• Personal Data: Any information that relates to an identified or identifiable individual (e.g., name, email, CV, job history).

• Processing: Any operation performed on personal data (collection, storage, use, disclosure, etc.).

• Data Controller: Alpha Global, responsible for deciding how personal data is processed.

• Data Processor: Any third party that processes personal data on behalf of Alpha Global.

• Data Subject: The individual whose data we collect (candidates, clients, website visitors).

We collect personal data directly from users and via third-party tools. The information includes:

For Candidates:

• Name, email, phone number, address.
• CV, work experience, qualifications, certifications.
• References, professional social media profiles (LinkedIn, GitHub, etc.).
• Application tracking system (ATS) data.
• Background verification information where required.

For Clients & Partners:

• Company name, contact details, job descriptions.
• Business contracts, invoicing details.
• Communications history.
• Feedback and satisfaction surveys.

Automatically Collected Data (Website Visitors):

• IP address, device type, browser information.
• Cookies (see Cookies Policy below).
• Analytical tracking data via Google Analytics, Facebook Pixel.
• Behavioral data (user engagement, time spent on pages, etc.).

We process personal data to:

1. Match candidates with job opportunities.
2. Communicate with candidates, clients, and prospects.
3. Improve our recruitment services and enhance user experience.
4. Maintain website functionality, security, and fraud prevention.
5. Comply with legal obligations and regulatory requirements.
6. Perform marketing and outreach activities, including newsletters and promotional materials.
7. Conduct statistical analysis and business performance reviews.
8. Ensure automated decision-making is always reviewed by human oversight, in compliance with GDPR Article 22.

In accordance with GDPR Article 6, we process data based on:

• Consent (when you submit a job application or subscribe to updates).
• Contractual necessity (to provide recruitment and employment services).
• Legitimate interests (for business, operational, and analytical purposes).
• Legal obligations (regulatory compliance, fraud prevention, and employment verification).

Your data may be shared with:

• Employers seeking candidates.
• Cloud storage providers and recruitment software (ATS systems, CRM platforms like Salesforce, Google Drive, or Microsoft OneDrive).
• Third-party analytics providers (Google Analytics, LinkedIn Ads, Facebook Pixel).
• Legal and regulatory bodies when required.
• Background check agencies where applicable.

All third parties must adhere to strict data protection agreements and confidentiality clauses to ensure compliance with international regulations.

Given our global operations, data may be transferred across borders. We ensure:

• Transfers comply with GDPR adequacy decisions and Nigeria Data Protection Act.
• Use of Standard Contractual Clauses (SCCs) for secure transfers outside the EU.
• Encryption and data protection safeguards are in place for international processing.
• Compliance with local data residency laws where applicable.

Our primary data storage locations are secure cloud servers based in the Netherlands and Nigeria, following strict encryption protocols.

We retain personal data only for as long as necessary:

• Candidates: 3 years after last interaction unless consent is renewed.
• Clients & Partners: 6 years after contract termination.
• Website Analytics: 12 months for behavioral data, 24 months for aggregated insights.
• Marketing Data: Retained until the user unsubscribes or requests deletion.

Q: Can I access my personal data?
✅ Yes, you can request access at any time.

Q: Can I correct or delete my personal data?
✅ Yes, you can request corrections or deletion, subject to legal obligations.

Q: Can I object to data processing or withdraw consent?
✅ Yes, you can opt out of processing activities, including marketing emails, and withdraw consent at any time.

Q: Can I request my data in a portable format?
✅ Yes, we support GDPR-compliant data portability requests.

To exercise these rights, contact us at office@alpha-global.org.

1. Security Measures

We implement:

• Encryption of personal data in transit and at rest.

• Access control with role-based permissions.

• Regular security audits and compliance reviews.

• Incident response plans for data breaches.

• Strict internal policies on data access and handling.

• Multi-factor authentication (MFA) for sensitive systems.

2. Data Breach Response

1. Assess risk levels and determine impact.
2. Notify relevant authorities (GDPR 72-hour rule, Nigeria compliance guidelines).
3. Inform affected users with guidance on steps to protect their information.

Type	Purpose
Essential Cookies	Required for website functionality and security.
Analytical Cookies	Track site usage, user behavior, and website performance.
Marketing Cookies	Used for targeted ads, retargeting, and user profiling.
Preference Cookies	Store user settings like language preferences.

Alpha Global VOF
Bergweg 126A, 3036BH Rotterdam, Netherlands
+31 (0) 10 766 0126 | office@alpha-global.org
KVK 95018050 | BTW ID NL866973946B01