deletion. In some cases, you may have the right to request that we delete personal data about you, for example where it is no longer necessary for the purposes for which we collected it or where you have withdrawn consent.
Right to restrict processing. In some situations, you may have the right to request that we restrict our processing of your personal data, for example while we investigate whether the data is accurate or whether our processing is lawful.
Right to object. In some situations, you may have the right to object to our processing of your personal data, including where we process it based on our legitimate interests.
Right to data portability. Where applicable, you may have the right to receive certain personal data in a structured, commonly used and machine-readable format and to request that we transmit that data to another organization, where technically feasible.
Right to withdraw consent. Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time. If you withdraw your consent, we will stop processing your personal data for the relevant purposes, but this will not affect the lawfulness of processing before the withdrawal.
Right to raise a concern or complaint
If you have concerns about how we handle your personal data, we encourage you to contact us first so we can try to resolve your concern. Depending on where you are located, you may also have the right to lodge a complaint with your local data protection or privacy regulator or with another relevant supervisory authority.
10. Where can you turn with comments or questions?
If you want to get in touch with us to exercise your rights, or if you have any questions, comments or concerns about how we handle your personal data, you can reach us by sending an email to:
sydney.sikorski@boardable.com
11. Updates to this privacy policy
We may update this privacy policy from time to time, for example because we start processing your personal data in a new way, because we want to make the information clearer to you, or because it is necessary to do so in order to comply with applicable data protection or privacy laws.
We encourage you to regularly check this page for any changes. You can always check the top of this page to see when this privacy policy was last updated.
