Please take a moment to learn about our privacy policies and should you have any questions please contact us via email email@example.com, or to the address Av. 5 de Outubro, 125, 1º Piso, 1050-052 Lisboa.
A. Who’s responsible for collecting and processing your personal data
B. How do we collect your personal data and what type of data is obtained
Please note that you are not required to provide data that it may be asked by AFFINITY (you have the right to decline). But if you choose not to do so, we may not be able to offer our services, manage your application or answer any questions you may have.
AFFINITY may collect your data in a variety of ways, namely when you subscribe to our newsletter, send us spontaneous applications, register on the Universities’ employment platforms, job fairs, references of employees or former employees, workshops and partnerships with the intention of being informed by AFFINITY, conclude a contract with us (work, service or other), fill out your customer record, or communicate with our customer support teams.
If you are a candidate, in order to identify and get the best possible job opportunities or services tailored to you, we need to process certain information. We only ask for information that will be relevant to us, such as your name, age, contact details, information about your education, employment history, emergency contact, immigration status, financial information (in case we have to verify financial context) and social security number (obviously you can choose to share other relevant information with us). When appropriate, and in agreement with legislation, we may also collect information or diverse data on any criminal convictions.
In case you’re an AFFINITY customer, we need to collect and use information about you or the people within the scope of our service provision, in order to provide you with the most complete service possible and for our contractual relationship unfold correctly. As such, in this context, we may ask you for some personal information such as name, email, position and contact number of employees relevant to the services.
If you’re a supplier, we need a small amount of information regarding your personal data in order to ensure that everything works correctly. Contact details of certain people in your company so we can communicate with you, as well as other information, such as your bank details so that we can pay you for the services you provide (if this is part of the contractual arrangements between us). We may also have information that someone in your company has chosen to share with us.
Certain categories of personal data, such as those that reveal racial or ethnic origin, political opinions, religious or philosophical beliefs, union affiliation, genetic data, biometric data to uniquely identify a person, relative data health or relating to sex life or sexual orientation are classified as “special categories of personal data” and benefit from additional protection under the terms of the General Data Protection Regulation (“GDPR”). AFFINITY limits the circumstances in which it collects and processes these special categories of data. Only when it has given its consent. In order to provide our users with greater speed and customization of the services provided by AFFINITY, AFFINITY may use a “browser” feature called “cookies”, which will allow AFFINITY to customize its services and website according to their interests and needs, allowing you to streamline your future activities and your experience on the AFFINITY website. In this way, data related to parameters and settings related to the browser, operating system and geo-location can be collected. During part of your browsing on the AFFINITY website, we may also use software tools to measure and collect information about the session, including page response times, download errors, duration of visits to certain pages, information regarding your interaction, and the methods used to get out of them. We may also collect technical information to help us identify your device for fraud prevention and diagnostic purposes.
C. Purposes and grounds for the processing of your personal data
The purposes and fundamentals basis of which AFFINITY treats your personal data depend on your status as a candidate, employee or supplier.
If you are a candidate (where we include suppliers who are sole traders, self-employed or employees of suppliers), please bear in mind that your personal data will be collected and processed, namely, for the following purposes:
- Recruitment – includes recruiting activities to provide services or back-office functions, such as research and selection. In the case of service provision, there is an approach to current and potential AFFINITY clients in order to find an opportunity, placement in AFFINITY, as well as related activities. In this context, data related to salary processing and human resources management will also be treated;
- Contracts – includes activities such as entering into contracts with AFFINITY and partners, as well as communication with other parts involved in the contracts (insurance companies, beneficiaries, intermediaries);
- Service development and improvement – includes necessary activities for the development and improvement of the services provided by AFFINITY, activity analysis and processing for potential future opportunities.
If you are a supplier or a customer, your personal data will be collected and processed, for the following purposes:
- Execution of contract – includes all necessary activities for the execution of the service provision contract, regarding to payment processing;
- Communications – includes all the necessary contacts so that we can contact you regarding our contracts;
- Development and improvement of services – includes the necessary activities for the development and improvement of services provided to or by AFFINITY, activity analysis, processing for statistical and scientific purposes, as well as to offer services or to obtain support from you;
- Fulfilment with legal obligations;
- In certain circumstances, to help us declaring, exercising or defending a right.
When we collect your personal data for the purposes described above or for other purposes, we inform you in advance or at the time of collection, and we will seek your consent whenever necessary to legitimize the processing of your data. When you have provided your consent for processing activities, you have the right to withdraw your consent at any time.
However, there may be some cases that it won’t be your consent that legitimizes the processing of your data but one of the following:
- When it is necessary to conclude a contract or proceed with its execution;
- When it is necessary to comply with the legal obligations to which AFFINITY may be subject;
- When processing data is necessary to achieve AFFINITY’s legal interest- respecting your rights and privacy. Will be used only when there’s no other way less invasive of handling your personal data. We can assure you that if the legitimate interest is used as a reason to process your personal data, we will keep a record of that action and you will have the right to request that information;
- When is necessary the handling with the purposes of declaring, exercising or defending a right in a judicial proceeding.
D. The security of your personal data
AFFINITY undertake everything to ensure the confidentiality and security of your personal data. Carrying out all efforts and security measures to protect your information, like interference, loss, unauthorized access, modification or disclosure.
Our actions include the execution of appropriate access controls to ensure that we encrypt, pseudonymize and anonymize.
Access to your personal data is only allowed under the terms already described above, always depending on the actual need of your agreement, and susceptible to strict contractual confidentiality obligations when processed by third parties.
Although data transmission over the internet or website cannot guarantee complete security against intrusions, AFFINITY and its service providers offer the best efforts to implement and maintain physical, electronic and procedural security measures designed to protect your personal data. In compliance with applicable data protection requirements.
E. Retention time of your personal data
AFFINITY will keep your data for the period strictly necessary to fulfil the purpose for which it was collected. In case of personal data collected in the context of recruitment processes, will be kept for a period of 10 (ten) years after the last contact with the candidate.
As for the personal data of our suppliers and customers, will be kept for a period of 10 (ten) years.
F. With whom your personal data will be shared
AFFINITY is part of a business group, so its data can be shared to other companies of the group in the context of the provision of services between group companies and for the purposes of internal reporting.
On the other hand, your personal data may be shared with our customers, within the scope of technological consultancy services.
Under the terms of the applicable law, AFFINITY is required to disclose data to the Tax Administration, Social Security, the Working Conditions Authority, and, following judicial mandates, to the judicial authorities.
G. International data transfers
AFFINITY will only send personal data collected within the European Economic Area (EEA) to foreign countries were necessary to follow your instructions, to comply with a legal duty, or to work with agents and consultants who help us to manage our business and services.
If you transfer personal data outside the EEA, AFFINITY will ensure that it is protected in the same way as if it were being used in the EEA. For this purpose, we will use one of the following safeguards:
- Transfer to a non-EEA country whose privacy legislation ensures an adequate level of protection of personal data similar to those existing in the EEA;
- Implementation of a contract with the foreign entity that requires it to protect personal data according to the same standards used in the EEA; or
- • Transfer of personal data to organizations with specific international data transfer agreements with the European Union (for example, Privacy Shield, a framework that sets privacy standards for data shared between the United States and European countries).
H. What rights do you have?
As a holder of your personal data, you are guaranteed a set of rights in relation to your personal data and the way they are treated, which are as follows:
- Right for opposition – that is, the right to object at any time, for reasons related to your particular situation, to the processing of personal data concerning you, under the terms of the GDPR;
- Right for information – that is, the right to be given concise, transparent, understandable and easily accessible information, using clear and simple language, on how we use your personal data and on your rights;
- Right for access – the right to access your personal data at all times;
- Right for rectification – that is, the right to rectify inaccurate personal data concerning you, or to complete them if they prove to be incomplete;
- Right for limitation – under certain conditions, the data subject has the right to limit the processing of his personal data;
- Right for erasure – under certain conditions, the data subject has the right to obtain the erasure of his personal data from the controller, without justified delay;
- Right for portability of your personal data – that is, the right to receive personal data that concerns you and that you have provided, in a structured format, in current use and automatic reading, as well as the right to transmit that data to another responsible person for treatment, under certain conditions;
- Right to complain to the supervisory authority about the way we treat your personal data – which will be the National Data Protection Commission, with address in Rua de São Bento, n.º 148 – 3.º, 1200-821 Lisboa, telefone +351 213928400, fax +351 213976832, e email firstname.lastname@example.org;
- Right to withdraw your consent – in this case, the withdrawal of consent does not compromise the lawfulness of the treatment carried out based on the consent previously given;
- Right not to be subject to decisions based on automated processes that produce legal or other significant effects.
Your requests will be treated with special care so that we can ensure the effectiveness of your rights.
You may be asked to provide proof of your identity to ensure that personal data is shared only with the holder.
I. AFFINITY contact details
Your satisfaction is very important to us. As such, do not hesitate to contact us about any question you may have, through the contacts indicated.asdasdasdsa