Privacy Policy

1. About the processing of personal data

Personal data is information that can identify you directly or indirectly, such as your name, email address, telephone number, CV or IP address. Processing includes collecting, recording, organising, analysing, sharing, storing and deleting personal data.

CIP Global Executive Search AB is the data controller for the processing described in this policy. This means that we determine why and how the personal data is processed. We may use service providers acting as data processors under our instructions.

2. Personal data we process

Depending on how you interact with us, we may process:

• Contact and identity information, including name, email address, telephone number, address and account details.
• Professional profile information, including CV, employment history, board experience, education, languages, skills, professional interests, location preferences, salary expectations and notice period.
• Application and recruitment information, including cover letters, application answers, work samples, interview information, assessments, recruiter notes, candidate reports, pipeline status and references.
• Communications, including messages and emails exchanged with CIP Search and information you submit through the platform.
• Public professional information from sources such as LinkedIn, company websites and other publicly available professional sources.
• Technical and security data, such as IP address, browser, device, session activity and logs needed to operate and protect the platform.

3. Where the information comes from

• Directly from you when you connect, create an account, apply, upload a CV, communicate with us or participate in recruitment.
• From public professional sources where we reasonably believe your profile may be relevant to an executive-search assignment.
• From employees, clients, partners, recruitment providers or professional contacts who refer your profile.
• From references you provide or who are identified to us in connection with your candidacy.
• Information created during recruitment, such as interview notes, assessments, correspondence and professional evaluations.

4. Why we process personal data

• To create, maintain and enrich candidate profiles.
• To receive and review applications and assess candidates for current assignments.
• To identify and contact candidates about relevant future assignments.
• To communicate with candidates, arrange interviews and administer recruitment processes.
• To prepare shortlists and confidential candidate reports for relevant client companies.
• To verify professional information and contact references where appropriate.
• To operate, secure, troubleshoot, analyse and improve the website and candidate platform.
• To establish, exercise or defend legal claims and comply with applicable law.

5. AI-assisted processing

CIP Search uses AI-assisted tools to help search candidate information, extract structured facts from CVs and supporting documents, and prepare draft candidate assessments. These tools may process CV content, application information and recruiter observations.

Recruiter observations are treated as the primary source for AI-assisted assessments, while CVs and cover letters provide supporting context. AI tools assist our consultants; they do not make the final recruitment decision. If information is uncertain, it should not be presented as fact.

6. Legal bases

Our processing is normally based on our legitimate interest, and the legitimate interests of our clients, in identifying and recruiting suitably qualified professionals and administering secure recruitment processes. We assess these interests against your rights and reasonable expectations.

We may also process information to take steps at your request before entering into an agreement, to comply with a legal obligation, or on the basis of your consent where consent is appropriate—for example, for certain optional recordings or future communications. You can withdraw consent at any time without affecting earlier lawful processing.

7. Who receives personal data

• Authorised CIP Search employees and consultants who need the information for their work.
• Client companies when your profile is relevant to an assignment and sharing is appropriate in the recruitment process.
• Technology, hosting, storage, communication, document-processing and AI providers acting under contractual and security requirements.
• Professional advisers, authorities or parties to legal proceedings where required by law or necessary to protect legal rights.
• Parties involved in a corporate transaction such as a merger, acquisition or sale, subject to appropriate confidentiality safeguards.

CIP Search does not sell candidate personal data.

8. Transfers outside the EU/EEA

We aim to process personal data within the EU/EEA. Some service providers or their subprocessors may process information in other countries. When personal data is transferred outside the EU/EEA, we use a transfer mechanism recognised under the GDPR, such as an adequacy decision or the European Commission’s Standard Contractual Clauses, together with appropriate technical and organisational safeguards where required.

9. How long we retain information

We keep personal data only for as long as it is needed for the purposes described in this policy. A connected candidate’s profile may be retained while the candidate remains connected with CIP Search. Application information is retained while an assignment is active and, where appropriate, afterwards so we can consider the candidate for relevant future opportunities, handle legal obligations and respond to claims.

Retention depends on the type of information, the recruitment relationship and applicable legal requirements. You may contact us for information about the retention period applying to your data or request deletion where the GDPR gives you that right.

10. Your rights

Subject to the conditions and exceptions in the GDPR, you may have the right to:

• Receive information about our processing and access a copy of your personal data.
• Correct inaccurate information and complete incomplete information.
• Request deletion of personal data in certain circumstances.
• Restrict processing while a question about accuracy or lawfulness is resolved.
• Object to processing based on legitimate interests and always object to direct marketing.
• Receive certain information in a structured, commonly used and machine-readable format.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with the Swedish Authority for Privacy Protection (IMY) or another competent supervisory authority.

We may need to verify your identity before responding to a request.

11. Security

We use appropriate technical and organisational safeguards designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure and access. Access is limited according to role and business need. No online service can guarantee absolute security.

12. Contact and policy updates

CIP Global Executive Search AB, Klarabergsviadukten 70, 111 64 Stockholm, Sweden, is responsible for this policy. To exercise your rights or ask a privacy question, contact info@cip-search.com.

We may update this policy when our services, processing activities or legal obligations change. The current version and publication date will always be available on this page.