Privacy Policy

What we collect, why we collect it, how long we keep it, and how confidentiality works for sessions and assessment results.

Who we are

Bridge Career Consulting is a career consulting practice based in Athens, Greece, run by Manousos Vasilakis (Certified Career Consultant) and George Mantzanas (Career Coach). For the purposes of the General Data Protection Regulation (EU) 2016/679 (GDPR), Bridge Career Consulting is the data controller for personal data processed through this website and in the course of our consulting work.

You can reach us about anything in this policy at manousosvasilakisdesign@gmail.com.

What data we collect

  • Contact data you send us: name, email address, phone number and anything you write in a message.
  • Client data: professional history, CV, education, and the goals and circumstances you describe during sessions.
  • Assessment data: your answers to career and personality instruments (for example RIASEC, Big Five/OCEAN or Enneagram questionnaires) and the results and notes produced from them.
  • Technical data: IP address, browser type, device type, referring page and timestamps, recorded automatically in server logs.
  • Analytics data: pages viewed, approximate location at city level and interaction events, collected only if you accept analytics cookies.

Why we process it, and on what legal basis

  • To answer enquiries and arrange an intake call: performance of a contract or steps taken at your request (Art. 6(1)(b) GDPR).
  • To deliver consulting and coaching sessions, including assessment and interpretation: performance of a contract (Art. 6(1)(b)).
  • To administer assessment instruments where results may reveal sensitive detail: your explicit consent (Art. 9(2)(a)) where applicable, in addition to the contract basis.
  • To keep the site secure and functioning: our legitimate interest in operating a safe website (Art. 6(1)(f)).
  • To understand how the site is used through analytics cookies: your consent (Art. 6(1)(a)), which you can withdraw at any time.
  • To meet accounting and tax obligations: legal obligation (Art. 6(1)(c)).

Confidentiality of sessions and assessments

Everything you tell us in a session, and every assessment result, is treated as confidential. We do not disclose your participation, your results or your circumstances to an employer, a family member or any third party without your written instruction.

Where an engagement is paid for by an employer or institution, we agree in advance and in writing what, if anything, is reported back. By default the sponsor receives only confirmation that sessions took place.

We may use fully anonymised, non-identifiable observations to improve our methods. Nothing that could identify you is used in marketing, case studies or testimonials unless you give separate written consent.

Cookies and similar technologies

Essential cookies and local storage keep the site working and remember your cookie choice. They are strictly necessary, so no consent is required for them.

Analytics cookies are only set after you actively accept them in the cookie banner. If you choose essential only, no analytics script is loaded and no analytics cookies are written.

You can change your decision at any time using the cookie settings link in the footer, or by clearing this site's data in your browser.

Who we share data with

We do not sell personal data and we do not use it for advertising profiling. We share it only with service providers who process it on our behalf under a data processing agreement compliant with Art. 28 GDPR:

  • Website hosting and content delivery providers.
  • Email, calendar and video-call providers used to arrange and hold sessions.
  • Providers of the assessment platforms used to administer questionnaires.
  • Analytics providers, only where you have consented.
  • Accountants, and authorities where we are legally required to disclose data.

International transfers

Some providers may process data outside the European Economic Area. Where that happens, transfers are covered by an adequacy decision of the European Commission or by the European Commission's Standard Contractual Clauses together with supplementary measures where needed. You can ask us for a copy of the safeguards in place.

How long we keep it

  • Enquiries that do not become engagements: up to 12 months after the last contact.
  • Client records, session notes and assessment results: for the duration of the engagement and up to 5 years afterwards, so we can pick up your case if you return.
  • Invoices and accounting records: as long as Greek tax law requires, currently up to 10 years.
  • Server logs: up to 12 months. Analytics data: up to 14 months.

Your rights

Under the GDPR you have the right to access your data, to have it corrected or erased, to restrict or object to processing, to receive it in a portable format, and to withdraw consent at any time without affecting processing carried out before the withdrawal. You may request a copy of your assessment results at any time.

To exercise any of these rights, email manousosvasilakisdesign@gmail.com. We answer within one month. If you believe we handle your data unlawfully, you may lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr) or with the supervisory authority of your country of residence.

Automated decisions and minors

We do not make automated decisions about you. Assessment scores are always interpreted by a person and discussed with you before any conclusion is drawn. Clients under 18 are accepted only with the consent of a parent or guardian, and this site is not intended for children under 16.

Security and changes to this policy

We use encrypted connections (HTTPS), access controls and reputable providers to protect personal data, and we keep session notes restricted to the two consultants named above. No method of transmission is perfectly secure, but we take reasonable technical and organisational measures as required by Art. 32 GDPR.

If we change this policy we will update the date on this page, and for material changes we will make the update visible on the site.