Legal

Privacy Policy

Last updated: 11 November 2026

1. Who we are

Heilsa Recruitment is a trading name of Vassilis Georgiou, a self-employed recruiter with an organised activity in Portugal. In this policy, “we”, “us” and “Heilsa” mean Vassilis Georgiou trading as Heilsa Recruitment. We are the controller of the personal data described below, in accordance with the General Data Protection Regulation (GDPR) and applicable Portuguese law.

You can contact us at info@heilsarecruitment.com.

2. Whose data we handle

• Candidates: people who register with us, apply for a role, or whom we contact about an opportunity.
• Clients and contacts: people at companies that hire, or may hire, through us.
• Website visitors: people who use heilsarecruitment.pt, fill in a form or book a call.

3. What we collect

Candidates. Your name and contact details, CV, work history, current position and responsibilities, achievements, current salary and salary expectations, notice period, preferred roles and countries, references, and notes from our conversations. When we search for candidates we also use professional information that is publicly available, for example on LinkedIn or job boards.

Clients. Your name, job title, company, work email and phone number, and details of the roles you want to fill.

Website visitors. What you type into our forms (for example name, email, phone, company and message), your booking details if you use our Calendly link and, only if you accept analytics cookies, data about how you use the site: pages viewed, device type, approximate location and how you found us.

4. Why we use your data

• To find you suitable roles and, with your agreement, introduce you to employers. Legal basis: our legitimate interests in running a recruitment business and, where needed, your consent.
• To find and work with clients. Legal basis: legitimate interests and, once we agree terms, performing our contract.
• To reply to enquiries. Legal basis: legitimate interests.
• To measure and improve our website. Legal basis: your consent (analytics cookies).
• To meet legal obligations, such as tax and accounting rules. Legal basis: legal obligation.

Where we rely on legitimate interests, you can object at any time (see section 9).

5. Who we share it with

We only send a candidate’s profile to a client for a specific role after speaking with the candidate or getting their agreement. We do not sell personal data. The service providers below process data on our behalf:

• GiigHire, our applicant tracking system and careers page.
• Google, for email, documents and Google Analytics.
• Calendly, for booking calls.
• Webflow, for website hosting and forms.
• Software tools we use to organise and anonymise CVs.

We may also disclose data where the law requires it.

6. Transfers outside the EU and EEA

Some of these providers are based in, or can access data from, the United States or other countries outside the EU and EEA. Where that happens we rely on safeguards such as the European Commission’s standard contractual clauses or the EU–US Data Privacy Framework.

7. How long we keep your data

• Candidate profiles: up to 24 months after our last contact. After that we delete them or ask whether you want to stay on our database.
• Client contacts: while we have a working relationship, and afterwards for as long as the law requires us to keep business records.
• Website enquiries: up to 24 months.

You can ask us to delete your data sooner at any time.

8. Cookies

We use one analytics service, Google Analytics, and it only runs if you click Accept on our cookie banner. We do not use advertising cookies. You can change your choice at any time with the “Cookie settings” link in the footer.

Your cookie choice itself is saved in your browser’s local storage, not as a cookie, so we can remember it on your next visit.

9. Your rights

You have the right to:

• ask for a copy of the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted;
• restrict how we use your data;
• object to our use of your data where we rely on legitimate interests;
• receive your data in a portable format; and
• withdraw your consent at any time, without affecting what we did before you withdrew it.

To use any of these rights, email info@heilsarecruitment.com. We will reply within one month.

10. Complaints

If you are unhappy with how we handle your data, you can complain to the data protection authority in Portugal, the Comissão Nacional de Proteção de Dados (cnpd.pt), or to the authority in your own country.

11. Security

We take reasonable steps to protect your data from loss, misuse and unauthorised access. No method of storing or sending data is completely secure, so we cannot guarantee absolute security.

12. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed.