Politique de confidentialité

1. Data controller
The data controller responsible for processing personal data is:
Vik Consulting srl
Address: 112 rue Sans Souci, 1050 Brussels
Contact email: vincent.bertieaux@vikexecutivesearch.com
Company number: BE 0693.674.615

The controller undertakes to process personal data in accordance with Regulation (EU) 2016/679 (GDPR) and the Belgian law of July 30, 2018.

2. Données collectées

As part of candidate file management, the following data may be collected:
Identity: surname, first name, date of birth, contact details (address, telephone number, email address)
Professional data: CV, career history, qualifications, experience, skills
Data related to the application: cover letters, interview results, assessments, exchanges with the consultant
Where applicable: specific data necessary for processing (e.g., work permit, legal status, professional preferences)

No sensitive data (ethnic origin, health, religious beliefs, etc.) is collected unless necessary and with the candidate's explicit consent.

3. Purpose of processing
Personal data is processed solely for the following purposes:

Evaluating applications and managing the recruitment process
Communicating with candidates
Creating and managing a database of profiles for future job opportunities
Complying with legal and regulatory obligations

The data is never used for commercial purposes unrelated to recruitment or passed on to third parties without prior consent.

4. Legal basis for processing
Data processing is based on the following legal grounds:

Execution of a pre-contractual agreement (evaluation of an application)
Consent of the applicant, in particular for the storage of the file in the database
Legitimate interest of the data controller in managing its recruitment activities
Legal obligations (e.g., administrative storage, supporting documents in the event of a dispute)

5. Retention period
Candidate data is retained for a maximum period of 24 months from the last contact with the candidate, unless explicit consent has been given for longer retention.
After this period, the data is deleted or anonymized.

6. Data sharing

Personal data may only be shared with:

Consultants and internal staff involved in recruitment
Clients or partner employers (only with the candidate's consent)
Technical service providers subject to a confidentiality clause and GDPR compliance

No data is transferred outside the European Union without appropriate safeguards.

7. Data security
The data controller implements appropriate technical and organizational measures to ensure the confidentiality, integrity, and security of personal data (restricted access, secure passwords, backups, etc.).

8. Candidate rights
In accordance with the GDPR, each candidate has the following rights:

Right of access to their data
Right to rectification in the event of an error
Right to erasure (“right to be forgotten”)
Right to restriction or objection to processing
Right to data portability
Right to withdraw consent at any time

To exercise these rights, candidates may send their request to:
Vincent.bertieaux@vikexecutivesearch.com/ contact the data protection officer (Vincent Bertieaux) – DPO

The data controller will respond within a maximum of 30 days.

9. Complaints
In the event of a dispute or disagreement, candidates may lodge a complaint with:
Data Protection Authority (APD)
Rue de la Presse 35, 1000 Brussels
+32 (0)2 274 48 00, www.autoriteprotectiondonnees.be

10. Policy updates
This privacy policy may be updated at any time to comply with current legislation or internal practices.
The most recent version is always available on [website or communication medium].