Edition: All Editions Audience: All Users

GDPR

This article explains how Bullhorn Analytics remain compliant with the General Data Protection Regulation (GDPR) Europeam Union (EU) law on how personal data is collected, stored, and managed.

GDPR Compliance, Contracts and Bullhorn Analytics

At Bullhorn Analytics we have ensured that our product complies with the legislation which was enacted on May 25 2018. If you were a customer before this date your contract may not contain the relevant GDPR clauses. If this is the case, please contact your Account Manager for more information.

The information provided in this section is not intended to constitute a "privacy policy" or full and final list; instead it is intended to inform our customers of what we are doing to ensure we comply with GDPR.

Personal Data Bullhorn Analytics Holds

The following personal data is sent to Bullhorn Analytics from your CRM:

Your employees:

  • Name
  • Email address
  • Photograph (if you upload it)

Your candidates:

  • Name
  • Email address
  • Phone number
  • Job title

Your client contacts:

  • Name
  • Email address
  • Phone number
  • Job title

Bullhorn Analytics also holds details about the targets set for your consultants, and may hold notes relating to these targets.

Bullhorn Analytics does not hold any special categories of personal data (previously known as "sensitive" personal data) in relation to your employees, candidates or client contacts.

At your request, Bullhorn Analytics may have been loading 'Additional Data' fields containing personal data. All these fields have been reviewed and will be redacted in Bullhorn Analytics when a delete request is processed, in which case you will see "[deleted]".

Why Does Bullhorn Analytics Need This Data?

Bullhorn Analytics provides a SaaS based growth analytics, business intelligence and performance management application which has been designed exclusively for recruitment companies.

The solution is pre-integrated with multiple recruitment CRM's and is designed to deliver relevant, near real-time performance data to people at all levels of your business.

Bullhorn Analytics drives better usage and adoption of your recruitment CRM by creating a data-driven environment and engaging all users, in particular the recruiters who are relied upon to record critical business information.

A richer and more accurate data set allows for more advanced analysis of company, team and individual performance as well as fast analysis over client delivery and live jobs. When combined with the advanced reporting capabilities in Bullhorn Analytics, the actionable insights that are provided will help drive data-driven decision making across your business.

To deliver this service, we need data about the activities recorded in your CRM to be sent to us.

Bullhorn Analytics Security Infrastructure

Bullhorn Analytics stores your data inside Amazon Web Services (AWS), currently in Ireland. AWS are renowned for having excellent security practices, and as expected follow current ISO standards (read more about ISO here and security practices here).

Within AWS your data is kept in accordance with their security best practices (read more here).

Bullhorn Analytics employees have access to your data on a Least-Privileged basis, meaning only the employees who absolutely need access have access, and they have the lowest level of access possible to do their job.

How Does Bullhorn Analytics Keep Your Data Accurate & Up-to-date?

Bullhorn Analytics reflects the data in your CRM. When a record is updated in your CRM, that update is sent through to Bullhorn Analytics - this includes when personal data is redacted or anonymised in our CRM for the purpose of GDPR compliance.

If a record is deleted in your CRM, Bullhorn Analytics may keep a copy of that record to allow for tracking of historical activity. To ensure GDPR compliance, Bullhorn Analytics maintains a list of all fields that may contain personal data and upon receiving a deletion request from your CRM (whether GDPR related or not) will redact those fields and mark the record as deleted. This ensures that the personal data is removed while allowing Bullhorn Analytics to continue to give an accurate reflection of the historical activity your business has put in.

Data Subject Rights

As we are your data processor, we will pass any data subject right requests we receive in respect of your data to you, and will not respond to those requests without your approval.

To the extent the data we hold is not a mirror of the personal data contained in your CRM (e.g. where the right to rectification or erasure has been exercised), we will assist you in responding to these requests.

Bullhorn Analytics Policies & Procedures for GDPR

As noted above, Bullhorn Analytics acts a data processor. You can download our updated data processing terms here.