Bridge Recruiters respects your privacy and protects your personal data under the EU General Data Protection Regulation (GDPR) and Greek law. This is an English translation; if it differs from the Greek version, the Greek version prevails.
1. Data Controller
Data controller: Georgios Tsementzis (Γεώργιος Τσεμεντζής), sole proprietorship trading as “Bridge Recruiters”
GEMI (business registry): 186995803000 · Tax ID (AFM): 131842020 · Tax office: KEFODE (Legal details)
Address: Solonos 5, Chalandri 152 32, Athens, Greece
Email: hello@bridgerecruiters.com
Phone: +30 210 444 5842, +30 695 573 3971
Data Protection Officer (DPO): Not appointed, as Article 37 GDPR does not require one for the size and type of our processing. For any personal data matter, contact hello@bridgerecruiters.com.
2. What Data We Collect
2.1 Data you give us
- Name and contact details (email, phone)
- Information about your staffing needs
- CVs and professional information (for candidates)
- Correspondence by email or contact form
2.2 Data collected automatically
- Website usage data through Google Analytics (pseudonymous: device identifier, pages viewed, visit source) — only with your consent
- Browsing data (clicks, scrolling, movement) through Microsoft Clarity — only with your consent
- Technically necessary cookies
2.3 Job candidates
If you are a job candidate, we process your CV and contact details (name, email, phone, work experience and anything else your CV contains). We receive them either directly from you (for example by email) or from the licensed partner recruitment agencies in your country.
- Purpose: assessing your profile and matching you with jobs at Greek employers.
- Legal basis: steps taken at your request before entering into a contract (Article 6(1)(b) GDPR). Your CV is shared with a specific employer only with your consent.
- Retention: if you are placed in a job, for the length of the contract plus 5 years (tax and legal obligations). If you are not placed, for 2 years, after which it is deleted unless you ask us to keep you in our candidate pool.
3. Purposes of Processing
We process your data to:
- Respond to enquiries and communicate with you
- Provide staffing and recruitment services
- Handle documents and work permits
- Improve our website through analytics
- Comply with legal obligations
4. Legal Basis for Processing
- Performance of a contract or pre-contractual steps at your request — to provide our services and assess candidates’ CVs
- Consent — for marketing and cookies
- Legitimate interest — to improve our services and communicate with you
- Legal obligation — for record-keeping and tax purposes
5. Sharing of Data
We never sell your personal data. We may share it with:
- Our employer clients (for candidates, only with your consent)
- Authorities and bodies in Greece and in the countries of origin (Philippines, India, Nepal, Vietnam) for work permits
- Technology providers acting as processors on our behalf, and Microsoft as an independent controller for Clarity (see section 9)
- Legal or accounting advisers where required
6. Data Retention
We keep your data for as long as the purpose requires or as the law obliges us. In general:
- Contact data: up to 3 years from the last contact
- Contract data: 5 years (tax obligation)
- Candidate CVs: contract length + 5 years if placed, otherwise 2 years (see section 2.3)
- Analytics data (Google Analytics): 2 months for event data, up to 14 months for user-level data
7. Your Rights (GDPR)
Under the GDPR you have the right of:
- Access — to know what data we hold about you
- Rectification — to correct inaccurate data
- Erasure — to ask us to delete your data
- Restriction — to limit the processing
- Portability — to receive your data in a structured format
- Objection — to object to the processing
- Withdrawal of consent — at any time
To exercise any right, contact: hello@bridgerecruiters.com
You also have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA): www.dpa.gr
8. Cookies & Similar Technologies
We use the following cookies:
- Necessary cookies — required for the website to work (no consent needed)
- Google Analytics 4 (_ga, _ga_D2CNZ37X2D) — Measurement ID: G-D2CNZ37X2D. Lifetime: up to 2 years. Set only with consent for analytics cookies. Purpose: measuring traffic (pseudonymous data) and improving the user experience.
- Google Ads (_gcl_au) — Conversion ID: AW-996862508. Lifetime: 90 days. Set only with consent for marketing cookies. Purpose: measuring enquiries that come from Google ads.
- Microsoft Clarity (_clck, _clsk) — Project ID: wsbi6fzlq4. Provider: Microsoft Corporation (USA). Lifetime: up to 1 year. Set only with consent for analytics cookies. Purpose: recording browsing behaviour (clicks, scrolling, heatmaps) to improve the website.
You can change your choice at any time with the “Cookie Settings” button at the bottom of each page, through your browser settings, or with the Google Analytics Opt-out Browser Add-on.
If you withdraw consent, we immediately delete our website’s cookies and stop all measurement. Some cookies that Google and Microsoft set on their own domains (e.g. MUID, test_cookie) cannot be deleted by us, because browsers do not let one website delete another domain’s cookies. Our website no longer uses them, and you can delete them in your browser settings (instructions for Chrome and Edge).
We do not use Meta Pixel, Facebook tracking or retargeting cookies.
9. Processors (Sub-processors)
We use the following third-party providers to run our service:
- Amazon Web Services (AWS) — Website hosting (S3, CloudFront), contact email delivery (SES) and form processing (Lambda + API Gateway). Data centre region: Frankfurt, Germany (eu-central-1). AWS Privacy Notice.
- Google LLC / Google Ireland — Google Analytics 4 (analytics) and Google Ads (measuring enquiries from ads), only with your consent. Google Privacy Policy.
- Web3Forms (Web3Creative, India) — Receives and forwards our request forms (/employers.html, /request/, /kaleste-me.html) to our email. Submissions are kept on its systems for up to 3 years. For spam protection, your IP address and email are checked by CleanTalk and Akismet (USA). Web3Forms DPA.
- Google Workspace (Google Ireland Limited) — Hosting of the hello@bridgerecruiters.com mailbox, where we receive your messages and form submissions. Google Workspace Data Processing Terms.
- Amazon Registrar, Inc. — Domain registrar for bridgerecruiters.com.
Independent controllers
Microsoft Corporation (Microsoft Clarity) — With your consent, Microsoft Clarity records how you browse (clicks, scrolling, heatmaps). Under the Clarity Terms of Use, Microsoft and we are independent controllers: Microsoft also collects and uses this data for its own purposes, such as improving its products and providing Microsoft Advertising. See the Microsoft Privacy Statement.
10. Data Security
We apply appropriate technical and organisational measures to protect your data:
- SSL/TLS encryption (HTTPS) with HSTS preload
- Security headers: CSP, X-Frame-Options, X-Content-Type-Options
- SPF, DKIM, DMARC for email authentication
- Anti-bot honeypot protection on the contact form
- Messages are stored in the controller’s mailbox and, for forms sent through Web3Forms, on the provider’s systems (see section 9)
11. International Data Transfers
Personal data is hosted in the EU (AWS Frankfurt, Germany). Some services may transfer data outside the EU:
- Google (Analytics, Ads, Workspace) — transfer to the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework (European Commission adequacy decision, July 2023).
- Microsoft Clarity — transfer to the USA. Microsoft Corporation is certified under the EU-U.S. Data Privacy Framework.
- Web3Forms — transfer to India (the provider’s base) and the USA (anti-spam services), under the European Commission’s Standard Contractual Clauses (Decision 2021/914) included in the provider’s data processing agreement.
- Transfers to licensed partner recruitment agencies in the countries of origin (Philippines, India, Nepal, Vietnam) — candidate data and job details may be shared with independent, licensed recruitment agencies in these countries that we work with, solely for recruitment and the lawful processing of the work-permit procedure (for example contract approval and OEC issuance). These transfers outside the EU are made with appropriate safeguards under Chapter V GDPR.
12. Changes to this Policy
We may update this policy from time to time. The date of the last revision is shown at the top of the page. For material changes we will inform you with a clear notice on the website. Where processing is based on your consent, we will ask for it again.
13. Contact
For any question about the processing of your personal data:
Bridge Recruiters
Solonos 5, Chalandri 152 32, Athens, Greece
hello@bridgerecruiters.com
+30 695 573 3971