Privacy & Cookies Policy

Data concerning Users themselves :

• Data collected : Identification data provided during registration or account management (surname, first name, professional email), professional information (position, company), connection and authentication data (logs, identifiers), account preferences, technical and Platform usage data. For representatives of the Corporate Customer: contractual and billing information.

• Purposes: Creation and management of User accounts, authentication, provision of Platform Services and functionalities, technical support and maintenance, billing (for the Corporate Customer), service-related communication (functional notifications, updates), technical and functional improvement of the Platform, compliance with our legal and contractual obligations, Platform security. Bambboo alone determines the purposes and means of data processing and acts, for these specific processing operations, as data controller.

• Legal basis: Contract performance (T&C accepted by the User and Commercial Contract with the Corporate Customer), legitimate interest (security, service improvement, administration), legal obligation (e.g. billing).

• Retention period: Retained for the duration of use of the Platform by the User and/or the duration of the contract binding Bambboo to the Corporate Client, plus a maximum period of one (1) year after the end of the contract or the deactivation of the account, unless an early request for deletion is made or a longer retention period is required by law (e.g. billing data).

  
  

• Business Contact Data Provided or Made Accessible by Users :

  • Origin and Nature of Data: This data concerns third parties (Contacts) and comes from the actions of Employees who use the Platform for the sourcing needs of the Client Company. They may be :

    • Arises from the voluntary and consented connection by the Collaborator of his/her professional social network account (e.g. LinkedIn) to the Platform. In this case, Bambboo accesses the public profile information of the Collaborator's Contacts (profile URL, surname, first name, geography, professional experience, training, skills, languages) and imports it for analysis. Under no circumstances does Bambboo collect or process the direct contact details (email, telephone) of Contacts from this source.

    • Voluntary import of files by the employee (e.g. CVs). The data processed is that contained in these files.

  • Assertion by the Contributor : For all imports, and in particular in the case of non-public or sensitive data (e.g. CV files), the Collaborator affirms that he/she holds the rights, authorizations and consents to allow their processing for the purposes of the Services.

  • Purposes (defined by the Client Company): To enable Bambboo to analyze the relevance of the Contacts' profiles in relation to the Job Offers defined by the Client Company, and to facilitate the targeted sharing of these offers to identified Contacts, either manually by the Collaborator, or automatically if the Collaborator has activated and consented to the Automatic Sharing functionality. Bambboo acts as a subcontractor for this sourcing activity.

  • Legal basis (relevant to the Client Company) : The Client Company (Data Controller) determines the legal basis for sourcing (generally its legitimate interest). The specific and revocable consent of the Collaborator is required by Bambboo for certain technical actions facilitating this processing: the connection of his/her LinkedIn account to the Platform and the activation of Automatic Sharing.

  • Bambboo's role: Acts solely on the instructions of the Client Company and in accordance with the DPA, by providing the technological tools. Bambboo does not use the Contact data for its own purposes.

  • Retention period: Kept by Bambboo (as a subcontractor) according to the instructions of the Customer Company (Data Controller) or, failing that, for the period required to analyze and share offers, without exceeding the duration of the contract with the Customer + 1 year, unless consent is withdrawn or deletion requested by the Employee (for data linked to his/her account) or specific instructions are given by the Customer.