Privacy Policy
How we handle your personal data
Last updated: 13 July 2026
Bondi Executive Search AB ("Bondi", "we") cares about your privacy. This policy explains what personal data we collect, why, how long we keep it, who has access to it, and what rights you have under the EU General Data Protection Regulation (GDPR).
This policy applies to candidates who apply for a role with us or register in our talent database, as well as to contact persons at our client companies.
If you would like to know more about anything in this policy, contact us at gbr@bondi.se.
What data we collect
About you as a candidate
- Contact details: name, email, phone number, LinkedIn profile.
- Your application: CV, cover letter/motivation, your answers in the application form.
- Career information: current title and employer, skills, previous interim assignments.
- Your preferences: interest in permanent employment and/or interim assignments, availability, desired location, willingness to relocate.
- For interim consultants: day rate information.
- Internal notes: a responsible consultant may keep notes about contact, conversations, and impressions related to your application or profile.
About you as a contact person at a client company
Name and email address, so we can share a password-protected candidate presentation with you and statistics on when it was opened.
Why we process your data and legal basis
Handling your application for a specific role is based on our legitimate interest in conducting an effective and fair recruitment process.
Storage in our talent database, to be matched against future, not-yet-known assignments, only takes place if you have actively consented to it.
Sharing your candidate presentation with a client is done as part of the recruitment process for that specific role, based on our legitimate interest.
How we use AI
We may use AI as a tool in parts of the recruitment process. One of our consultants always reviews the output and makes the actual decision.
How long we keep your data
| Type of data | Retention |
|---|---|
| Application without consent to the talent database | For the duration of the relevant recruitment process |
| Candidate profile with consent to the talent database (incl. CV file, AI analyses, and consultants' notes) | Up to 12 months, after which we contact you for renewal or deletion |
| Client links (shared candidate presentations) | 1–90 days, as chosen by the consultant when created |
| Backups | 30 days, then automatically deleted |
Who we share your data with
- Internally: all of Bondi's consultants can see candidates in our shared talent database, regardless of who originally added the candidate. This lets us effectively match you against relevant assignments regardless of which consultant initially handled your application.
- Clients: if you proceed in a recruitment process, we share your CV and a candidate presentation with the relevant client, via a password-protected, time-limited link.
- Vendors: see the section on subprocessors below.
Subprocessors and where your data is processed
We use vendors for data storage, IT operations, communication, and technical tools needed to provide our service. All are bound by data processing agreements (DPA). Your core data is stored within the EU/EEA. Some vendors are based in the US; such transfers are made under the European Commission's Standard Contractual Clauses (SCC), one of GDPR's approved legal mechanisms for transferring personal data outside the EU/EEA.
Your rights
- Access — you have the right to know what data we hold about you.
- Rectification — you can update your data yourself via the personal link you receive at annual renewal, or by contacting us.
- Erasure — you can delete your profile at any time via the personal link you receive at annual renewal, or by contacting us.
- Objection — you have the right to object to our processing of your data.
- Withdraw consent — you can withdraw your consent to storage in the talent database at any time, which deletes your profile.
- Data portability — you have the right to receive your data in a machine-readable format; contact us and we will help you.
For rights that do not have a self-service option in the system today (such as a data extract or export), contact us below and we will handle your request manually, normally within 30 days.
Contact and complaints
Data controller: Bondi Executive Search AB, Nybrokajen 7, 111 48 Stockholm, Sweden.
Contact for questions about your personal data: gbr@bondi.se.
You have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY), imy.se, if you believe we are processing your data incorrectly.