Data Controller

Humanit Digital Consulting Lda with head office located at Rua António Augusto Aguiar nº60, 6200-013 Covilhã, registered in the Commercial Registry Office under the sole identification and registration number 515700479, provides consultancy services for the recruitment of human resources, programming and computer solutions. Therefore, it is responsible for the Recruitment of employees to be allocated to its own projects or to recruit employees for third parties and, consequently, it is responsible for the processing of the personal data collected under such recruitment processes.

Purpose of the processing

The personal data of the candidates may be collected and processed by HumanIT for the following purposes, which are licit and limited to the strictly necessary:

• Analysis and selection of candidates for job offers currently available.
• Analysis and selection of candidates for potential and future job offers.
• Storage of the data in the database for future opportunities.
• Internal statistical analysis and internal report.

Category of personal data collected

For the purposes above referred, HumanIT may collect and process the following categories of personal data, including the documents in which such data are collected: – Personal and professional data contained in the Curriculum Vitae and other documents made available by the candidate; – Personal and professional interests; – Dossier and/or portfolios of skills.

Retention period

The retention period of the data collected corresponds to the period in which the recruiting process, for current or future job offers, takes place.

Recipients of data

The following are recipients of the personal data collected: a) HumanIT employees which work in the human resources department; b) The employees of the recruitment department, nearshore and outsourcing of HumanIT.

Rights of the candidates

The candidates are entitled to, in accordance with the law, the rights of information, access, rectification if the data are outdated, incorrect or incomplete, restriction, objection and erasure on the data collected. Notwithstanding, the right of erasure may be limited, namely, for public interest, judicial, national security, invoicing, commercial, fiscal, or other reasons provided by law.

• Right of access: The data subject has the right to obtain a confirmation issued by HumanIT if his/her data are being processed and, if so, the data subject has the right to have access to such data.
• Right of rectification: The data subject has the right to obtain, without undue delay, the rectification of the inaccurate or incomplete data which HumanIT has stored in its database.
• Right to erasure: The data subject is entitled to ask HumanIT to erase his/her data, without undue delay, and HumanIT has the obligation to erase such data when, amongst others, one the following reasons are verified: a) The personal data are no longer necessary for the purposes which justified the collection and processing of the data; b) The data subject has withdrawn its consent to the processing of data (in cases where the processing is based on consent) and there isn’t any other lawful reason for the processing; c) The data subject has objected to the processing and there are no legitimate interests which justify the processing;
• Right to restriction: The data subject also has the right to request to HumanIT the limitation of the processing, where one of the following is applicable: a) The accuracy of the data is contested, for a period enabling HumanIT to verify the accuracy of the data; b) The data is requested by the data subject for the issuance of a statement or the exercise of a right or to defend a right in a judicial procedure, and HumanIT no longer needs to process the personal data; c) If it has exercised the right to objection to the processing, until it is verified if the legitimate interests of the data controller prevail over the legitimate interests of the data subject.
• Right to data portability: The data subject has the right to receive from HumanIT, whenever the processing is carried out by automated means, his/her personal data in a structured, commonly used and machine-readable format and has the right to transmit those data to another controller.
• Right to object: If the processing of personal data is based in the legitimate interests of HumanIT the data subject is entitled to, at any time, object to such processing of personal data. For the exercise of any of those rights, the candidates must submit a request, in written, to the e-mail: hello@humanit.pt. HumanIT shall reply to your request within the period legally established.

Consent

The consent of the candidates is legally necessary for the storage of their personal data included in the Curriculum Vitae and other documents in a database for the period of 3 (three) years, so that they may be contacted if a new job offer appears. The candidates are also entitled to the withdrawal of their consent. Such withdrawal does not affect the lawfulness of the processing based on consent before its withdrawal nor to further processing of the data, when necessary to comply with legal/contractual obligations.

HumanIT performance in compliance with the General Data Protection Regulation

• HumanIT hereby declares that the personal data collected are licit and limited to the necessary.
• HumanIT also declares that the data are updated and that the necessary technical and organizational measures are implemented to ensure the safety, update and accuracy of the data collected.
• HumanIT has implemented the adequate technical and organizational measures to ensure the confidentiality and safety of the personal data collected, to avoid its destruction, accidental or illicit, modification, accidental loss, diffusion or non-authorized access, namely when such data are transferred by electronic means, and against any illicit processing, in conformity with the categories of the data processed.
• It is hereby informed that the processing of personal data is lawful, loyal and transparent.

Notification of a data breach

If a data breach which is likely to represent a high risk for the rights and freedoms of the data subjects is detected, HumanIT will inform the data subjects about such data breach, as well as the supervisory authority, under the legally foreseen terms.

Right to claim before a supervisory authority

The candidate has the right to submit a claim before the supervisory authority competent in Portugal, which is the Data Protection Commission (“Comissão Nacional de Proteção de Dados”), if he/she understands that HumanIT is breaching its legal obligations.

Third Parties providers

HumanIT has service providers which are located within the European Union and in the Switzerland and, therefore, your data may be processed outside of Portugal. Upon contracting with such providers for the execution of specific data processing, HumanIT ensures that such third parties commit themselves to the same data protection obligations as the ones established in this privacy police, in particular, the obligation to provide sufficient guarantees in what respects to the execution of adequate technical and organizational measures so that the processing is compliant with the GDPR.

Thank You.