Privacy Policy

Legal

Last updated / February 28 / 2026

1. Data Controller

W&W Global Marketing Group GmbH ("we," "our," or "us"), operating the BeskarStaff platform, is the Data Controller responsible for the processing of personal data described in this Privacy Policy.

Registered address: Zug, Switzerland

Contact for data protection inquiries: privacy@beskarstaff.com

2. Scope and Applicable Law

This Privacy Policy applies to all personal data processed through the BeskarStaff platform and related services, including:

Candidate profiles collected from publicly available sources and stored in our talent database;
Personal data of business users who register for and use our platform;
Technical data collected automatically when you visit our website.

This Privacy Policy complies with the Swiss Federal Act on Data Protection (FADP) and the General Data Protection Regulation (EU) 2016/679 (GDPR), which applies to our processing of personal data of individuals in the European Union and the European Economic Area.

3. Personal Data We Collect

3.1 Candidate Data

We collect and process publicly available professional data of candidates. The categories of personal data we may collect include:

Full name
Job title and professional role
Professional experience and employment history
Education history
Skills, qualifications, and credentials
Links to public professional profiles
Contact information, where publicly available or obtained through authorized data enrichment services
Geographic location (city or region level)

We do not collect or infer sensitive personal data (such as race, ethnicity, religion, political opinions, health data, sexual orientation, or trade union membership). We implement technical measures designed to exclude such data from our collection and processing. Any conclusions drawn regarding such attributes are made solely by business customers and are not generated, processed, or provided by BeskarStaff.

3.2 Business User Data

When you register for a BeskarStaff account, we collect the information you provide directly to us, including your name, email address, company name, phone number, and account credentials.

3.3 Automatically Collected Data

When you visit our website or use our services, we automatically collect technical data such as IP address, browser type and version, pages visited, usage patterns, and access times. This data is collected through cookies and similar technologies.

4. Sources of Personal Data

Candidate profiles: We collect candidate data from publicly available sources, including publicly visible professional profiles on professional networking platforms, public websites, company pages, and other publicly accessible professional information. We may also obtain contact information through authorized third-party data enrichment providers. We only process information that individuals have made publicly available in a professional context.

Business users: We collect data directly from you when you register, submit inquiries, or otherwise interact with our platform.

Automatic collection: Technical data is collected automatically through cookies and similar technologies when you use our website or services.

5. Lawful Basis for Processing

We process personal data on the following legal bases:

5.1 Candidate Data — Legitimate Interest (GDPR Art. 6(1)(f))

We process candidate data on the basis of our legitimate interest in providing recruitment services that connect qualified professionals with relevant job opportunities.

We have assessed this interest as follows. The purpose of our processing is to identify qualified passive candidates for specific job vacancies by collecting publicly available professional information. This processing is necessary because recruitment services require access to candidate professional profiles in order to match them with suitable opportunities, and less intrusive alternatives would not achieve the same result at comparable effectiveness. Our interest does not override the rights and freedoms of data subjects because: the data processed is professional in nature and has been made publicly available by the individuals themselves in a professional context; processing is aligned with the reasonable expectations of individuals who publish professional profiles for career-related purposes; we implement technical and organizational measures to minimize risks, including pseudonymization in our platform; we do not process sensitive personal data; and candidates can exercise their right to object at any time, after which we cease processing their data.

5.2 Business User Data — Contract Performance (GDPR Art. 6(1)(b))

We process business user data as necessary for the performance of the service agreement between you and BeskarStaff, including account management, service delivery, and communications related to your use of the platform.

5.3 Technical Data — Legitimate Interest (GDPR Art. 6(1)(f))

We process technical data on the basis of our legitimate interest in maintaining the security, performance, and functionality of our website and services.

5.4 Swiss FADP

Under the Swiss Federal Act on Data Protection (FADP), the processing of personal data is permitted provided that the principles of lawfulness, good faith, proportionality, purpose limitation, accuracy, and data security are respected. Where processing could constitute a violation of personality rights under Art. 30 FADP, we rely on our overriding private interest (Art. 31(1) FADP). To the extent that candidate data has been made generally accessible by the data subject and has not been expressly prohibited from processing, no violation of personality rights arises from such processing (Art. 30(3) FADP).

6. How We Use Personal Data

6.1 Candidate Data

We use candidate data to provide recruitment search services to our business customers. This includes storing candidate profiles in our talent database, enabling search and filtering by professional criteria (skills, experience, location), generating relevance scores to help match candidates with job opportunities, and sharing candidate information with business customers for recruitment purposes.

6.2 Business User Data

We use business user data to create and manage your account, provide access to the platform, deliver and improve our services, communicate with you about your account and our services, and provide customer support.

6.3 Technical Data

We use technical data to maintain the security and performance of our website, analyze usage patterns to improve our services, and prevent fraud or unauthorized access.

7. AI and Automated Processing

BeskarStaff uses artificial intelligence and automated systems to process candidate data for the purposes of talent search and matching. This processing constitutes profiling within the meaning of GDPR Art. 4(4), as it involves automated processing of personal data to evaluate professional aspects of candidates. While no automated individual decisions within the meaning of GDPR Art. 22 or Art. 21 FADP are made, we apply the safeguards described below.

Specifically, AI is used to parse and structure candidate profile information, generate relevance scores, and enable semantic search across candidate profiles. The system works by comparing the professional requirements specified by a business customer in a job description against the documented professional attributes of candidates stored in our database. It evaluates the degree of alignment between a candidate's skills, professional experience, education, geographic location, and industry sector and the requirements of the job description. Based on this comparison, the system generates a relevance score for each candidate in relation to that specific job description.

The practical consequence of this scoring is that candidates with higher relevance scores are more likely to be presented to business customers for a given opportunity, while candidates with lower scores may not be presented for that specific opportunity. A low score for one job description does not affect a candidate's visibility for other opportunities where their profile may be more relevant.

No solely automated decisions with legal or similarly significant effects are made about candidates. No decisions with considerable adverse effects within the meaning of Art. 21 FADP are made without the involvement of a human decision-maker. All hiring decisions are made by human decision-makers at our business customers' organizations. AI-generated scores and rankings are advisory tools only and do not determine any candidate's eligibility for employment.

You have the right to request information about the logic involved in any automated processing that concerns you, to obtain human intervention, to express your point of view, and to contest any decision influenced by automated processing. To exercise these rights, please contact us at privacy@beskarstaff.com.

8. Notice to Candidates — Indirect Data Collection

In accordance with GDPR Art. 14 and FADP Art. 19, we provide the following information to individuals whose personal data we have collected from publicly available sources rather than directly from them.

Sources of data: Candidate data is collected from publicly accessible professional platforms and websites where individuals have published professional information about themselves. All such data originates from publicly accessible sources.

Individual notification: Where a candidate's contact information (such as an email address) is available at the time of data collection or is subsequently obtained, we send individual notifications informing candidates of the processing of their data, the purposes of processing, and their rights. In accordance with GDPR Art. 14(3), such notification is provided within one month of obtaining the data or, if the data is to be disclosed to a business customer, no later than at the time of first disclosure — whichever is earlier.

Where individual notification is not possible: Where no contact information is available and cannot be obtained through reasonable means, this Privacy Policy serves as notice in accordance with the exception provided under Art. 14(5)(b) GDPR and Art. 20(2)(b) FADP. As appropriate measures to protect data subjects' rights, we maintain this Privacy Policy publicly and provide an accessible mechanism to exercise the right to object and the right to erasure at privacy@beskarstaff.com. We document all attempts to obtain contact information for notification purposes.

Notification before disclosure: If your contact information becomes available to us at a later stage — for example, through a data enrichment service — we will notify you before your data is disclosed to a business customer for recruitment purposes.

9. How We Share Personal Data

Business customers: If you are a candidate, we may share your professional profile information with our business customers to support their recruitment efforts. Business customers provide us with descriptions of the roles they seek to fill, and we use our platform to identify candidates whose profiles are relevant to those roles. Business customers do not determine or influence how we collect, store, or process candidate data. When we share candidate data with a business customer, that business customer becomes an independent data controller for their subsequent processing of that data, and their own privacy policies and practices apply to such processing.

Service providers (Data Processors): We engage the following categories of service providers who process personal data on our behalf under Data Processing Agreements in accordance with Art. 28 GDPR:

Google Cloud Platform (Google Cloud EMEA Limited) — Cloud infrastructure, AI services, and data storage. Data is processed on servers located in Switzerland.
Web hosting providers — Server infrastructure located in Switzerland.
Data enrichment services — Contact information enrichment and email verification.

Each service provider is contractually required to process personal data only in accordance with our instructions and to implement appropriate technical and organizational security measures. A detailed list of sub-processors, including entity names and locations, is available upon request at privacy@beskarstaff.com.

Legal obligations: We may disclose personal data if required by law, regulation, or court order, or if necessary to protect our rights, property, or safety, or the rights, property, or safety of others.

We do not sell personal data to third parties.

10. International Data Transfers

Personal data is primarily stored and processed on servers located in Switzerland and the European Union.

Where personal data is transferred to countries outside Switzerland or the EU/EEA, such transfers are conducted only in compliance with FADP Art. 16–18 and GDPR Chapter V, and only where the destination country ensures an adequate level of data protection — including under the Swiss-U.S. Data Privacy Framework and the EU-U.S. Data Privacy Framework where applicable — or where appropriate safeguards such as Standard Contractual Clauses (SCCs) or Binding Corporate Rules are in place.

11. Data Retention

We retain personal data only as long as necessary for the purposes set out in this Privacy Policy, taking into account the nature of the data, the purposes of processing, and applicable legal requirements.

Candidate profiles: retained for as long as the data remains relevant to active recruitment purposes. We review the necessity of continued storage at least every 24 months and delete data that is no longer needed for its original purpose.
Business user account data: retained for the duration of the contractual relationship and any legally required retention period thereafter.
Technical and log data: retained for a limited period necessary for security and analytical purposes.
Suppression list: hashed identifiers of individuals who have requested deletion are retained indefinitely to prevent re-collection of their data. This list contains only hashed identifiers that cannot be used to directly identify an individual and is maintained solely for the purpose of preventing re-collection.

Upon expiry of the applicable retention period or upon a valid deletion request, personal data is securely deleted from all our systems, including our talent database and backup systems.

12. Your Rights

12.1 Rights of Candidates

If you are a candidate whose data is stored in our talent database, you have the following rights under applicable data protection law:

Right of access: You may request confirmation of whether we process your personal data, and if so, receive a copy of that data along with information about how it is processed, including the specific sources from which the data was collected.
Right to rectification: You may request correction of inaccurate personal data or completion of incomplete data.
Right to erasure: You may request the deletion of your personal data from all our systems, including our talent database. Upon receiving a valid deletion request, we will delete your data within one month and add a hashed identifier to our suppression list to prevent re-collection.
Right to restriction of processing: You may request that we restrict the processing of your personal data in certain circumstances.
Right to data portability: You may request to receive your personal data in a structured, commonly used, machine-readable format.
Right to object: You have the right to object to the processing of your personal data based on our legitimate interest. Upon receiving an objection, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
Rights related to automated decision-making and profiling: As described in Section 7, our AI-based processing constitutes profiling, but all hiring decisions are made by humans. You have the right to request information about the logic involved in automated processing that concerns you, to obtain human intervention, to express your point of view, and to contest any decision influenced by automated processing.

12.2 Rights of Business Users

If you are a business user, you may review, update, or delete your account information through your account settings or by contacting us at privacy@beskarstaff.com.

12.3 How to Exercise Your Rights

To exercise any of the rights described above, please contact us at privacy@beskarstaff.com. We may need to verify your identity before processing your request. We will respond to your request within one month. If the complexity or volume of requests requires an extension, we will notify you within the initial one-month period.

If you believe that our processing of your personal data infringes applicable data protection law, you have the right to lodge a complaint with the competent supervisory authority. For Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC). For the European Union, this is the supervisory authority of your habitual residence or place of work.

13. Cookies and Tracking Technologies

We use cookies and similar technologies to analyze how visitors interact with our website, maintain security, and improve our services. You can control cookie settings through your browser. Disabling cookies may affect the functionality of certain features.

For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

14. Children's Privacy

Our services are intended for individuals who are at least 16 years old. We do not knowingly collect personal data from children under the age of 16. If we become aware that we have inadvertently collected personal data from a child under 16, we will take steps to delete such information promptly.

15. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest, role-based access controls, regular security assessments, and server infrastructure located in Switzerland and the EU operated by trusted providers that meet Swiss and EU data protection standards.

No system can be guaranteed to be fully secure. While we take all reasonable steps to protect your data, we cannot guarantee absolute security.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services. We will publish the updated policy on this page with a revised "Last updated" date. For material changes that affect how we process candidate data, we will make reasonable efforts to provide notice — for example, by posting a prominent notice on our website. We encourage you to review this Privacy Policy periodically.

17. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or have a concern about how we process personal data, please contact us:

W&W Global Marketing Group GmbH
Operating the BeskarStaff platform
Zug, Switzerland

Data protection inquiries: privacy@beskarstaff.com
General support: support@beskarstaff.com
Security issues: security@beskarstaff.com

If you have an unresolved concern, you may contact the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, if you are located in the EU/EEA, the supervisory authority of your habitual residence.