GDPR Compliance

Last updated: July 2026

Summit Career & Growth is committed to full compliance with the EU General Data Protection Regulation (GDPR) for all candidates, employers and partners located in the European Economic Area.

Your GDPR rights

  • Right to access — request a copy of the personal data we hold about you.
  • Right to rectification — correct inaccurate or incomplete data.
  • Right to erasure — request deletion of your data ("right to be forgotten").
  • Right to restrict processing — limit how we use your data.
  • Right to data portability — receive your data in a machine-readable format.
  • Right to object — object to processing based on legitimate interests.
  • Right to withdraw consent — where processing is based on consent.

Data Controller

Summit Career & Growth acts as the Data Controller for candidate and partner data. For employer engagements, we act as a Data Processor for candidate data shared during a specific search.

Data transfers

Some of our sub-processors (hosting, email delivery) may process data outside the EEA. We rely on Standard Contractual Clauses and adequacy decisions to ensure equivalent protection.

Data Breach notification

In the unlikely event of a personal data breach that risks your rights and freedoms, we will notify the relevant supervisory authority and affected individuals within 72 hours.

Exercise your rights

Send a written request to recruitment@summitcareergrowth.com. We respond within 30 days.