Privacy Policy

1. Introduction

Lenstra SAS ("we", "our", or "us") values the privacy of individuals and companies that provide us with personal data. This Privacy Policy explains how we collect, use, and safeguard your personal data, in compliance with the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

2. Data Collection & Usage

2.1 HR Data Collection:

We collect personal data during our HR processes. This includes:

Name
Email Address
Past Work Experience
LinkedIn Profile
Resume
Interview Meeting Minutes
Data directly provided by candidates such as phone numbers

This data is either collected manually or sent to us by email by the candidates themselves.

2.2 Sales Data Collection:

For sales purposes, we collect:

Names
Emails
Company Details
LinkedIn Profiles
Phone Numbers

3. Purpose of Data Collection

The data collected for HR is used for recruitment and employment purposes. The sales data is used for reaching out, communications, and maintaining business relationships.

4. Third-party Sharing

Personal data is not sold or shared for marketing purposes and is processed only by authorized service providers acting as data processors under GDPR.

5. Data Storage & Transfer

Personal data is primarily stored using GDPR-compliant cloud services, with data hosted within the European Economic Area where applicable. We do not transfer personal data across international borders.

6. Data Protection Measures

We employ various security measures to protect the personal data we collect. Our personal computers are MDM-enabled and encrypted. Additionally, all our employee contracts contain a confidentiality clause, ensuring the security and confidentiality of the data.

7. Data Retention

Personal data for HR purposes is retained for a period of 2 years. For sales purposes, the data is retained for 3 years.

8. User Rights

If you wish to exercise your rights under GDPR or CCPA, such as data access, correction, or deletion, please email us at [email protected]. We will respond within the timelines defined by GDPR.

9. Cookies and Tracking

We do not use cookies or any other tracking mechanisms.

10. Children's Data

We do not knowingly collect data from children under the age of 16.

11. Changes to This Privacy Policy

While we primarily deal with companies, any significant changes to this Privacy Policy will be communicated directly through appropriate channels.