Privacy policy
and data protection

The data controller is:

Bespoke & Partners Sàrl Chemin des Couleuvres, 8b CH - 1295 Tannay Email: contact@bespokeandpartners.ch

Any question or request relating to data protection may be sent to the address above.

This policy applies in particular to candidates and potential candidates, people approached in the context of a recruitment or Executive Search assignment, clients and prospects, people taking part in an assessment or support programme, professional referees, partners, suppliers, visitors to our website and any other person whose data we may process in the course of our business.

Depending on the nature of our relationship and the services concerned, we may process in particular:

• identification and contact data: surname, first name, contact details, email address, telephone, place of residence, nationality where relevant;
• professional information: CV, career path, roles, responsibilities, current and previous employers, skills, qualifications, education, languages and certifications;
• information relating to job search and professional development: availability, mobility, aspirations, preferences, motivations, salary expectations and compensation conditions;
• information from our exchanges: interview notes, contact history, correspondence and professional assessments;
• information relating to professional references, where collected;
• information and documents required for a recruitment process or an assignment entrusted by a client;
• data from professional evaluation or assessment tools, including personality, motivations, aptitudes or reasoning, where such tools are used;
• publicly available information, in particular on professional networks, company websites, professional publications or other relevant public sources;
• technical data relating to the use of our website: IP address, browser, device, pages viewed, date and time of connection and data from cookies or similar technologies;
• any other information you choose to share with us in the course of our relationship.

We seek to limit collection to data that is relevant and necessary for the purpose pursued. We do not request sensitive personal data unless required for a legitimate purpose and within an appropriate framework.

We may collect data directly from you when you contact us, apply for an opportunity, send us a CV, take part in an interview, assessment, survey or support programme, use our website or exchange with us.

As part of our direct search and Executive Search activities, we may also identify and collect certain professional information from publicly available sources, in particular professional networks such as LinkedIn, company websites, professional publications, lawful databases or public information.

Finally, we may receive information from clients, partners, professional referees, candidates, service providers or other third parties legitimately authorised to share it with us.

Where data has not been collected directly from the data subject, Bespoke & Partners ensures that it meets its information obligations in accordance with applicable law, subject to the exceptions provided by law.

We process personal data in particular in order to:

• provide our recruitment, Executive Search, Talent Mapping, assessment and advisory services;
• identify and approach profiles likely to match an assignment;
• assess the fit between a profile and a professional opportunity;
• organise and conduct interviews and selection processes;
• present candidates or profiles to our clients, with appropriate precautions;
• carry out assessments or professional evaluations and provide feedback;
• verify certain information or references where relevant and permitted;
• maintain our relationship with candidates, clients, prospects and partners;
• respond to requests received via our website, by email, telephone or any other channel;
• improve the quality of our services, processes and website;
• ensure the security of our systems and prevent misuse;
• comply with our legal, contractual, accounting or regulatory obligations;
• share professional information, invitations, publications or news from Bespoke & Partners where permitted.

Where the GDPR applies, processing is based, depending on the circumstances, on the performance of pre-contractual or contractual measures, our legitimate interest, compliance with a legal obligation or your consent where required.

Direct approach is part of Bespoke & Partners' business. We may therefore identify a person based on professional information made public or lawfully obtained, even if they have not previously contacted us.

The information collected in this way is used to make a preliminary assessment of a profile's relevance to an assignment or to contact the person concerned. We endeavour to collect only the professional information necessary for this purpose.

Being identified or approached by Bespoke & Partners does not mean that your profile will automatically be shared with a client.

As part of a recruitment process or advisory assignment, certain data may be shared with the client concerned where this is necessary for the service.

Bespoke & Partners attaches particular importance to the confidentiality of professional moves. Wherever possible and depending on the context of the assignment, we ensure that the person concerned is informed before a named file, CV or detailed information is shared with a client.

We ask our clients to treat the information received confidentially and solely for the purpose for which it was shared with them.

When Bespoke & Partners uses an assessment or professional evaluation tool, the data and results are processed exclusively for the purpose disclosed to the person concerned.

These evaluations may cover in particular personality dimensions, motivations, professional behaviours, aptitudes or reasoning. They are intended to inform a professional judgement and should not be considered in isolation as an automated decision.

Depending on the assignment, specialised providers, including AssessFirst or other evaluation tool providers, may act as processors or as separate controllers for certain processing. The applicable processing conditions are specified where necessary.

Results are shared only with people who have a legitimate need to know them in the context of the assignment concerned.

To provide its services, Bespoke & Partners may use technical or professional service providers, in particular for hosting, CRM/ATS solutions, email, assessment tools, IT maintenance, audience analytics, accounting or other functions necessary for its business.

These providers receive only the data necessary to perform their services and are selected taking into account, in particular, the applicable confidentiality and security requirements.

The list and location of the main providers will be finalised before the website goes live, according to the technical architecture actually adopted.

Some providers or systems used by Bespoke & Partners may involve processing or storing data outside Switzerland.

When personal data is transferred abroad, Bespoke & Partners ensures compliance with applicable legal requirements and, where necessary, puts appropriate safeguards in place, such as recognised contractual clauses or other mechanisms provided by law.

The countries concerned and, where necessary, the applicable safeguards will be specified in the final version of this policy once all technical providers have been validated.

We retain personal data for as long as necessary for the purposes for which it was collected, for managing our professional relationship and for complying with our legal or contractual obligations.

The retention period depends in particular on the nature of the data, the relationship with the person concerned, the reasonable possibility of future professional opportunities and applicable legal obligations.

When data is no longer needed, it is deleted, anonymised or archived where required by law. More precise internal retention periods will be defined in Bespoke & Partners' operational policy.

Bespoke & Partners implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, disclosure or misuse.

Access to information is limited to the people and providers who need it to carry out their tasks. We pay particular attention to the confidentiality of information relating to career plans, applications, compensation, assessments and exchanges with our clients and candidates.

As no IT system can guarantee absolute security, we regularly adapt our measures to the risks, the technologies used and the nature of the data processed.

Bespoke & Partners may send you information about its services, publications, events or professional news where permitted by applicable law.

Where your consent is required, these communications will only be sent once it has been obtained. You may at any time ask to stop receiving marketing communications or use the unsubscribe mechanism provided.

Objecting to marketing does not affect communications necessary for a contractual relationship, an ongoing recruitment process or a request you have sent us.

Our website may use cookies and similar technologies necessary for its operation, security, remembering certain preferences and, where applicable, audience measurement.

Strictly necessary cookies may be used to enable the website to function. Non-essential cookies, in particular certain analytics or marketing tools, will be managed in accordance with applicable requirements and the technical configuration adopted.

The final version of this section will need to be adapted by Bespoke & Partners and its web agency to the cookies, analytics tools, fonts, videos, forms, third-party services and trackers actually integrated into the website. A consent management tool will be implemented if necessary.

Our website may contain links to websites or services operated by third parties. Bespoke & Partners is not responsible for their data protection practices. We recommend that you read the privacy policy of the service concerned when you leave our website.

Subject to the conditions and limits provided by applicable law, you may in particular request:

• whether we process personal data about you and access the corresponding information;
• the rectification of inaccurate or incomplete data;
• the erasure of certain data;
• the restriction or cessation of certain processing;
• to object to certain processing;
• to withdraw consent for the future where processing is based on it;
• where applicable law provides for it, to receive or have certain data transmitted in an appropriate format.

To exercise your rights, you can contact us at contact@bespokeandpartners.ch. To protect your data, we may ask for information to verify your identity.

We will handle requests within the time limits provided by applicable law. In Switzerland, access requests are in principle handled within 30 days, subject to legal exceptions.

Bespoke & Partners may use digital or artificial intelligence tools to assist with certain professional tasks, subject to applicable confidentiality and data protection rules.

We do not want an important decision about a person to rest exclusively on automated processing without appropriate human involvement. Where the law requires specific information about automated individual decisions, it will be provided to the person concerned.

Our approach remains grounded in professional judgement, context and human involvement.

Bespoke & Partners' services are aimed primarily at professionals and companies. We do not intentionally seek to collect data about minors, except where a specific and legally appropriate context justifies it.

We may amend this policy to reflect changes in our activities, tools or legislation. The current version will be published on our website with its last updated date.

Last updated: [publication date to be completed].

For any question about this policy or the processing of your data:

Bespoke & Partners Sàrl Chemin des Couleuvres, 8b CH - 1295 Tannay Email: contact@bespokeandpartners.ch

In Switzerland, you may also contact the Federal Data Protection and Information Commissioner (FDPIC).

Where the GDPR applies, data subjects also have the right, under the conditions it provides, to lodge a complaint with the competent supervisory authority.