(Privacy Policy) 1. ControllerThe controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Company Name:Bridgesource
Legal Form:Limited Liability Company
Registered Address:[Full address, Azerbaijan]
Email:[
info@yourcompany.com]
Phone:[Phone number]
2. Scope of This Privacy PolicyThis Privacy Policy explains how we collect, use, store, and protect personal data when you visit our website, contact us, or use our services, in accordance with the GDPR.
3. Data We CollectWe may collect the following personal data:
- Contact information (name, email address, phone number)
- Company name and business-related details
- Messages and inquiries submitted via contact forms
- Candidate information (CVs, professional profiles, employment history)
- Technical data (IP address, browser type, device information)
- Cookie and usage data (subject to consent)
4. Purposes of Data ProcessingWe process personal data for the following purposes:
- Responding to inquiries and communication requests
- Providing IT, software development, and consulting services
- Recruitment and candidate evaluation (if applicable)
- Improving website functionality and security
- Compliance with legal obligations
- Contract initiation and execution
5. Legal Basis for Processing (Art. 6 GDPR)Personal data is processed on the following legal bases:
- Art. 6(1)(a) – Consent
- Art. 6(1)(b) – Performance of a contract or pre-contractual measures
- Art. 6(1)(c) – Legal obligation
- Art. 6(1)(f) – Legitimate interest (e.g. website security, service optimization)
6. Recruitment and Candidate DataIf you apply for a position or submit your CV:
- Your data is processed solely for recruitment purposes
- Data may be shared with potential clients only with your explicit consent
- Candidate data is stored for a maximum of [6–12 months]
- You may withdraw your consent at any time
7. Cookies and Tracking TechnologiesOur website uses cookies and similar technologies.
- Non-essential cookies are used only after consent
- You may manage or withdraw consent via Cookie Settings
- Essential cookies are required for technical operation
Analytics tools (if used) are activated only after consent and with IP anonymization.
8. Third-Party ServicesWe may use trusted third-party services such as:
- Hosting providers
- Email services
- Analytics tools (with consent)
- Recruitment or CRM systems
All third parties are contractually bound to comply with GDPR requirements.
9. Data Transfers to Third CountriesAs our company is established outside the EU (Azerbaijan), personal data may be transferred to third countries.
Such transfers are protected by:
- Standard Contractual Clauses (SCCs)
- Appropriate technical and organizational safeguards
10. EU Representative (Art. 27 GDPR)As a non-EU company processing personal data of EU residents, we have appointed an EU representative:
EU Representative:[Name]
Address:[EU Address]
Email:[EU Contact Email]
11. Data RetentionWe store personal data only for as long as necessary to fulfill its purpose or as required by law.
- Contact inquiries: up to 12 months
- Contractual data: according to legal retention obligations
- Candidate data: up to [6–12 months]
12. Your Rights as a Data SubjectYou have the following rights under GDPR:
- Right of access (Art. 15)
- Right to rectification (Art. 16)
- Right to erasure (Art. 17)
- Right to restriction of processing (Art. 18)
- Right to data portability (Art. 20)
- Right to object to processing (Art. 21)
- Right to withdraw consent at any time
Requests can be sent to:
[privacy@yourcompany.com]13. Data SecurityWe apply appropriate technical and organizational measures to protect personal data, including:
- Encrypted connections (HTTPS)
- Access control and authentication
- Secure infrastructure and monitoring
14. Changes to This Privacy PolicyWe reserve the right to update this Privacy Policy to reflect legal or technical changes.
The current version is always available on this website.
15. Supervisory AuthorityYou have the right to lodge a complaint with a data protection supervisory authority, particularly in the EU member state of your residence or place of work.