Privacy Policy

‍LAST UPDATED: 24.07.2024

‍

Respecting your privacy is one of our fundamental commitments and that is why we pay the utmost attention to the processing of your personal data in accordance with applicable law. We are aware of the importance of maintaining the confidentiality, integrity and security of your personal data ("Personal Data") and have drafted this privacy policy ("Privacy Policy") to explain how your Personal Data is collected, stored, used and disclosed by HRS PERMANENT PLACEMENT S.R.L., a company incorporated and operating under Romanian law, having its registered office in Bucharest, Sector 2, Calea MOȘILOR, Nr. 158, tax identification code 50101761, registered with the Trade Register Office under no. J40/10015/2024 ("HRS", "we", "us", "we"), as operator, in connection with your access to and use of the website available at the URL www.hrsro.com ("Platform"). Whenever we are required to do so by applicable law, we will seek your free, informed, specific and unambiguous consent to process your Personal Data. By expressing your consent, you agree that we may collect, use, disclose, disclose, process and transfer Personal Data in accordance with this Privacy Policy.

We reserve the right to change the provisions of this Privacy Policy from time to time. If we make any changes to this Privacy Policy, we will make the updated version available on the Platform and update the date referenced in "Last Updated". We will also notify you of any changes to ensure that you are informed about how Personal Data will be used. Any changes to the Privacy Policy will apply from the date on which they are made, except for changes that require your prior consent, which will apply from the time you give your consent.

PERSONAL DATA PROCESSED, PURPOSES OF PROCESSING AND GROUNDS FOR PROCESSING

Platform navigation data

The information systems and software applications used for the operation of the Platform generally obtain some Personal Data, the transmission of which is implicit in the use of Internet communication protocols.This information is not collected to be associated with identified persons, but, due to its nature, it may allow, through processing and integration with certain data stored by third parties, the identification of users. This information includes IP addresses, the time of the request, the method used to send the request to the server, the size of the file obtained in response, and other parameters relating to the user's operating system.To the extent that this information leads to the identification of a user, the provisions of this Privacy Policy become applicable.

Purpose of processing

We use this data only to obtain anonymous statistical information on the use of the Platform and to verify its correct functioning.

Basis of processing

• Our legitimate interest to improve our Platform and to manage server capacities and keep our Platform error-free (Art. 6(1)(f) GDPR);
• Fulfillment of our legal duties relating to the security aspects of our systems (Art. 6 para. 1 lit. c GDPR).

Submit your CV

On our Platform you can submit your CV in order to benefit from our services. In this case, we will need your name, surname, e-mail address, CV, all the information mentioned/indicated in the submitted CV and any other information that you voluntarily provide when contacting us.

Purpose of processing

The purpose of this processing is to provide our services through the Platform.

Basis of processing

• The performance of a contract to which the data subject is a party or to take steps at the request of the data subject prior to the conclusion of a contract (Art. 6(1)(b) GDPR);

Apply for a job

On our Platform you have the possibility to apply for a job posted on the Platform. In this case, we will need your name, surname, e-mail address, CV, all the information mentioned/indicated in the submitted CV, cover letter, salary expectations and any other information you voluntarily provide when contacting us.

Purpose of processing

The purpose of this processing is to provide our services through the Platform.

Basis of processing

• The performance of a contract to which the data subject is a party or to take steps at the request of the data subject prior to the conclusion of a contract (Art. 6(1)(b) GDPR);

Contractual Notices

In the course of providing our services, we will use your e-mail address to notify you of any changes to the terms and conditions of use of the Platform and any other matters relating to the performance of the contract between HRS and you.

Purpose of processing

The purpose of this processing is to carry out contractual notifications in accordance with the terms and conditions of use of the Platform.

Basis of processing

• The performance of a contract to which the data subject is a party or to take steps at the request of the data subject prior to the conclusion of a contract (Art. 6 (1) litb GDPR);

Contact

You have the possibility to contact us in different ways: by e-mail, by phone, by contact form. In this case, we may process the following Personal Data: name, surname, e-mail, e-mail, telephone, company and any other information that you voluntarily provide when contacting us.

Purpose of processing

In this situation, we will use your Personal Data only to contact you in connection with the requested offer or in connection with the resolution of the indicated problem.

Basis of processing

• The lawful basis for this processing is the performance of a contract or to take steps at your request prior to the conclusion of a contract (Art. 6 (1) (b) GDPR);
• Our legitimate interest to ensure communication with our customers and to provide the necessary support for the use of the Platform (Art. 6 para. 1 lit. f GDPR);

Commercial communications

You may opt-in to receive marketing communications via e-mail or telephone calls.

Purpose of processing

If you opt-in to receive such commercial messages, we will use your e-mail address and telephone number to send you commercial messages about HRS activities and promotions.

Basis of processing

• The legal basis for processing your e-mail address and telephone number for this purpose is your consent. (Art. 6 para. 1 lit. a GDPR).
• You can revoke your prior consent at any time and free of charge by sending an e-mail to privacy@hrsro.com.

Provision of Personal Data

You may refuse to provide certain Personal Data (indicated above) but, in such a case, you may not be able to benefit from certain services and functionalities of the Platform, including but not limited to creating a user account or contacting you to resolve your problem and provide support.

AUTOMATED PROCESSING OF PERSONAL DATA

Your Personal Data will not be processed in order to generate decisions based solely on automated processing that would produce legal effects on you or affect you to a significant extent.

DURATION OF PROCESSING

As a rule, we will process your Personal Data for a period of 3 years.

Personal Data collected for the purpose of sending commercial communications will be processed until the date of withdrawal of consent.

In certain circumstances, we may retain Personal Data for longer periods of time, for example where we are obliged to do so in accordance with legal, regulatory, tax or accounting requirements.

We may also retain Personal Data for longer periods of time so that we have an accurate record of your dealings with us in the event of any complaints or if we reasonably believe that there is a prospect of litigation in connection with the Processing of your Personal Data.

TRANSFER OF PERSONAL DATA

Personal Data is stored on the servers of contractual partners who help us provide our services.

We may transfer Personal Data, to the extent necessary, to the following categories of recipients:

• Companies (potential employers);
• contractual partners;
• subcontractors;
• companies providing courier services;
• companies providing IT services;
• suppliers of software or hardware products;
• market research companies;
• marketing companies;
• public authorities, courts or arbitration tribunals and authorities competent to investigate criminal offenses.

These recipients may be located in the European Union and/or the European Economic Area. If the recipients are located outside the European Union and the European Economic Area, including in countries that are not recognized as providing an adequate level of protection, the transfer of Personal Data will only be made if adequate safeguards are in place in accordance with applicable law. In this respect, we rely on several safeguards, such as the Privacy Shield certificate or standard contractual clauses issued by the European Commission. You can receive from us a list of recipients in third countries as well as a copy of the agreed provisions ensuring an adequate level of protection of Personal Data. Should you have any queries in this respect, please contact us at the contact details below.

SECURITY OF PERSONAL DATA

The security of your Personal Data is important to us. Therefore, your Personal Data will be processed by applying reasonable technical and organizational measures to protect Personal Data, such as limiting access to Personal Data, encryption or anonymization of Personal Data, storage on secure media. However, despite our best efforts, we cannot always guarantee the effectiveness of the security measures put in place, and therefore cannot guarantee the security of Personal Data at all times.

YOUR RIGHTS WITH REGARD TO THE PROCESSING OF YOUR PERSONAL DATA

Your rightsIn accordance with applicable law, you have the following rights:Right of access: you have the right to obtain confirmation from us that your Personal Data is processed by us, as well as information on the specifics of the processing such as: the purpose, the categories of Personal Data processed, the recipients of the Personal Data, the period for which the Personal Data is kept, whether we transfer it abroad and how we protect it, your rights, the right to lodge a complaint with the supervisory authority, where we obtained the Personal Data. Right to rectification: You have the possibility to request rectification of your Personal Data, provided that the applicable legal requirements are complied with. In the event of errors, after notification, we will correct your Personal Data immediately.

YOUR RIGHTS REGARDING THE PROCESSING OF YOUR PERSONAL DATA

Your rightsIn accordance with applicable law, you have the following rights:

Right of access: you have the right to obtain confirmation from us that your Personal Data is being processed by us, as well as information on the specifics of the processing such as: the purpose, the categories of Personal Data processed, the recipients of the Personal Data, the period for which the Personal Data is kept, whether we transfer it abroad and how we protect it, your rights, the right to lodge a complaint with the supervisory authority from where we obtained the Personal Data.

Right to rectification: You have the possibility to request rectification of your Personal Data, provided that the applicable legal requirements are complied with. In the event of errors, after notification, we will correct your Personal Data immediately.

Right to erasure: In certain cases, you have the possibility to request erasure of Personal Data: (i) it is no longer necessary for the purposes for which we have collected and process it; (ii) you have withdrawn your consent to the processing of Personal Data and we can no longer process Personal Data on other legal grounds; (iii) Personal Data is processed contrary to the law; (iv) you assert a legal right to object. We are not obliged to comply with your request for erasure where the processing of Personal Data is necessary for compliance with a legal obligation, or for the establishment, exercise or defense of legal claims. There are also other circumstances in which we are not obliged to comply with your request for erasure of Personal Data.

Restriction of processing: You may ask us to restrict the processing of your Personal Data in the following situations: (i) if you contest the accuracy of the Personal Data, for a period that allows us to verify the accuracy of the Personal Data in question; (ii) if the processing is unlawful, and you object to the erasure of the Personal Data, requesting instead the restriction of its use; (iii) where we no longer need the Personal Data for the purpose of the processing, but you request it from us for legal action; (iv) where you have objected to the processing, for the period of time during which it is verified that our legitimate rights as controller prevail over those of the data subject. We may continue to use Personal Data following a restriction request, if: (i) we have your consent; (ii) to establish, exercise or defend a legal claim; or (iii) to protect the rights of another natural or legal person.

Right to data portability: to the extent that Personal Data is processed on the basis of your consent or for the performance of the contract and the processing is carried out by automated means, you have the right to have your Personal Data provided to you in a structured, commonly used and machine-readable format and you have the right to transmit this Personal Data to another controller. This right does not adversely affect the rights and freedoms of others.

Right to object: In certain situations, such as when we process your Personal Data on the basis of a legitimate interest, you have the right to object to the processing of your Personal Data by us. In the event of unjustified opposition, HRS is entitled to further process the Personal Data.

Right to object to receiving commercial messages: You may also object to the processing of your Personal Data for the purpose of sending commercial messages.

Withdrawal of consent: Insofar as we process your Personal Data on the basis of your consent, you may withdraw your consent at any time, without affecting the lawfulness of the processing based on consent prior to the withdrawal of consent.

The right not to be subject to individual decisions: In certain circumstances you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly affects you to a significant extent. This right does not apply if the decision: (i) is necessary for the conclusion or performance of a contract between you and us; (ii) is authorized by law that also provides adequate safeguards for your rights and freedoms; (iii) is based on your explicit consent.

Right to complain to the supervisory authority: You have the right to lodge a complaint before the National Authority for the Supervision of Personal Data Processing ("ANSPDCP") about any violation of your rights regarding the processing of your Personal Data. The contact details of the ANSPDCP are: B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, postal code 010336 Bucharest, Romania; e-mail: anspdcp@dataprotection.ro.

Exercising your rights

To learn more about how you can exercise the above rights, please contact us at privacy@hrsro.com.

Identity Verification: We pay the utmost attention to the confidentiality of all Personal Data and reserve the right to verify your identity in case you make a request concerning Personal Data.

Fees: As a rule, you can exercise your rights free of charge. However, we reserve the right to charge a reasonable fee if your requests are manifestly unfounded or excessive, in particular because of their repetitive nature.

Response time: We make every effort to respond to your requests no later than one month after receipt of your request. This period may be extended by two months when necessary, taking into account the complexity and number of requests, in which case we will inform you of any such extension and the reasons for the delay.

CONTACT

If you have any questions or concerns about this Privacy Policy or its implementation, you can contact us at privacy@hrsro.com.