This Privacy Policy has been created in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: General Data Protection Regulation) and the Act on Implementation of GDPR, and it pertains to the collection, processing and protection of personal data of users of the MojPosao web portal (hereinafter: Portal).
APPLICATION
This Privacy Policy pertains to the MojPosao web portal, provision of its services, as well as security and protection of Portal users’ personal data, which are collected and processed during the provision of services and performance of contract.
TERMS
Personal Data means any data relating to any identified natural person (“data subject”). An identified natural person is a person who can be identified, directly or indirectly, based on a first and last name, an identification number, location data, an online identifier such as physical, genetic, mental, economic, cultural or social identity of that natural person.
Data Subject means any natural person who has been identified or is identifiable, and whose personal data are subject to processing by the controller in charge of personal data processing.
Processing means any operation or set of operations which is performed on personal data, regardless of whether it is by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment, restriction, erasure or destruction.
Controller means any natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by EU Member State law, the criteria for nomination of controller may be provided for by EU Member State law.
Processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
Recipient means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which receive personal data in the framework of a particular inquiry in accordance with EU or Member State law will not be regarded as recipients; the processing of personal data by those public authorities will be in compliance with the applicable rules according to the purposes of the processing.
Third Party means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.
Consent of the data subject means any specific, informed and unambiguous indication of the data subject’s wishes by which they, by a statement or by a clear affirmative action, signify agreement to the processing of personal data relating to them.
PERSONAL DATA THAT WE COLLECT
We collect personal data of Portal users that have to be entered when registering and creating a user profile, and which are necessary for using the Portal’s services.
During registration, we collect data such as: first name, last name, date of birth, address, contact e-mail address, contact number. Any user may subsequently and independently, of their own free will, enter data that pertain to their education, professional qualifications, work experience and other data and documents used in their user profile and/or when submitting job applications.
All data that the user enters and posts on their user profile on the MojPosao web portal are protected by a password which the user set when creating the user profile.
We likewise collect data when communicating with users who have requested help or submitted a complaint to our customer service via e-mail or phone.
METHOD OF COLLECTING PERSONAL DATA
The methods which MojPosao web portal uses for collecting data are the following:
- Data entered by the user during registration;
- Data entered by the user when filling out the user profile;
- Data provided by the user when contacting customer service or other contact e-mail addresses listed on the Portal;
- Data voluntarily provided by the user when submitting job applications and filling out questionnaires on the Portal.
LEGAL GROUNDS AND PURPOSE OF PERSONAL DATA PROCESSING
The Portal processes personal data for the purpose of conclusion or performance of a contract and provision of services, such as publication of job vacancies, storing CVs and other user data in the profile database for the purpose of their availability, in accordance with the settings and terms of service that the Portal user selected.
Personal data may be processed with the explicit consent of each user and for the purpose to which such consent pertains.
Personal data may be collected and processed for the purpose of complying with statutory obligations or if there is legitimate interest for such collection and processing.
STORAGE OF PERSONAL DATA
Personal data that we have collected are stored for as long as necessary to achieve the purpose of their collection – conclusion or performance of a contract and provision of our services. After achieving the purpose of data collection, we will not process personal data, except in cases where this is a statutory obligation, if it is necessary for the purpose of exercising legal claims or if the Portal has legitimate interest therein.
TRANSFER AND PROVISION OF PERSONAL DATA
Personal data of Portal users may be transferred in case of a justified request of a competent authority, statutory obligation, abuse or suspected abuse, prevention of fraud and illegal activities, and for other lawful reasons.
Employees' data in applications to employers' job ads may be transferred to a third party in cases where the employer, as a data controller, has authorized and used such a third party to process personal data.
MARKETING ACTIVITIES
The Portal performs marketing activities such as sending newsletters, promotional messages and notifications about our services and products. Such activities are performed when there is legitimate interest of the Portal for doing so or when the Portal user gives explicit consent for such types of activities. If marketing activities are performed based on the user’s consent, the user is entitled to withdraw their consent at any moment.
USE OF COOKIES
MojPosao web portal collects data through the use of cookies and similar technologies. More information about the cookies used can be found here.
LINKS TO WEBSITES AND SERVICES
The content published by the MojPosao web portal may occasionally contain links to third party websites and services (social networks, blogs, external e-mail addresses, etc.). The Privacy Policy that applies to the MojPosao web portal does not apply to such external services.
USER’S RIGHTS
Each user of the MojPosao web portal is entitled to the following:
- Information about what their personal data is used for;
- Access to personal data: the user may at any time access the personal data in their user profile;
- Right to rectification: the user may at any time rectify the personal data in their user profile;
- Right to erasure: the user may at any time delete their profile on the Portal or request the erasure of their user profile and personal data from user databases;
- Right to restriction of processing: the user may request that their data is used exclusively for the purpose for which they gave their consent;
- Right to object: the user may at any time object to the processing of their personal data;
- Notification of breach: the user has the right to be notified in case of any breach of privacy of their personal data.
By registering with the MojPosao web portal, users give consent for displaying, collection and processing of their personal data, exclusively for the purpose of submitting job applications for vacancies published by employers on the Portal or via the employer service “Access to profile database.”
The user may at any time alter, rectify or erase data in their user profile, as well as decide on privacy settings for their user profile. You can read more about privacy settings for the user profile here.
The user has the right to be forgotten in regard to the personal data they have provided; i.e. the user is entitled to delete their user profile. If the user wants to completely delete their profile, they have to send a request in that regard to the e-mail address: korisnici@mojposao.hr or szop@mojposao.hr, after which they will be notified of erasure of their personal data and said personal data will be erased from the databases of the MojPosao web portal. The deleted user profile and its data cannot be restored; instead, a new user profile has to be created.
Change of the e-mail address used for user registration is possible if a written request is sent to the e-mail address: korisnici@mojposao.hr, after which you will receive further instructions regarding the options for changing the e-mail address used for registration.
Employers who use the “Access to profile database” service have to provide a “Statement on confidentiality of personal data” prior to using the service. In case of data use for purposes contrary to this Privacy Policy and the Terms and Conditions of Use of the MojPosao Web Portal, the Portal will report such activities to the Croatian Personal Data Protection Agency or other competent authority. At the user’s request, the employer is obligated to erase the user’s personal data from all of their databases and systems. In case such a request is submitted, the employer has to be able to prove that they no longer have the user’s data at their disposal.
USER´S CONSENT
When registering at the MojPosao web portal, users give the following consent:
“I hereby give consent to the company Alma Career Croatia d.o.o. for the collection and processing of my personal data in accordance with the purpose indicated in these Terms and Conditions of Use. I give consent to my data being stored until their withdrawal, request for erasure or withdrawal of my consent.
I have been informed of my right to report any suspicion in regard to abuse of personal data in writing to the address: Alma Career Croatia d.o.o. (Data Protection Officer), Strojarska cesta 20, 10000 Zagreb or to the e-mail address: szop@mojposao.hr.“
Portal users may at any time withdraw the consent they gave when they registered. Consent may be withdrawn by selecting the option “Deactivate user account”, after which the profile will no longer be visible to the public and it will no longer be possible to submit job applications.
A deactivated profile may be reactivated at any time, independently or by sending a request in that regard to the e-mail address: korisnici@mojposao.hr.
Consent that Portal users may subsequently give and/or withdraw in their user profile by checking/unchecking the box next to each consent is found in the “Notification settings” section of each user profile:
- Notifications about job vacancies;
- Notifications about Portal settings;
- Other notifications;
- Monthly newsletter for job seekers;
- Monthly newsletter for employers;
- Notifications about new vacancies in positions for which I apply;
- Invitations for vacancies;
- Grading vacancies;
- Reminder for unfinished application;
- Reminder for saved positions.
SECURITY
The MojPosao web portal uses technical and organisational measures of the highest degree of security in order to protect personal data from accidental or unlawful destruction, loss, alteration, unauthorised disclosure of or access to personal data. Only authorised persons have access to personal data; they are aware of their responsibilities and are obligated to ensure confidentiality of personal data and protect the privacy of all of our users.
For that purpose, we conduct a regular analysis and verification of technical and organisational measures that we use, in order to maintain the highest degree of security and protection of personal data at all times.
CONTACT INFORMATION
If you have any questions in regard to the Privacy Policy, as well as in regard to exercising rights pursuant to the General Data Protection Regulation, you may contact our Data Protection Officer at the e-mail address: szop@mojposao.hr or by mail at the address: Alma Career Croatia d.o.o. (Data Protection Officer), Strojarska cesta 20, 10 000 Zagreb.
CHANGES TO THE PRIVACY POLICY
This Privacy Policy is subject to changes and/or amendments at any time.
The version of the Privacy Policy published on the website www.moj-posao.net will be deemed as the valid version.
Zagreb, 1 September 2023
