1. Scope and controller
This Privacy Policy explains the processing of personal data at ARYNQO, recruitment platform and professional development operated by CRIATIVALCANCE, UNIPESSOAL LDA. . It covers visitors, candidates, students, company representatives and people who contact the support of the platform. It does not constitute a generic authorisation to process data or replace the specific consents required by law.
CRIATIVALCANCE, UNIPESSOAL LDA, NIPC 518143350. Avenida Fernão de Magalhães, No 481, 2nd floor, Room D, 3000-177 Coimbra, Portugal. Email: info@creativalcance.com. . Telephone: +351 913 784 204 (called for the national mobile network).
A CRIATIVALCANCE determines the purposes and means of the treatment associated with the management of the ARYNQO. . A company that receives an application or data from a candidate is responsible for the treatments it carries out for its own recruitment process. You must identify yourself to the applicant and provide the applicable privacy information. The responsibility of ARYNQO For your operations it remains.
2. Data collected and their origin
The data is provided by the user in the registration, profile editing, curriculum loading, applications and contacts with the platform. They can be produced during the use of the service, such as application states, contact requests, notifications and compatibility results. Companies provide information from their representatives, institutional information and vacancies requirements.
Depending on the features used, name, email, phone, location, photography, account identifiers and authentication information are treated; training, experience, skills, languages, desired professional area, function, seniority, availability, work model, preferred regions and salary expectations; curriculum and other elements that the user includes in your profile.
In the case of representatives of undertakings, business identification and contact data, the relationship with the organisation and records of use of the account shall be processed. The name, NIF and business contacts may also constitute personal data, in particular in the case of individual entrepreneurs.
Technical data may include IP address, date and time of access, browser, device, error records and events necessary for the security and operation of the service. The collection for navigation or advertising analysis by means of non-required identifiers depends on consent.
Do not include in the curriculum numbers of identification documents, bank data, health information, religious or political convictions, trade union membership, data on sexual life or criminal history that are not necessary. A ARYNQO does not require these elements to create an account or calculate professional compatibility. Third party data, such as professional references, shall be sent only with appropriate legitimacy and information to the respective holders.
3. Purposes and legal grounds
The creation and management of the account, authentication, profile availability, processing of applications and professional recommendations requested by the user shall be based on the execution of the platform usage contract or pre-contractual steps at your request, to the extent that the treatment is objectively necessary for the functionality chosen.
The management of business customer representatives, security, abuse prevention, problem solving and rights defence may be based on legitimate interests of the CRIATIVALCANCE, after weighing the rights of the persons affected. This foundation does not waive the consent required for cookies or promotional communications.
Compliance with legal obligations is based on the treatment imposed by tax, accounting, data protection or cooperation with authorities. Consent is used for optional purposes that depend on it, including promotional communications and unnecessary technologies.
Contact requests relating to the use of the service shall be treated to support and implement the contractual relationship. Other requests shall be dealt with on the basis of the legitimate interest in responding to the interlocutor or, where applicable, for pre-contractual proceedings at his request.
Mandatory fields are identified in the forms. The lack of a necessary data may prevent the creation of an account or the use of a concrete functionality. Optional fields do not condition access to features that do not depend on them.
4. Applications and visibility to companies
The submission of an application involves making available to the company responsible for the vacancy the professional data and contacts necessary for the evaluation and monitoring of the application, including the curriculum when associated with the profile. Before applying, check the contents of your profile and the submitted file.
Outside an application, the platform distinguishes the presentation of a professional synthesis from access to the full profile and contacts. In the compatibility recommendations, this synthesis may include professional title, location, desired area, seniority, work model and type of talent, without automatically providing name, email, photography or curriculum.
The company can consult professional summaries and send requests for contact to applicants who accept them. Access to identity, contacts and curriculum depends on the acceptance of an application by the applicant or on an application for a job in that company. This rule also applies to profiles previously classified as open and Premium features available free of charge. The option of closed contacts prevents new requests and limits the allowed access by previous requests; direct application is a way of access.
The subsequent change in visibility limits new accesses according to the applicable configuration, but does not recover documents already legitimately downloaded by a company. In order to exercise rights to copies retained by the company, you may contact that entity. A CRIATIVALCANCE assists in the identification of the recipient when necessary.
5. Artificial intelligence and professional compatibility
A ARYNQO it uses automated processing to structure curricular information, support the development of profiles and vacancies and compare professional data with opportunities requirements. When extracting a resume, the file and its contents can be sent to the artificial intelligence provider OpenAI. . Suggestions should be reviewed by the user before use.
The compatibility calculation considers the information available on skills, experience, professional area and vacancy requirements, and can meet the location preferences, work model, availability and remuneration when these elements are part of the comparison. Lack of information, differences in terminology or errors in extraction may alter the result.
A score expresses an estimate of adequacy to the criteria analyzed. It is not a probability of hiring or certifying future skills, identity or performance. The ordering of results may influence the visibility of opportunities and candidates; it should not be used as the sole criterion to exclude or select people.
The hiring decisions are for companies. The model of use envisaged for the ARYNQO does not include rejection or contracting based solely on an automated decision having similar legal or important effects. Such a use would require own analysis, admissible ground of appeal and the guarantees provided for in Article 22 of the GDPR.
You can ask for clarifications about the data and criteria used, correct inaccurate information and ask for human appreciation of a result that affects you. No sensitive characteristics should be inferred from the curriculum or photography to determine compatibility. Curriculum data should not be reused to develop or train models for different purposes without their own analysis and information.
6. Notifications and promotional communications
Account confirmation, access recovery, application changes, contact requests and other messages required for the service are operational communications. The preferences made available in the account allow managing optional alerts. Deactivation of alerts does not prevent the sending of messages essential to security or a legal obligation.
Newsletters and email advertising depend on the basis permitted by applicable law and, when required, on separate consent. The creation of an account, the reading of this policy and the application for a job do not amount to a promotional subscription. It is possible to withdraw consent and cancel the shipments via the mechanism indicated in the message or by contacting the CRIATIVALCANCE.
7. Addressees and technological services
Recipients include companies to which the applicant presents or grants access, authorized employees of the CRIATIVALCANCE, technological and professional providers supporting the service and authorities where there is a legal obligation or legitimate request. The sale of curriculum data or its use by companies for campaigns other than recruitment shall not be authorised.
The platform code integrates Supabase for authentication, database and storage, OpenAI for artificial intelligence functions and Resend for email notifications. The hosting and availability infrastructure of the website involve Vercel, according to the operational configuration adopted. The effective use of each provider depends on the functionality and configuration in service.
With your consent for statistics, Google receives browsing data on public pages through Google Analytics 4. These data include browser and session identifiers, standard pages and technical information. Integration does not send account data, resumes, contacts or applications and does not measure the reserved areas. The purposes, cookies, durations and forms of withdrawal are described in the Cookie Policy. The refusal does not prevent the use of ARYNQO.
When acting as subcontractors, providers shall process data with documented instructions and appropriate contract. Where a provider or a receiving undertaking acts as an independent person, the information to be provided by that entity shall also apply. Access must be limited to the data necessary for the actual purpose.
8. International transfers
Some providers may process data or allow access from countries outside the European Economic Area. The location of the main server does not in itself exclude an international transfer by support or other services.
Where a transfer takes place, the mechanisms permitted by Chapter V of the GDPR shall apply: an applicable adequacy decision or appropriate guarantees, including standard contractual clauses, accompanied by the assessment and the necessary additional measures. The coverage of a provider by a certification or adequacy decision shall not be presumed without checking its scope.
You may request information about the countries concerned and a copy or description of the guarantees applicable through the contacts indicated in this policy, with the protection of confidential information that is not necessary for the exercise of your rights.
9. Conservation and erasure
Account and profile data are kept as necessary for the availability of the requested service. The maintenance of an account does not justify indefinitely keeping all data produced during its use. Applications, requests for contact and results of compatibility should be eliminated or anonymised when no longer necessary for the purpose of their treatment.
Upon request for deletion or closure of an account, data which have no other grounds for storage should be deleted. The elements strictly necessary for the fulfilment of a legal obligation, the settlement of a dispute or the defence of rights may be kept separately for the period applicable and with limited access.
Applications for support shall be kept for as long as is necessary for response and follow-up. The technical records shall be kept in proportion to the safety and diagnostic needs. Evidence of consent and withdrawal shall be kept as necessary for demonstrating compliance with legal obligations.
Deletion in production systems and backups can occur at different times. Backups shall remain protected and subject to their replacement cycle; a replacement shall not reactivate data for which deletion has been determined. The undertaking receiving an application shall define and communicate its own conservation criteria.
10. Safety and incidents
A CRIATIVALCANCE It shall apply technical and organisational measures proportionate to the risks, including access control, authentication, limitation of permissions and protection of curriculum files. The measures are reviewed as the platform evolves; there is no absolute guarantee of absence of failures.
The user must protect credentials, avoid sharing the account and communicate suspicious accesses. Where a breach of personal data requires communication to the supervisory authority or to the owners, CRIATIVALCANCE Proceeds in accordance with legal requirements and deadlines.
11. Rights and complaints
Under the terms and limits of the GDPR, you can request access, rectification, erasure, limitation of the processing and portability of the data, as well as oppose treatments based on legitimate interests. You may withdraw consents at any time without affecting the lawfulness of the treatment performed before withdrawal. The opposition to direct marketing covers the definition of profiles associated with this purpose.
Send the order to info@creativalcance.com or to the postal address indicated at the beginning, identifying the account and the desired right. Additional identification elements shall be requested only when necessary and proportionate. The reply shall normally be given within one month; a legally admissible extension shall be communicated and substantiated.
Pode apresentar reclamação à Comissão Nacional de Proteção de Dados, em https://www.cnpd.pt, ou à autoridade de controlo competente. O exercício destes direitos não depende da utilização prévia do Livro de Reclamações.
12. Smaller Cookies and Updates
The Cookie Policy describes the storage on the device and the management of preferences. Consents concerning cookies are separated from consents for promotional communications.
The use of the platform by minors requires an assessment of the age and capacity applicable to functionality. The legal possibility of a minor consenting to certain treatments is not equivalent to the ability to conclude any contract. The collection of data from minors shall be limited to what is necessary and, where required, involve their respective legal representative.
Changes relevant to the policy will be communicated appropriately and published with an indication of the date. A new purpose that requires consent will not only be legitimized by updating the text. The future mobile application will be accompanied by own information on specific permissions, notifications and technologies before they are made available.
