What is the purpose of this document?
hackajob Limited is a "data controller". This means that we are responsible for deciding how we hold and use personal information about you. You are being provided with a copy of this privacy notice because you want us to make available your details to our clients with a view to them offering you employment (“our services”). It makes you aware of how and why your personal data will be used, namely for the purposes of our services, and how long it will usually be retained for. It provides you with certain information that must be provided under the General Data Protection Regulation ((EU) 2016/679) (GDPR).
Data protection principles
We will comply with data protection law and principles, which means that your data will be:
The kind of information we hold about you
In connection with the provision of our services, we will collect, store, and use the following categories of personal information about you:
We may collect, store and use the following "special categories" of more sensitive personal information which you actively provide to us:
When you use our website, we also collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data may be derived from your personal data but is not considered personal data in law as this data does not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy notice.
How is your personal information collected?
We collect personal information about you from the following sources:
How we will use information about you
We will use the personal information we collect about you to:
It is in our legitimate interests to provide our services to you, including making available your details to appropriate clients and, generally, on our website, as we are paid by our clients for introducing suitable candidates to them.
If you fail to provide personal information
If you fail to provide information when requested, which is necessary for us to provide our services (such as evidence of qualifications or work history), we will not be able to provide our services properly or make your details available to suitable clients.
How we use particularly sensitive personal information
We will use your particularly sensitive personal information in the following ways:
We use algorithms to match you to suitable opportunities. You have the right to object to us processing your personal information in this way by deleting your account, but if you object, we will not be able to provide you with our services.
Why might you share my personal information with third parties?
We will only share your personal information with the following third parties for the purposes of providing our services:
We will require our clients to respect the security of your personal data and to treat it in accordance with the law. However, our clients will be controllers of your personal information once we have disclosed it to them, as they will be reviewing it and using it for their own purposes. They will be covered by the relevant data protection legislation as controllers of that data. We recommend you review their privacy policies for details of how they will store and use your personal information.
All our third-party service providers are required to take appropriate security measures to protect your personal information in line with their standard terms. We do not allow our third-party service providers to use your personal data for their own purposes. We only permit them to process your personal data for specified purposes and in accordance with our instructions.
Some of our third-party party service providers are based outside the European Economic Area (EEA) so their processing of your personal data will involve a transfer of data outside the EEA.
Whenever we transfer your personal data out of the EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:
Please contact us firstname.lastname@example.org if you want further information on the specific mechanism used by us when transferring your personal data out of the EEA.
We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal information to those employees, agents, contractors and other third parties who have a business need-to-know. Except for our clients (who will be controllers of your data), they will only process your personal information on our instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.
How long will you use my information for?
We will retain your personal information and securely destroy it in accordance with our data retention policy and applicable laws and regulations. Generally, this would mean that we would retain your personal data until you ask us to delete it so that the information is readily available should you wish to pursue further opportunities by means of our Services.
Your data will only be made available to clients while your profile is “live” on our system. At all other times, your data will be stored, but not used, by us, unless you have opted in to our marketing.
Your rights in connection with personal information
Under certain circumstances, by law you have the right to:
If you want to review, verify, correct or request erasure of your personal information, object to the processing of your personal data, or request that we transfer a copy of your personal information to another party, please contact email@example.com in writing.
Right to withdraw consent
When you asked us to provide our services, you provided consent to us processing your personal information for the purposes of making your personal information available to our clients and identifying suitable job opportunities for you. You have the right to withdraw your consent for processing for that purpose at any time. To withdraw your consent, please delete your account. Once we have received notification that you have withdrawn your consent, we will no longer process your application and, subject to our retention policy, we will dispose of your personal data securely.
If you have any questions about this privacy notice or how we handle your personal information, please contact firstname.lastname@example.org. You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.
We strive to provide you with choices regarding certain personal data uses, particularly around marketing and advertising. We have established the following personal data control mechanisms:
Promotional offers from us
We may use your Identity, Contact, Technical, Usage and Profile Data to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which products, services and offers may be relevant for you.
ou will receive marketing communications from us if you have requested information from us or we have provided services to you in the past, and, in each case, you have not opted out of receiving that marketing.
We will get your express opt-in consent before we share your personal data with any third party for marketing purposes.
You can ask us or third parties to stop sending you marketing messages at any time by logging into the website and checking or unchecking relevant boxes to adjust your marketing preferences or by following the opt-out links on any marketing message sent to you or by emailing us email@example.com at any time.