Privacy & Data Protection Policy
Effective Date: January 1, 2025
Last Updated: January 1, 2025
Introduction
Gold & Aron Conseil ("GAC") is a boutique executive search firm incorporated in the United States. We specialize in connecting top executive talent with organizations globally. Protecting your privacy is paramount to us.
This Privacy & Data Protection Policy explains how we collect, use, store, share, and protect your personal data in compliance with applicable data privacy laws including the General Data Protection Regulation (GDPR), the Lei Geral de Proteção de Dados (LGPD), and relevant U.S. privacy laws.
Scope
This policy applies to candidates, clients, and visitors to our digital platforms.
What Personal Data We Collect
We may collect the following categories of personal data:
-
Name, email address, phone number, and location
-
Resume/CV, work history, skills, and education
-
LinkedIn profile and other professional online presence
-
Notes from interviews or assessments
-
Communications and feedback
-
Log data from our website (e.g., IP address, cookies)
How We Collect Data
-
Directly from you (e.g., via LinkedIn, email, online forms)
-
From third-party sources (e.g., referrals, clients)
-
Through our ATS (Loxo) and Google Workspace tools
Purpose of Processing
-
Evaluate and match candidates with executive roles
-
Communicate opportunities and updates
-
Maintain talent pipelines and relationships
-
Comply with legal obligations
Legal Basis for Processing
We process personal data on one or more of the following grounds:
-
Consent (when required under GDPR/LGPD)
-
Legitimate interest (recruitment-related purposes)
-
Performance of a contract
Data Retention
We retain candidate data in accordance to US Privacy laws, GDPR and LGPD, or upon request for deletion.
Your Rights
Depending on your location, you may have the following rights:
-
Access to your data
-
Rectification of inaccurate data
-
Deletion ("right to be forgotten")
-
Restriction or objection to processing
-
Data portability
-
Withdrawal of consent
To exercise these rights, contact us at: privacy@goldaronconseil.com
Data Transfers
We operate in the U.S. and may transfer personal data from the EU/EEA or Brazil. We use:
-
Standard Contractual Clauses (SCCs) for EU/EEA
-
LGPD-compliant transfer mechanisms for Brazil
-
Vendors (e.g., Loxo, Google Workspace) who are compliant with data protection standards
Data Sharing
We may share your data with:
-
Our clients (for recruitment purposes only)
-
Technology partners like Loxo, Google, LinkedIn
-
Regulatory or legal authorities as required
Cookies and Tracking
We may use cookies or analytics tools on our website. You can control your cookie preferences through your browser settings.
Contact
If you have any questions about this policy or your personal data, contact us at privacy@goldaronconseil.com.