G-P employs appropriate technical and organizational security measures to ensure a level of security appropriate to the risk and to protect personal data against loss, unauthorized access, disclosure, alteration, and destruction, and against other forms of unlawful or abusive treatment. To learn more and access to G-P security and compliance posture, please reference our Security and Compliance Overview page. Our latest reports are available to customers under NDA and can be accessed by contacting your account manager.

G-P has a comprehensive global privacy program which includes policies, procedures, standards, and controls focusing on compliance with global data protection laws, including GDPR. This program is managed and monitored by a global privacy and data protection team. G-P’s comprehensive program includes policies, procedures, standards, and controls around:

• Data Governance;
• Data Mapping;
• Data Subject Rights;
• Incident Response;
• International Data Transfers;
• Notice and Consent;
• Privacy Impact Assessment (and DPIAs);
• Privacy By Design and Default;
• Third Party Management;
• Security of Data;
• Recordkeeping;
• Confidentiality; and
• Training and Awareness of our team members.

G-P’s Privacy Policy explains how and why G-P collects, uses, stores, and discloses personal data / information from individuals who interact with us. You may consult it here.

G-P is both a data controller and a data processor.

G-P collects and uses the Professional’s human resources data during the course the employment relationship. With regard to that information, G-P is a data controller. In the context of the employment relationship with the Professionals, G-P is not a processor on behalf of the Customer. To the extent Customers also collect and use the Professional’s personal data for the Customer’s own purposes, Customers are also data controllers with independent privacy obligations. Therefore, the exchange / sharing of Professionals’ Personal data between G-P and the Customer is under an independent Controller-to-Controller relationship.

On the other hand, through our SaaS-based platform (“G-P Platform”), we help Customers to find, hire, onboard, pay, and manage team members, quickly and compliantly, to expand growth opportunities for everyone, everywhere – without the hassle of setting up local subsidiaries or branch offices. By providing Customers with access to G-P Platform, G-P is a data processor for any personal data uploaded to the G-P Platform by Customer concerning the authorized users of the G-P Platform appointed by the Customer. G-P processes the account related date belonging to such authorized users of the GP Platform.

Those relationships between Customer and G-P are addressed in G-P Data Protection Addendum incorporated in the Master Agreement executed between the parties.

G-P disrupted the rules of international business by enabling organizations to hire anyone, anywhere in the world within minutes. Therefore, transferring personal data internationally is necessary for the provision of our Services. When sharing with or disclosing personal data to other parties, including to G-P’s related companies, affiliates, subsidiaries, partners and subcontractors who provide Services, personal data may be transferred to countries with data protection laws providing a lower standard of protection for your personal data than your country.

We will transfer your personal data in compliance with applicable data protection laws, including having adequate mechanisms in place to protect your personal data when it is transferred internationally (e.g. Standard Contractual Clauses, data processing agreements).

G-P protects the privacy of its Customers and Professionals and G-P not voluntarily provide third party. G-P has never received a request under U.S. surveillance laws to provide personal data to the U.S. government.

Yes, G-P issues a Privacy Notice to Professionals at the time their data is collected.

This means that:

• When using Recruit services, a candidate privacy notice is issued at the start of the selection process; and
• An employee privacy notice is provided to all Professionals at the start of the engagement.

Our privacy notice ensures that Professionals are aware of the way their personal data is processed, helping them understand what data is being collected, why and how it’s being used, with whom will be shared, how it is secured and how long it will be kept.

When you visit our websites, we may use cookies or similar technologies to deliver a more personalized experience. Cookies help us better understand your interests, tell us which parts of our website you’ve visited, and show how you’re interacting with our online ads and web searches. For more information on our cookies settings, and how to manage your preferences, visit our COOKIES SETTINGS in our website.