The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Robert Breitbach Consulting OÜ
Sakala tn 7-2
EE-10141 Tallinn
Estonia
Email: info@breitbach.com
If you have any questions about data protection or wish to exercise your data protection rights, you may contact us using the details above.
Robert Breitbach Consulting is an international executive search consultancy specialising in the search for executives and specialists.
We process personal data only where there is a legal basis for doing so. Depending on the processing activity concerned, processing is carried out in particular on the basis of your consent pursuant to Art. 6(1)(a) GDPR, the performance of a contract or steps taken prior to entering into a contract pursuant to Art. 6(1)(b) GDPR, compliance with a legal obligation pursuant to Art. 6(1)(c) GDPR, or our legitimate interests or the legitimate interests of a third party pursuant to Art. 6(1)(f) GDPR, provided that your interests or fundamental rights and freedoms do not override those interests.
When you access our website, the web server may process technically necessary information, including in particular the IP address, date and time of access, the page or file accessed, amount of data transferred and access status, browser type and version, operating system and referrer URL.
Where necessary, this processing is carried out to provide and technically administer the website and to ensure the stability and security of our systems. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is to provide a secure, stable and technically functional website. Server log data is retained only for as long as necessary for these purposes or as required by statutory retention obligations.
Our website may use technically necessary cookies or comparable storage technologies where these are required to provide and operate the website.
Where technologies are used that are not technically necessary and require consent, they will only be used after you have given your consent. Consent may be withdrawn at any time with effect for the future. You can also delete cookies or restrict their storage through your browser settings.
Our website may incorporate content or technical resources from external providers or provide links to external websites. When directly embedded external resources are retrieved, a technical connection to the servers of the relevant provider may be established and, in particular, the user's IP address may be transmitted.
Our website currently uses, among other things, externally provided technical resources from Google. Retrieving these resources may establish a connection to the provider's servers.
If you merely follow a link to an external website or social network, you leave our website. Any subsequent processing of personal data by the operator of that external website is governed by that operator's privacy policy.
If you contact us by email, telephone or by other means, we process the data you provide insofar as this is necessary to handle your enquiry and for further communication.
Depending on the nature of the contact, processing is carried out in particular on the basis of Art. 6(1)(b) GDPR where the communication relates to entering into or performing a contractual relationship, or on the basis of Art. 6(1)(f) GDPR based on our legitimate interest in handling business enquiries and communications. The data will be deleted once it is no longer required for the relevant purpose, unless statutory retention obligations or other legal grounds prevent deletion.
In the course of our activities as an executive search consultancy, we process personal data relating to applicants, candidates and potential candidates. This may include name and contact details, current and previous professional positions, employers and career history, education and qualifications, professional skills and experience, publicly available professional information, application documents and CVs, information from conversations and correspondence with us, and other information relevant to assessing a possible professional position.
Processing is carried out in particular to identify potential candidates for search assignments, assess their professional qualifications and general suitability for particular positions, make contact and, as a search or application process progresses, prepare for and carry out a possible introduction to a client.
Depending on the nature of the contact and the particular process, processing is based on Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR. Our legitimate interest consists in particular in carrying out professional executive search and identifying suitable candidates for positions to be filled by our clients.
In connection with executive search assignments, we do not obtain personal data exclusively from the individuals concerned.
We research potential candidates in particular using professionally accessible or publicly available sources. These may include professional networks, company websites, publicly available professional publications, directories, and recommendations or information from our professional network.
As a rule, we process only information that appears relevant to identifying and making an initial professional assessment of a potential candidate in connection with our activities as an executive search consultancy.
The legal basis for this processing is generally Art. 6(1)(f) GDPR. Our legitimate interest lies in carrying out executive search assignments, in particular identifying and approaching potentially suitable executives and specialists.
Where personal data has not been obtained directly from you, we will inform you about the processing and, where required, the source of the data in accordance with applicable legal requirements.
In connection with a specific executive search or application process, a candidate's personal data may be disclosed to the relevant client of Robert Breitbach Consulting where this is necessary for the relevant search or application process and legally permissible.
We observe the principle of data minimisation. The scope and timing of any disclosure depend on the particular process, the purpose of the processing and the applicable legal basis.
Personal data is not sold for unrelated purposes.
As a rule, we do not require special categories of personal data within the meaning of Art. 9 GDPR to identify and initially assess potential candidates. In particular, we do not require information concerning racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic or biometric data, health data, or data concerning a person's sex life or sexual orientation.
We therefore ask you not to provide us with such information unless it is necessary for a specific process.
If the processing of such data is necessary in an individual case, it will only be carried out where a specific legal basis under Art. 9 GDPR applies.
We process personal data relating to contact persons at existing and potential clients, business partners and other organisations where this is necessary to provide our consultancy services, establish or maintain business relationships, or conduct general business communications.
This may include in particular names, companies, positions, business contact details and information from business communications.
Depending on the circumstances, processing is carried out in particular on the basis of Art. 6(1)(b) or Art. 6(1)(f) GDPR.
We may use external service providers in the course of our business activities, for example for IT infrastructure, hosting, communications, software, administration and legal, tax or other professional advice.
Where such service providers process personal data on our behalf, they are engaged in accordance with applicable legal requirements.
Personal data may also be disclosed to authorities, courts or other bodies where we are legally required to do so or where this is necessary for the establishment, exercise or defence of legal claims.
Due to our international activities and the use of international service providers, personal data may in individual cases be processed or transferred outside the European Economic Area (EEA).
Where no adequacy decision by the European Commission applies to the country concerned, such a transfer will only take place if the applicable legal requirements are met, in particular on the basis of appropriate safeguards within the meaning of Arts. 44 et seq. GDPR or another legally recognised basis.
As a rule, we retain personal data only for as long as necessary for the relevant processing purpose.
In determining the retention period, we take into account in particular the purpose of the processing, the duration of an existing or potential business, application or candidate relationship, statutory retention obligations, limitation periods and the need to establish, exercise or defend legal claims.
Where the purpose of the processing no longer applies and there is no other legal basis or retention obligation, the data will be deleted or, where necessary, its processing will be restricted.
Subject to the applicable legal requirements, you have in particular the following rights:
Where processing is based on your consent, you may withdraw that consent at any time with effect for the future. The lawfulness of processing carried out before the withdrawal remains unaffected.
Where we process your personal data on the basis of Art. 6(1)(f) GDPR, you have the right, pursuant to Art. 21 GDPR, to object to the processing on grounds relating to your particular situation.
To exercise your right to object, simply contact us at:
info@breitbach.com
You have the right to lodge a complaint with a data protection supervisory authority if you consider that the processing of your personal data infringes the GDPR.
For the controller in Estonia, the relevant supervisory authority is in particular:
Andmekaitse Inspektsioon
Estonian Data Protection Inspectorate
Tatari 39
10134 Tallinn
Estonia
Irrespective of this, you may have other options under the GDPR to lodge a complaint with a competent data protection supervisory authority.
We take appropriate technical and organisational measures to protect personal data against loss, unauthorised access, alteration or unauthorised disclosure.
Data transmitted through our website is encrypted using HTTPS/TLS.
In the course of its executive search and recruitment consultancy activities, Robert Breitbach Consulting does not make decisions based solely on automated processing, including profiling, which produce legal effects concerning the data subject or similarly significantly affect the data subject, unless expressly stated otherwise in an individual case.
We may amend this Privacy Policy if our data processing activities, our website or applicable legal requirements change.
The current version published on this website applies.
Last updated: September 2026