ITCharm

Privacy policy

Website Privacy Policy ITCharm (web)

This Policy is intended to inform users of the site available at ITCharm (web) (hereinafter referred to as the Website) about the purposes and legal grounds for processing personal data on the Site, as well as how they are carried out. used and about the rights of Users in connection with these permissions. The Personal Data Administrator (hereinafter referred to as the Administrator) protects the privacy of Users and ensures the security of the personal data provided by them. The Administrator adheres to the principles of personal data processing and provides technical and organizational measures to ensure the security and legality of data processing. Users' personal data is processed each time on the basis of applicable legal provisions, in particular, in accordance with the Telecommunications Act and the Regulation of the European Parliament and of the Council on the Protection of individuals with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46/EC (GDPR). Personal data may be processed in Users' cookies under the conditions set out in the Cookie Policy.


 

Personal data administrator:

The administrator of the Website and your personal data is the company Private limited company «Personalinvest OÜ», registration number 16106367, registered address Katusepapi tn 6 11412 Lasnamäe linnaosa, Tallinn Harju maakond Estonia. The administrator can be contacted by e-mail: elena@personalinvest.org,  mradashkovets@personalinvest.org.


 

Purposes and legal grounds for processing personal data:

  • Communication through the Site, including responses to User requests, comments, or complaints:
    Personal data is processed for the purposes of the legitimate interests of the Administrator (Article 6(1)(f) GDPR). The legitimate interest of the Administrator is to communicate with the person requesting an answer from the Administrator, in particular User service, answers to questions, requests, comments or complaints from Users. Communication can occur for many reasons that are difficult to classify. The provision of personal data is voluntary, but may be necessary to receive an Administrator's response;

  • Communication using the contact information provided on the Website: 
    Personal data is processed for the purposes of the legitimate interests of the Administrator (Article 6(1)(f) GDPR). The legitimate interest of the Administrator is to communicate with the person requesting an answer from the Administrator, in particular User service, answers to questions, requests, comments or complaints from Users. Communication can occur for many reasons that are difficult to classify. The provision of personal data is voluntary, but may be necessary to receive an Administrator's response;

  • Creating an account and authenticating a User on the Site: 
    Personal data is processed for the purposes necessary to fulfill the contract for the provision of services by the Website (Article 6(1)(b) GDPR). The Administrator processes the personal data provided by the User when registering on the Site (e-mail address, password, first name, last name, phone number, residential address, IP address, information specified in the resume — education, professional experience, experience, qualifications). , knowledge of foreign languages, the type of job you are looking for, other information indicated in the resume). In case of creation of an unconfirmed account, the Administrator processes the personal data of Users (e-mail address) in order to send information about the need to confirm the creation of an account;

  • Site functionality:
    Personal data is processed for the purposes necessary to fulfill the contract for the provision of services by the Website (Article 6(1)(b) GDPR). The Administrator processes personal data in order to provide Users with services related to certain functionality of the Site, including: Users submit applications for job offers, recommend job offers, information about the status of the application, saved job offers, the history of requests for job offers, saved searches, answers to questions from a potential employer. The Administrator processes the personal data provided by the User in the registration form, in messages exchanged by a potential employer, data on the User's activity on the Site (data related to job offers that the User is looking for, job offers that the User previously applied for), login status, account updates, user's IP address, active session data, device, operating system, web browser, user location). The provision of data is necessary for the User to use certain functions of the Site. We would like to inform you that failure to provide specific data may cause difficulties in using certain functions of the Site. The provision of data that is not marked as mandatory is voluntary for the User;

  • Personalization of the Site pages viewed by the User and the activity on the Site:
    Personal data is processed for the purposes necessary to fulfill the contract for the provision of services by the Website (Article 6(1)(b) GDPR). The Administrator processes Users' personal data in order to recommend job offers on the Site, search for job offers on the Site and other services. The Administrator processes personal data about User activity on the Site, regarding job offers viewed by the User, data about the User's open session, data about the device, operating system, web browser, location, User identification number;

  • Statistics on the use of individual Site functions: 
    Personal data is processed for the purposes of the legitimate interests of the Administrator (Article 6(1)(f) GDPR). The legitimate interest of the Administrator is to facilitate the use of the services provided by the Administrator in electronic form and to improve the functioning of the Website. The Administrator processes personal data related to User activity on the Site, regarding visited pages and subpages of the Site, User search history, submitted job offers, IP address, location, identification number, web browser, device and operating system of the User;

  • Investigation and protection against claims, fraud prevention, statistics and analysis, ensuring the security of the ICT environment, the use of internal control systems:
    Personal data is processed for the legitimate interests of the Administrator (Article 6(1)(f) GDPR). The legally justified interest of the Administrator is the possibility of performing the above actions;

  • Processing of personal data in cookies:
    The processing of personal data is carried out on the basis of voluntary consent expressed by the User (art. 6(1)(a) GDPR). Personal data in cookies may sometimes be processed in connection with the use of Website functions. The administrator processes personal data only if the use of cookies of this type involves the processing of personal data. In most cases, the use of cookies does not require the processing of personal data. The rules for using cookies are described in detail below;

  • Social network:
    Personal data is processed for the purposes of the legitimate interests of the Administrator (Article 6(1)(f) GDPR). The legitimate interest of the Administrator is the creation of a brand, an online community, the marketing of products and services, the organization of contests and advertising campaigns. The administrator processes personal data received when visiting profiles, including fan pages on social networks, concerning the first name, last name, user name, profile photo (avatar), information contained in posted publications and comments;

  • Marketing, including sending Users information about the products, services and promotions of the Site or its partners:
    Personal data is processed for the purposes of the legitimate interests of the Administrator (Article 6(1)(f) GDPR). The legally justified interest of the Administrator is the implementation of marketing activities, which may consist in displaying marketing content adapted (or not adapted) to the User's preferences (including contextual advertising), sending information about offers, products, services and Website promotion, which may contain commercial information or carry out other activities related to direct marketing of goods and services (sending commercial information by electronic means and telemarketing activities).


 

Recipients of personal data:

Personal data can be transferred to the following categories of recipients:

  • Employers or Exhibitors:
    The Website may disclose personal data of Users to Employers or Exhibitors using the Website. Employers or Exhibitors to whom the Site provides personal data of Users independently determine the purposes and methods of processing personal data;
  • Authorized employees and employees of the website:
    The Website may transfer personal data of Users to authorized employees and employees of the Website and related organizations in order to properly fulfill the contract and provide services. Authorized employees and employees, depending on contractual terms and circumstances, obey the instructions of the Site regarding the purposes and methods of processing personal data or independently determine the purposes and methods of processing personal data;

  • Service providers:
    The Website may transfer Users' personal data to service providers used by the Website to operate the Website. Service providers, depending on the contractual terms and circumstances, obey the instructions of the Site regarding the purposes and methods of processing personal data or independently determine the purposes and methods of processing personal data;

  • Government agencies:
    If the Site is requested by authorized government agencies, the Site may disclose the User's personal data to such authorities, in particular: organizational units of the Prosecutor's Office, the Police, the Chairman of the Personal Data Service, the Chairman of the Competition and Consumer Protection Department or the President of the Electronic Communications Department.


 

Automated decision making/profiling:

Personal data of Users can be processed in an automated way, which involves automatic analysis or prediction of behavior in connection with the use of the functionality of the Site. Personal data of users can also be processed in the form of profiling. Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects concerning an individual, for example, to analyze or predict aspects related to preferences regarding job offers. The consequence of these methods of processing personal data may have a significant impact on the User's situation in connection with the implementation of the marketing goals of the Site. In particular, profiling may lead to informing Users about the products, services and promotions of the Website or its partners. The User may object at any time to the processing of personal data for direct marketing purposes, including profiling, to the extent that the processing is related to such direct marketing.


 

User rights, control and selection:

The Website's responsibility is to comply with the requirements of the general regulation on the protection of personal data in force in the European Union — GDPR, as well as to implement technical and organizational measures that will ensure the protection of personal data at the appropriate level.

Thus, the Site applies additional protection mechanisms and controls transparency and access on the Site, as well as implements User rights in accordance with GDPR:

  • The right of access to personal data:
    The right to be informed and request access to personal data processed by the Site;

  • The right to rectification of personal data:
    The right to request correction or updating of your personal data if it is inaccurate or incomplete;

  • The right to delete personal data:
    The right to request the deletion of personal data allows the User to request the deletion of personal data if they are no longer needed for the purposes for which they were collected;

  • The right to receive information:
    The right to receive information about the personal data provided, if the processing of such data is carried out on the basis of consent or agreement and in an automated manner;

  • The right to restrict the processing of personal data:
    The right to demand that we stop processing all or part of your personal data temporarily or permanently in the cases specified in art. 18 section 1 GDPR;

  • The right to withdraw consent to the processing of personal data:
    If the User has given consent to the processing of personal data for marketing purposes or in cookies, the User has the right to withdraw consent at any time, without affecting the legality of processing on the basis of consent before its withdrawal. For the above purposes, the User can contact the Site by e-mail: ITCharm (web).
    The User can also contact the Site in any other way of his choice, including verbally or in writing to the Administrator's correspondence address;

  • The right to object to the processing of personal data:
    The User has the right at any time to object to the processing of personal data, including profiling, in connection with processing necessary for the purposes of legitimate interests pursued by the Administrator or a third party, and processing for direct marketing purposes;

  • The right to transfer personal data:
    You have the right to request an electronic copy of your personal data or to transfer your personal data for use by third parties;

  • Other rights provided for by the GDPR.

 

Personal data security

The Administrator protects User data from unauthorized access, disclosure, modification and destruction. In particular, the Administrator uses data encryption, physical security measures and verification in IT systems. The administrator also uses antivirus software and firewalls. Only authorized persons who are obliged to respect confidentiality, as well as subcontractors who have concluded contracts with the Administrator on the assignment of personal data processing, can have access to User data.

The forms filled out by the User when registering on the Site or ordering other services, as well as the process of logging in to the Site, are carried out using the secure SSL protocol, which significantly increases the protection of data transmission on the Internet. The information is stored and processed on the Site in compliance with appropriate security measures that comply with the requirements of Polish law.


 

Personal data retention period

The User's data is processed during the period of use of the Site. In case of processing of personal data in connection with:

  • Communication via the Site's contact form: 
    Personal data will be processed during the period necessary to respond to the User, complete User service, or until the User submits an effective objection;

  • Communication through the contact details provided on the Website:
    Personal data will be processed during the period necessary to respond to the User, complete User service or until the User submits an effective objection;

  • Account creation and confirmation:
    Users' personal data is stored for the period of the account's existence on the Site in order to provide the account service and related functions and other services of the Site in accordance with the Regulations and for marketing purposes. In case of account deletion, the User's personal data will be depersonalized (the data will be stored for 3 years from the date of account deletion in order to address any complaints and claims related to the use of the Site's services);

  • Installation and use of cookies on the User's device:
    Personal data will be processed during the period in accordance with the Cookie Policy.

If the period for processing personal data on one legal basis has expired, this does not mean that personal data cannot be processed on another legal basis. After the processing period has expired and all grounds for processing have disappeared, personal data will be permanently deleted or anonymized.


 

Cookie Policy

This Policy is intended to inform Users about the purposes of storing and accessing cookies on Users' end devices, as well as about the possibilities of specifying the conditions for storing or accessing cookies using web browser settings. ITCharm (web) ( Administrator ) It can store cookies on Users' end devices and access them.

We would like to inform you that not choosing certain types of cookies may cause difficulties in using certain functions of the Website.

Cookies may contain personal data in the form of system identifiers that uniquely identify the User. In this case, the basis for processing the User's personal data is his consent (art. 6(1)(a) GDPR). Consent can be revoked at any time — without prejudice to the legality of processing prior to its revocation. The necessary cookies anonymously provide the basic functions and security features of the Website. As a rule, strictly necessary cookies do not process personal data. If personal data is processed using the necessary cookies, the basis for processing personal data is the legitimate interest of the Administrator (Article 6(1)(f) GDPR). In this case, the legitimate interest of the Administrator is the technical requirements for the use of the Site.

ITCharm (web) uses cookies to:

  • Recognize the User's device and display the Website accordingly, taking into account the individual needs of the User;

  • Optimize and improve the efficiency of services by creating anonymous statistics that help you understand how Users use the Site;

  • Comparison of advertising messages with specific behavior on the Site;

  • Comparison of recommended offers/personalized information based on User preferences.


 

Cookies used by the Site

Cookies used by the Site are divided into:

  • Necessary cookies:
    Without the necessary cookies, the User cannot use the Website. These files are necessary for the proper functioning of the Site;

  • Statistical cookies:
    Help the Administrator understand how Users interact with the Website by anonymously collecting and reporting information. These cookies are disabled by default and can be enabled with the User's consent by checking the appropriate box when visiting the Site. The user can withdraw consent at any time;

  • Marketing cookies:
    Are used to track users on websites. The goal is to serve ads that are relevant and interesting to individual Users and therefore more valuable to publishers and third-party advertisers;

  • Third–party cookies:
    Some cookies placed on the end device of the Website User may be used by partners cooperating with the website.


 

Web Browser Settings

The User's web browser may allow cookies to be saved by default. The user can specify the conditions for storing and accessing data stored in cookies at any time using the settings of the web browser. Cookies may be blocked, the ability to store cookies may be limited (for example, by notifying each time cookies are installed) or access to cookies may be restricted, and blocking or restricting cookies may interfere with the use of the Website or certain functions of the Site. The user's end device. Detailed information about the possibilities and methods of processing cookies is available in the settings of the web browser. As part of the functionality of a particular web browser, you can get additional information about cookie management.


 

Entry into force and changes to the Privacy Policy

The Privacy Policy and its changes take effect from the moment they are published on the Website.

In order to ensure that the Privacy Policy complies with the applicable legal requirements, the Administrator reserves the right to change the Privacy Policy. The User is informed about the changes on the Site.