In case you have any concerns about privacy or your personal information please send us an email to firstname.lastname@example.org with subject line "website privacy concern" and we will reply as soon as possible.
1. Protection of personal data
The protection of Users personal data is one of Adopto's priorities and any processing of personal data is carried out conscientiously, legally, in good faith and in accordance with all relevant legislation.
Personal data is every information related an identified person or a person that can be identified, whether his identity can be determined directly or indirectly, in particular on the basis of an identification number or one or more factors specific to his physical, psychological, mental, economic, cultural or social identity.
The processing of personal data entails any action or set of actions performed upon personal data, such as collecting, recording, organizing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, publishing or otherwise making available, alignment, combining, blocking, deletion or destruction and the implementation of logical, mathematical or other operations on that data.
In order to become a Website user you have to register. Our Website has a subscription model, therefore we need your private personal information**, including credit card details in order to process charges. Adopto does not store Credit Card data. All credit card information is stored on Braintree which is is a validated Level 1 PCI DSS Compliant Service Provider. Adopto is not subject to PCI obligations.
Adopto collects Users personal data solely with the consent of the User and for the purpose familiar to the User, explicitly stated and in accordance with all relevant laws and regulations and only to the extent necessary to achieve the stated purpose.
By entering personal data during and after the registration on the Website, the User expresses his consent to the processing of his personal data for the stated purpose.
The User has the right to revoke his consent at any time and request the termination of further processing of his personal data, except when it comes to processing data for statistical purposes when the aforementioned data does not allow the identification of the person to which they relate.
The User is responsible for the accuracy of the entered information.
3. Information that may be collected
Adopto is authorised on the basis of the consent given by the User to collect data that the User enters during registration on the Website and any subsequent changes to this data. This especially relates to knowledge, skills, education, experience, previous employment, projects, certificates and contact information of job-seeking Users that they voluntarily enter into an online form during or after registration or are imported from other online services with the Users consent, as well as data of Users that advertise the need for hiring professional staff, such as data relating to the description of the type of jobs they offer, the conditions to be fulfilled by potential employees, professional knowledge and skills they should have, contact information as well as any other information that Users voluntarily enter while creating their profile on the Website.
Adopto will not collect and process personal data whose collection is prohibited by law, such as data relating to racial or ethnic origin, political opinions, religious or other beliefs, trade union memberships and other data the collection of which the law expressly prohibits, except under the law enumerated conditions and situations.
4. The purpose for which the data is collected
Adopto collects User information for the sole purpose of carrying out activities which are subject of their business. The collected data can be used for further development and improvement of the Website, to adapt and improve the content and services that the Website provides, as well as to inform and offer the User other contents and services that can be used through the Website.
The data that Users – job seekers have entered during registration and while creating and editing their profile on the Website shall only be accessible to other registered Users – seekers of skilled personnel, who gained access to this data by registering on the Website. The personal data of Users who advertise the need for employment, which refers to the job description and requirements that must be met by potential employees, as well as information that such a User submits while presenting its business activities and their contact information shall be available to all Users of the Website.
5. Disclosure of personal data
Adopto will not transmit Users personal data to third parties, except in the manner specified in the Policy. Any transfer to third parties must comply with the regulations of the Policy and third parties are bound to comply with the regulations of the Policy regarding data handling.
User personal data may be transferred to affiliates, third parties that are contracted by Adopto to carry out certain activities or provide certain services and in the case of ownership, organizational and status changes regarding Adopto, as well as when such an obligation is expressly stipulated by law. In particular, we provide a limited amount of your information (such as your email and address) to Braintree Payment Solutions, LLC when processing credit card payments; and Intercom, Inc. (Full name, email and company name) to bring you personalized support experience.
6. Storing personal data
Adopto approaches the storing of personal data conscientiously and with all due care, taking the utmost effort that the data are adequately protected from any form of accidental or deliberate abuse, destruction, loss, unauthorised alteration, disclosure or access.
Personal data transmission takes place via the internet and is, in spite of all efforts, never truly secure, therefore Adopto does not guarantee the safety of such a transfer and the User performs it at their own risk. After receiving the information from the User, Adopto will take all necessary measures in order to prevent any misuse of the data.
Users personal data can be transferred and stored outside of the Republic of Croatia in countries that provide adequate protection of personal data, as well as in countries located outside of the European Union in which the protection of personal data is possibly not regulated in accordance with the relevant EU legislation and does not provide the adequate level of protection in accordance to relevant EU legislation. By submitting his personal information the User agrees to the previously described transmission, storage and use of data.
As stated in article 5. some of the data is being provided to Braintree Payment Solutions, LLC(Braintree) and Intercom, Inc.(Intercom) companies based outside of
EU. Adopto provides its customers with highest level of data security and compliance, and in accordance to that conducts business only with companies that can provide the same level of security. Braintree and Intercom both provide EU General Data Protection Regulation(GDPR) compliance.
7. Data security
Customers data is stored in multi-tenant datastores, we do not have individual datastores for each customer. However strict privacy controls exist in our application code to ensure data privacy and prevent one customer from accessing another customers data. We have many unit and integration tests in place to ensure these privacy controls work as expected. These tests are run every time our codebase is updated and even one single test failing will prevent new code being shipped to production.
All data sent to or from Adopto is encrypted in transit using 256 bit encryption. Adopto is served 100% over https.
8. User's right to access and change information
9. Data deletion
Your personal information will be retained until it is deleted. Your personal information will be deleted on one of the following occurrences:
- deletion of your personal information by you, the User(or by another person engaged by the User, where you are using the Website and/or Services on behalf of a User).
- where you are a Candidate, deletion of your personal information by an User(Company) on whose behalf we are processing your personal information.
- written request by you to us (email@example.com)
If you are a Candidate, any request by you to us to delete your personal information will not result in deletion of any application submitted by you to a User(Company)(in respect of which we are a data processor and not a data controller). If you require a Company to delete an application, or any other information provided by you to the Company directly, you must contact the Company to request such deletion.
10. Data Protection Officer
According to Croatian Personal Data Protection Law («Narodne novine» broj 103/03., 118/06., 41/08. i 130/11.) and article 18.a , AdoptoTech Ltd. is required to appoint Data Protection Officer:
Nikola Biondić, CTO
Ljudevita Posavskog 34a,
10000 Zagreb, Croatia
If you have any questions or concerns about data safety and protection, feel free to contact our Data Protection Officer.
Data collected this way is your internet service provider name, the page from which you visited our site, your behavior on our website (which sections of the Website you accessed, date, time and duration of your visit)
*Personal information needed for subscription to the Website: your name, address, email address, telephone number and credit card details.
Effective: July 6, 2017