Last update: 05.05.2021
The confidentiality and safety of the information you entrust to us are of utmost importance. Please refer to this notice on the processing of personal data to find out more details about the personal data processing activities carried out by Playful Software LLC when accessing the Jobful platform available at the www.jobful.io (“Jobful Platform”).
1. THE PERSONAL DATA OPERATOR
The personal data operator is PLAYFUL SOFTWARE LLC (hereinafter referred to as “Operator” or “Jobful”), a limited liability company headquartered in Bucharest, District 5, 10 Glicinelor Street, Room 4, Block M52, Floor 4, Apartment 27, registered at the Trade Register under no. J40 / 2950/2016, Tax Registration Code 35728130.
2. DEFINED TERMS USED IN THIS NOTICE
Personal data refers to any information about an identified or identifiable natural person; an identifiable natural person is a person who can be identified, directly or indirectly, particularly by referring to an identifying element, such as a name, an identification number, location data, an online identifier, or one or more elements specific to their physical, physiological, genetic, mental, economic, cultural, or social identity.
Processing refers to any operation or set of operations that are performed on personal data or sets of personal data, with or without the use of automated means.
Target person refers to any natural person whose personal data is processed.
3. PRINCIPLES OF DATA PROCESSING
Jobful shall take all measures necessary to ensure that the processing of data is carried out in accordance with the principles set out in the data protection legislation applicable in Romania, including Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data on the free movement of such data, and repealing Directive 95/46/EC (“GDPR”). Thus, the following principles are fundamental in the processing of your personal data by Jobful:
Purpose limitations – personal data is collected for well-defined, explicit and legitimate purposes, and further processing will not be incompatible with these purposes.
Data minimization – we collect only adequate, relevant, and necessary data in relation to the processing purposes.
Data accuracy – we take the necessary steps to ensure that personal data is accurate and that inaccurate data, given the purposes for which it is processed, is deleted or rectified.
Storage limitations – personal data is stored in a manner that allows identifying the person only for the time necessary to fulfill the purposes for which the data is processed.
Ensuring integrity and confidentiality – personal data is processed in a manner that ensures its adequate safety, including protection against unauthorized or illegal processing against accidental loss, destruction, or damage, by taking appropriate technical or organizational measures.
4. PURPOSE AND LEGAL BASIS OF THE PROCESSING OF PERSONAL DATA
4.1 PROCESSED PERSONAL DATA
When you access or use the Jobful Platform, or when you register on the Jobful Platform, Jobful will process personal data about you.
The personal data we process includes the categories mentioned below.
Information provided directly
This refers to your e-mail address, name, profile picture, billing address, home address, online identifiers, test results, candidates’ skills, professional experience, studies, qualifications etc. – all this personal data is generally incorporated in the information necessary to deliver a product/service or to improve the relationship between us and our clients. The personal data collected directly is stored to ensure the possibility of performing other activities on our website.
Automatically collected information about you
This is personal data, such as online identifiers, that is automatically stored by cookies and other session tools. For example, information about your shopping cart, your IP address, your shopping history (if any) etc. is part of this category of personal data.
At the same time, for the purpose of responding to you as quickly as possible and for remembering the preferences expressed by you in previous browsing sessions on any of our pages, for making our websites as intuitive as possible and adapted to the device you are using while browsing, but also for preventing and solving any problems you may encounter while browsing, we may process your personal data such as: IP address, cookies, other online identifiers, UIDD (Unique Universal ID), browsing history, browsing searches, browsing dates and times, the device from which the browsing is performed, the type of Internet browser used for browsing, information about events occurring on your device (for example, navigation errors), information about the hardware settings of the browsing device, information about the location from which the browsing is performed.
4.2 PURPOSE OF PROCESSING YOUR PERSONAL DATA
We process your personal data for the following purposes and on the following grounds:
4.2.1 Execution of a contract to which the target person is a party (GDPR – art. 6 paragraph 1 letter b)
In order to carry out the contractual relationship between you and Jobful, we process your data for the following purposes:
- providing our services. This includes, for example, your identification, account registration, offering other products and services you have requested, promotional items that will be sent to you as a result of a request made by you in this regard, communication with you about such products and services, as well as to notify you about changes to any services;
- informing the Users regarding their Account situation, including the validation and invoicing of the Orders, solving cancellations or problems of any nature related to an Order, and/or to the Ordered Services;
- evaluation of the Users’ skills and aptitudes during tests and games;
- creating personalized CVs for Users;
- to communicate with you for sales or billing purposes.
4.2.2 Fulfillment of the legitimate interests pursued by Jobful (GDPR – art. 6 paragraph 1 letter f)
To achieve the legitimate interests pursued by Jobful, we process your data for the following purposes:
- managing business relations and improving the relationship between our Client and us;
- conducting market research, tracking and monitoring sales and User behaviour;
- for statistical purposes;
- managing and analyzing our client base (buying/visiting behaviour and history) in order to improve the quality, variety and availability of products/services offered/provided.
4.2.3 Consent of the target person (GDPR – art. 6 paragraph 1 letter a)
Based on your express consent, we process your data for the following purposes:
- the communication of results of the skills and aptitudes assessments, as well as of the CVs to the Clients – if you consent to the communication of this data to the Jobful Clients, the data will be transmitted to them, who will then process this data as operators, in compliance with their own personal data processing policies and procedures;
- sending commercial communications and/or periodic alerts, using electronic services (e-mail, SMS).
4.2.4 Fulfillment of a legal obligation incumbent on Jobful (GDPR – art. 6 paragraph 1 letter c)
We may process some of your data for the purpose of providing services on the basis of legal obligations (e.g. for tax reporting or anti-money laundering purposes) or obligations imposed to the Jobful Platform through the applicable law.
5. RECIPIENTS OF PERSONAL DATA
The personal data regarding the candidates registered on the Jobful Platform will be communicated to the Jobful Clients, only based on the express consent of the respective candidate.
We will not disclose your personal data to third parties or public institutions unless we are legally obliged to do so, the provisions of the previous paragraph of this section being applicable. We may disclose your personal data to third parties if you have given your consent or if there are other legal reasons for doing so.
6. SECURITY OF PERSONAL DATA
Jobful has implemented reasonable security policies and procedures to protect personal data against loss, misuse, alteration or unauthorized destruction.
To protect your data, we have taken technical and organizational measures, in particular against the loss, alteration or unauthorized access. The measures adopted shall be checked regularly and shall be constantly adapted to the latest applicable technical standards.
We use secure protocols for communication and data transfer (such as HTTPS), we use anonymization and pseudonymization, monitoring our systems for possible vulnerabilities and attacks.
Even if we try our best, we cannot guarantee the security of the information. We commit to notifying the competent authorities of any breaches of data protection, and we will notify you immediately if there is a threat to your rights or interests. We will do everything reasonably available to prevent the breach of security and to assist the authorities in the event that violations will occur.
Access to your personal data is limited to those who have a real need to know it. The persons who have access to the data have the obligation to maintain its confidentiality.
If you have an account on the Jobful Platform, bear in mind that you must keep your username and password secret.
7. THE RIGHTS OF THE TARGET PERSONS
In relation to the processing activities carried out by Jobful that concern you, you have the following rights:
- Withdrawal of consent. If you have been asked for express consent for particular processing, you may withdraw your consent at any time without the withdrawal affecting the lawfulness of the processing carried out on the basis of your consent before it was withdrawn.
- Access. You may request access to your personal data. If you send us such a request, we will provide you with all the information about the purposes of the processing, the categories of data processed, the categories of recipients, the data retention period, your rights to rectify, delete or restrict the data accessed, if applicable.
- Portability. If technically feasible, you may obtain a copy of the personal information we have registered about you.
- Restriction. You may request a restriction on the processing (1) if you challenge the accuracy of the data, for the period necessary to verify the correctness of the data, (2) if the processing is illegal and you choose to restrict personal information, and not to delete it, (3) if you wish for us to retain your personal data, when you need such data to defend a right in court, or (4) if you objected to the processing, for the time period in which it is verified whether the legitimate rights of the operator prevail over those of that person.
- Amendment. You may request the amendment of inaccurate data concerning you or the completion of data insofar as it is incomplete.
- Removal. You may request the removal of your data if one of the following reasons applies: (1) if your personal data is no longer necessary for the purpose of the processing; (2) if you have withdrawn your consent to the processing of data, in the case of processing based on consent and there is no other legal basis for the processing; (3) if you have objected to the processing of the data and there are no legitimate reasons prevailing with regard to the processing; (4) if the data must be deleted in order to fulfill an applicable legal obligation; (5) if the personal data has been processed illegally.
- Opposition. You may oppose the processing of your personal data for reasons related to your particular situation, within the limits and under the conditions established by law.
- Automatic processing. You have the right to object to any automatic processing of your personal data, including profiling, as well as the possibility to oppose a decision based solely on automatic data processing, which may be exercised whenever there is a result of the profiling that produces legal effects that affect or may significantly affect the target persons.
- Complaint. You have the right to submit a notification or complaint to the National Authority for the Supervision of Personal Data Processing (www.dataprotection.ro).
In order to exercise your aforementioned rights, please send us your request by e-mail to [email protected].
8. STORAGE PERIOD OF PERSONAL DATA
Personal data processed for the purposes mentioned above will only be stored for the period strictly necessary to fulfill those purposes or until the consent is withdrawn, to the extent that personal data is processed on the basis of your consent.
Your billing information, as well as other information collected about you, will be stored for as long as necessary for accounting purposes or other obligations arising out of legal terms but not more than 5 years.
At the end of the storage period we will remove/delete your personal data from Jobful systems and records, and/or we will take steps to anonymize it so that you can no longer be identified based on it.
Occasionally, this notice on the processing of personal data may be updated. The changes are displayed on our website so that you may have permanent access to updated details on the processing activities related to the use of the Jobful Platform. The current version will always be the one displayed on the website.