SourceGeek GDPR Policy

SourceGeek uses proprietary search methodologies to scan public sources (including, but not limited to, LinkedIn, GitHub, Stack Overflow, Facebook, Google, and Precontactingtool) for relevant information to identify suitable candidates on behalf of its clients.

Legal Basis for Processing

SourceGeek must have a legitimate interest to process personal data. The GDPR requires that personal data is collected only for a specific, explicit, and legitimate purpose. This purpose must also be justifiable. Collecting candidate data for a specific role can be considered necessary for the pursuit of legitimate interests. In such cases, SourceGeek has a legal basis for its processing activities.

Explicit Consent

If we do not have a legitimate interest, we ask the candidate for consent in a clear and understandable manner. We also inform the candidate how they can withdraw their consent (e.g., via the footer of an email). We are fully transparent about the identity of the client and the purposes of the data processing.

Right to Be Forgotten

Candidates have the right to request the deletion of their personal data and to stop any further processing. Such a request must be fulfilled within one month. At SourceGeek, all data is stored in one centralized location, in addition to Gmail where email correspondence with the candidate may be found.

Right to Access Personal Data

Candidates have the right to know what data SourceGeek holds about them and may request corrections to any inaccuracies. SourceGeek is required to comply with such requests within one month, free of charge.

Special Categories of Personal Data

The processing of special categories of personal data (such as religion, race, ethnicity, union membership, biometric or medical data) is prohibited and is not carried out by SourceGeek, unless the individual has given explicit consent or has publicly shared the data themselves.

Profiling

Profiling refers to any form of automated processing of personal data in which certain personal aspects of an individual are evaluated—such as professional performance, economic situation, health, personal preferences, interests, or behavior—with the intent to analyze or predict them. SourceGeek does not engage in automated processing of personal data in the sense of profiling. Profile analysis is carried out by recruiters, and decisions are made by them.