Privacy Policy for Bambuser Recruitment and Live Shopping Host Community
Date of publication: 30 September 2026
We at Bambuser AB manage our employer recruitment process through our career site (the “Career Site”), and by using a related applicant tracking system. We also operate the Bambuser Live Shopping Host Community (the “Host Community”) through our host sign-up page and related systems (the “Host Community Site”). The Host Community enables individuals to create a professional profile and be considered for potential collaborations with brands and Bambuser customers.
In this Privacy Policy, we explain how we process your personal data if:
You visit our Career Site or Host Community Site (you being a “Visitor”).
You connect with us via our Career Site, to create a profile with us and receive information about current or future vacancies with us (you being a “Connecting Candidate”).
You apply for a position with us, via our Career Site or a third-party service (you being an “Applying Candidate”).
We collect information about you from other parties, sites and services, since we believe your profile is of interest for our current or future vacancies (you being a “Sourced Candidate”).
We receive information about you from our employees or partners, since they believe your profile is of interest for our current or future vacancies (you being a “Referred Candidate”).
We receive information about you from a Candidate, who lists you as their reference (you being a “Reference”).
You submit your interest in joining, or participate in, the Host Community (you being a “Host Community Member”).
This Privacy Policy also describes what rights you have when we process your personal data, and how you can exercise these rights.
When we use the term “Candidate” in this Privacy Policy, we are referring to each of Connecting Candidates, Applying Candidates, Sourced Candidates and Referred Candidates, unless stated otherwise.
Bambuser AB (publ), reg. no. 556731-3126, is the data controller responsible for the processing of personal data described in this Privacy Policy.
1. About processing of personal data
Personal data is all information that can be directly or indirectly linked to a living, physical person. Examples of personal data are name, email address, telephone number and IP address. Processing of personal data is any automated use of personal data, such as collecting, creating, analyzing, sharing and deleting personal data.
There are laws and regulations on how companies may process personal data, so-called data protection laws. Different data protection laws apply to different types of use of personal data and in different parts of the world. An example of a data protection law relevant to our use of your personal data, as described in this Privacy Policy, is the EU General Data Protection Regulation (2016/679, “GDPR”).
Most obligations under the GDPR apply to the so-called data controller. A data controller is the entity that decides for which purposes personal data will be processed and how the processing will be carried out. The data controller can use a so-called data processor. A data processor is only allowed to process personal data as instructed by the data controller and may not use the personal data for its own purposes.
We are the data controller when we process your personal data as described in this Privacy Policy.
2. What personal data do we process?
All individuals
Device information - If you visit our Career Site or Host Community Site, we will collect information about your device, such as IP address, browser type and version, session behaviour, traffic source, screen resolution, preferred language, geographic location, operating system and device settings/usage.
Technical and statistical data - If you visit our Career Site or Host Community Site, we will collect technical and statistical data about your use of the site, such as information about which URLs you visit and your activity on the site.
Communications data - We will collect and store your communication with us, including the information you provide in the communication. This may include the content of emails, video recordings, messages on social media, information you add to your account or profile with us, surveys, etc.
Contact details - Such as your name, email address, telephone number and physical address.
Candidates
Data from interviews, assessments and other information from the recruitment process - Such as notes from interviews with you, assessments and tests made, and salary requirements.
Information in your application - Such as your CV, cover letter, work samples, references, letters of recommendation and education.
Information in your public profile - Meaning information we collect about you from public sources related to your professional experience, such as LinkedIn or the website of your current employer.
Information provided by references - Meaning information we receive from our employees or partners who refer you to us, or by persons you have listed as your references.
Information in a background check - This normally includes your educational- social media- and job history and criminal records history.
Host Community Members
Host Community profile information - Information you provide when submitting your interest in joining or participating in the Host Community, such as your professional experience, areas of expertise, relevant product or industry categories, languages, location, availability and information about your experience as a live shopping host, livestreamer or product expert.
Professional content and profiles - Such as links to social media or professional profiles, work samples, videos or other content you provide to demonstrate your experience and suitability for potential collaborations.
Host assessment information - Information we create based on your profile for the purpose of assessing and matching your profile with potential opportunities, such as relevant categories, languages, formats and track record.
3. Where do we receive your personal data from?
All individuals
From the Career Site or Host Community Site. If you visit our Career Site or Host Community Site, we collect technical and statistical information about how you use the relevant site, and information from your device.
Directly from you. Most of the information we process about you is received directly from you, for example when you apply for a position with us, connect with us, or submit your interest in or otherwise participate in the Host Community. You can always choose not to provide us with certain information. However, some personal data is necessary in order for us to process your application, administer your participation in the Host Community, or provide you with the information you request from us.
References
Candidates
From public sources. We may collect personal data about you from public sources, such as LinkedIn or the website of your current employer.
From our references. We may receive information about you from our employees or partners, such as recruitment service providers, when they believe your profile is of interest for our current or future vacancies.
From your references. If you provide us with references, we may collect information about you from them.
Data we create ourselves or in cooperation with you. Information about your application and profile is usually created by us, or by us in cooperation with you, during the recruitment process. This may for example include notes from interviews with you, assessments and tests made.
Host Community Members
Directly from you. Most of the information relating to your Host Community profile is provided by you when you submit your interest in joining or otherwise participate in the Host Community.
From professional or social media profiles and content that you provide or link to as part of your Host Community profile.
Data we create ourselves. We may create information based on our review of your profile for the purpose of assessing your suitability for the Host Community and matching your profile with potential opportunities.
4. For what purposes do we process your personal data?
General purposes and visits
We process personal data where necessary to protect and enforce our rights, interests and the interests of others, for example in connection with legal claims or disputes. Depending on the circumstances, any of the categories of personal data described in this Privacy Policy may be used for this purpose.
We may share your personal data with the recipients described in Section 5 where necessary for the purposes described in this Privacy Policy.
When you visit or use the Career Site or Host Community Site, we may collect information about your use of the relevant site through cookies and similar technologies, as further described in our Cookie Policy. We also process device information and technical and statistical data to operate, maintain, secure, develop and test the sites, analyse how the sites and their content are used and perform, compile statistics, and improve their functionality and operational performance.
Recruitment
We process personal data to provide Connecting Candidates with updates about vacancies with us; review profiles and applications sent to us and communicate with Candidates about their applications and profiles; collect and evaluate professional profiles on our own initiative; contact Candidates about specific current or future vacancies; conduct and, where applicable and subject to the appropriate legal basis, record interviews; invite Candidates to participate in surveys; and contact References to request and evaluate information about a Candidate.
Depending on the activity, we may use contact details, communications data, information in your application, information in your public profile, information provided by references, and data from interviews, assessments and other parts of the recruitment process.
Host Community
When you submit your interest in joining the Host Community, we process the information you provide for the purpose of reviewing your submission and administering your participation in the Host Community. If you are accepted into and participate in the Host Community, we will continue to process your personal data to operate and administer the Host Community and your membership in it.
This includes reviewing and evaluating your profile and suitability for the Host Community and potential collaborations, creating, maintaining and managing your Host Community profile, communicating with you about your participation in the Host Community and potential opportunities, and identifying opportunities that may be relevant to you.
As part of operating the Host Community, we may use the information in your profile to match and recommend you to brands and Bambuser customers looking for live shopping hosts, livestreamers, product experts or similar talent. Where we identify a potential opportunity or collaboration that may be relevant to you, we may share relevant information from your profile with the relevant brand or Bambuser customer so that they can evaluate whether they are interested in collaborating with you and, where relevant, contact you regarding such collaboration.
For these purposes, we may process your contact details, communications data, Host Community profile information, professional content and profiles, and Host assessment information.
5. Whom do we share your personal data with?
Our service providers. We share your personal data with suppliers that provide services and functionality used in our employer recruitment process or in connection with the operation of the Host Community and Host Community Site. This includes recruitment service providers and the supplier of our Career Site and related applicant tracking system, as well as suppliers of platforms and related systems used to manage Host Community profiles. These suppliers process personal data on our behalf in accordance with our instructions.
Our group companies. We may share your personal data with our group companies where they provide services or functionality supporting our employer recruitment process or the Host Community, such as access to particular systems and software.
Brands and Bambuser customers. If you participate in the Host Community, we may share relevant information from your profile with brands and Bambuser customers that we believe may be interested in collaborating with you. These recipients may use the information to evaluate whether they are interested in a potential collaboration and, where relevant, contact you regarding such collaboration. Where a brand or Bambuser customer receives and processes your personal data for its own purposes, it will normally act as an independent data controller for that processing.
Companies providing cookies on the Career Site or Host Community Site. If you consent to it, cookies may be set by companies other than us, which will use the data collected by these cookies in accordance with their own privacy policies. You can find information about which cookies this applies to in our Cookie Policy.
Authorities and other public actors. We will share your personal data with authorities and other public actors when we have a legal obligation to do so.
Parties involved in legal proceedings. If needed to protect or defend our rights, we may share your personal data with public authorities or other parties involved in a potential or existing legal proceeding.
Mergers and acquisitions etc. In connection with a potential merger, sale of company assets, financing, or acquisition of all or part of our business by another company, we may share your personal data with other parties involved in the process.
6. On what legal bases do we process your personal data?
To be able to process your personal data, we need to have a so-called legal basis. A legal basis is a reason for processing personal data that is justified under the GDPR.
When we process your personal data in connection with our employer recruitment activities for the purposes described in this Privacy Policy, the legal basis we normally rely on is that the processing is necessary for our legitimate interest in being able to recruit talent with the relevant competence for us. We have concluded that we have a legitimate interest in performing the personal data processing for this purpose, that the processing is necessary to achieve that purpose, and that our interest outweighs your right not to have your data processed for this purpose.
When we process personal data about Host Community Members, we normally rely on our legitimate interest in operating and administering the Host Community, assessing the professional profiles of individuals who have chosen to submit their interest in or participate in the Host Community, and identifying and connecting suitable hosts with brands and Bambuser customers seeking live shopping hosts, livestreamers, product experts or similar talent. This includes sharing relevant professional profile information with brands and Bambuser customers for the purpose of identifying potential collaborations.
In assessing this legitimate interest, we take into account that participation in the Host Community is voluntary and that one of its purposes is to provide members with opportunities to be matched and introduced to brands and Bambuser customers looking for relevant talent.
You can contact us for more information about how these assessments were made. See Sections 9 and 10 below for our contact information.
There may be specific circumstances when processing is only performed if and when you provide your consent. This is, for example, the case if we propose to record an interview with you or for cookies that are not deemed as “necessary cookies” (read more about this in the Cookie Policy). Please see Section 9 below for more information about your right to withdraw your consent.
7. When do we transfer your personal data outside of the EU/EEA, and how do we protect it then?
We always strive to process your personal data within the EU/EEA area.
However, some of our service providers process your personal data outside of the EU/EEA. We also use suppliers whose parent company, or whose subcontractor’s parent company, is based outside the EU/EEA. In these cases, we take into account the risk that personal data may be disclosed to countries outside the EU/EEA, for example because of an authority request.
Where another recipient of your personal data, as described in Section 5 above, is based outside the EU/EEA, this will also mean that your personal data is transferred outside the EU/EEA. For Host Community Members, this may include a brand or Bambuser customer with whom we share information from your Host Community profile.
When we, or one of our suppliers, transfer your personal data outside the EU/EEA, we will ensure that a safeguard recognized by the GDPR is used to enable the transfer. We use safeguards such as:
A decision by the European Commission that the country outside the EU/EEA to which personal data is transferred has an adequate level of protection. Where applicable, this includes the European Commission’s adequacy decisions, including the EU-US Data Privacy Framework and the adequacy decision for the UK.
Entering into the European Commission’s Standard Contractual Clauses with the recipient of personal data outside the EU/EEA.
When your personal data is transferred outside the EU/EEA, we also implement appropriate technical and organisational safeguards where required. The protective measures used depend on the circumstances of the particular transfer.
If you want more information about the cases in which your personal data is transferred outside the EU/EEA, you can contact us using the contact details in Sections 9 and 10 below.
8. For how long do we keep your personal data?
All individuals
If we process your personal data for the purpose of protecting and enforcing our rights, we will keep your personal data until the relevant legal issue has been fully and finally resolved.
Visitors
We keep your personal data for one (1) year for security purposes. The retention periods for cookies are set out in our Cookie Policy. We keep personal data used to analyse the performance of the Career Site and Host Community Site for as long as necessary for the relevant purpose.
Candidates
We retain your personal data for as long as necessary to assess your suitability for relevant job opportunities. If you are a Connecting Candidate or are not selected during an initial recruitment process, we may continue to retain your personal data to consider and potentially contact you regarding future job opportunities.
As a general rule, your personal data will be deleted after twelve (12) consecutive months of inactivity, unless you remain actively engaged with us (eg. sending messages or posting comments) or we have a legitimate and documented interest in retaining your personal data for a specific potential future job opportunity. In such cases, your personal data will only be retained for as long as necessary for that purpose. Documentation regarding background checks will not be stored after verification.
If you are hired, relevant personal data will be retained during your employment for other purposes, about which you will be separately informed.
Host Community Members
We retain your personal data for as long as you remain actively engaged with the Host Community or your profile remains relevant for potential future opportunities.
As a general rule, your personal data will be deleted after twelve (12) consecutive months of inactivity, unless you remain actively engaged with us or we have a legitimate and documented interest in retaining your personal data for a specific potential future opportunity. Inactivity is determined based on your last recorded interaction with us, such as sending messages or posting comments. If you request to leave the Host Community, we will delete your personal data unless we are required or otherwise legally entitled to retain certain information for another lawful purpose.
References
We keep your personal data for as long as we keep the personal data of the Candidate for whom you acted as a reference.
9. What rights do you have, and how can you exercise them?
In this section, you will find information about the rights you have when we process your personal data. As described below, some of the rights only come into play when we process your personal data under a particular legal basis.
If you want to exercise any of the rights listed here, we suggest that you:
Log in to your account with us, where you can use the settings in the account to exercise your rights; or
Contact us directly at dpo@bambuser.com.
Right to be informed
You have the right to be informed about how we process your personal data. You also have the right to be informed if we plan to process your personal data for a purpose other than that for which it was originally collected.
Right to access your personal data
You have the right to know if we process personal data about you and to receive a copy of the data we process about you. In connection with receiving the copy, you will also receive information about how we process your personal data.
Right to data portability
Where applicable, you can request personal data relating to you that you provided to us and that we process for the performance of a contract with you or based on your consent, in a structured, commonly used and machine-readable format. Where technically feasible, you may also have the right to request that we transfer this data directly to another recipient.
Right to have your personal data deleted (“right to be forgotten”)
In some cases, you have the right to have us delete personal data about you. This may, for example, be the case if it is no longer necessary for us to process the data for the purpose for which we collected it, if you withdraw your consent, or if you have objected to processing and there are no overriding legitimate grounds for the processing.
Right to object to our processing of your personal data
You have the right to object to processing of your personal data which is based on our legitimate interest, by reference to your particular situation.
Right to restrict processing
In certain circumstances, you have the right to request that we restrict the processing of your personal data. This may apply, for example, if you believe the personal data is inaccurate, the processing is unlawful, we no longer need the data for the relevant purpose, or while we assess an objection you have made.
When processing is restricted, we will, with the exception of storage, only process the data with your consent or for the establishment, exercise or defence of legal claims, to protect the rights of another natural or legal person, or for reasons relating to an important public interest.
Right to rectification
You have the right to request that we rectify inaccurate information and complete information about you that you consider incomplete.
Right to withdraw your consent
When we process your personal data based on your consent, you have the right to withdraw that consent at any time. If you do so, we will stop processing your data for the purposes for which you have withdrawn your consent. Withdrawal does not affect the lawfulness of processing based on your consent before it was withdrawn.
Right to raise a complaint
If you have complaints about our processing of your personal data, you can lodge a complaint with the Swedish Authority for Privacy Protection (IMY). If you are based elsewhere in the EU/EEA, you may also lodge a complaint with your local data protection authority. If you are based in the UK, you may lodge a complaint with the Information Commissioner’s Office.
10. Where can you turn with comments or questions?
If you want to exercise your rights, or if you have any questions, comments or concerns about how we handle your personal data, you may contact us at dpo@bambuser.com.
