Privacy Policy

The controller responsible for the processing described in this Privacy Policy is:

This policy applies to personal data processed through the hatamoto.eu website, including information submitted through the contact form or sent directly to our published email address.

The website is intended primarily for companies and professionals interested in executive and specialist search services. It does not provide a candidate registration service and does not include a CV upload function.

When you submit the contact form, Hatamoto may process the following information:

• Your name.
• Your company or organisation.
• Your work email address.
• The role for which you are hiring.
• The location of the role.
• The intended employment or search type.
• Any additional information that you voluntarily include in the message field.

Technical information

The website or hosting environment may automatically record limited technical information required for secure operation, troubleshooting and abuse prevention. This may include an IP address, browser or device information, the date and time of the request, the requested page and security-related log data.

We process personal data only for defined and relevant purposes. The principal processing activities are described below.

Information submitted through the form is not used for newsletters or unrelated direct marketing unless a separate lawful basis and appropriate notice are provided.

Contact-form enquiries and related correspondence are normally retained for 12 months following the last meaningful communication. This period allows Hatamoto to respond to follow-up questions, understand the history of the enquiry and document the business discussion.

If the enquiry results in a contractual relationship, relevant data may be retained for longer under the applicable contractual, accounting, tax and legal-claims retention requirements.

Technical logs may be retained for a different, usually shorter, period determined by security needs, system configuration and the hosting provider’s operational rules.

Data will be deleted or anonymised when it is no longer necessary for the purpose for which it was collected, unless continued retention is required by law or justified by a legal claim.

Personal data is accessible only to Hatamoto personnel and service providers who need it for the purposes described in this policy. We do not sell personal data to advertisers or data brokers.

Hosting and technical infrastructure

We may also disclose personal data where required by law, a court, a competent authority or where disclosure is necessary to establish, exercise or defend legal claims.

The current contact-form workflow does not intentionally rely on analytics or advertising providers that require personal data to be transferred outside the European Economic Area.

If a future service arrangement involves a transfer of personal data outside the European Economic Area, Hatamoto will ensure that the transfer is based on an adequacy decision, appropriate contractual safeguards or another lawful transfer mechanism recognised by the GDPR.

At the date of this policy, Hatamoto does not use Google Analytics, Meta Pixel, Hotjar or similar analytics and advertising tracking tools on this website.

Strictly necessary technical cookies or local storage may still be used where required for website functionality, security, session management or form operation. These technologies are not used to build advertising profiles.

If non-essential analytics or marketing technologies are introduced later, this policy will be updated and, where legally required, the website will request consent before those technologies are activated.

Hatamoto applies reasonable technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, alteration, disclosure or destruction.

• Access is limited to persons who need the data.
• The website uses encrypted HTTPS communication where supported.
• Hosting and technical services are provided by professional service providers.
• Personal data is retained only for defined and limited periods.

No internet transmission or storage system can be guaranteed to be completely secure. If you believe information has been submitted or accessed improperly, contact us without delay.

Subject to the conditions and limitations of the GDPR, you may exercise the following rights:

• The right to obtain information about whether and how your personal data is processed.
• The right to request access to your personal data and receive a copy of it.
• The right to request correction of inaccurate or incomplete personal data.
• The right to request deletion of personal data where the legal conditions are met.
• The right to request restriction of processing in the situations provided by the GDPR.
• The right to object to processing based on Hatamoto’s legitimate interests.
• The right to data portability where processing is based on a contract or consent and is carried out by automated means.

Requests may be submitted to info@hatamoto.eu. We may ask for reasonable information to confirm your identity before responding.

We encourage you to contact Hatamoto first if you have a concern about the way your personal data has been handled. You also have the right to lodge a complaint with the competent data protection authority.

Hatamoto may update this Privacy Policy when its services, technology, processing activities or applicable legal requirements change. The current version and its last-updated date will be published on this page.

For questions, requests or concerns relating to personal data, contact: