Privacy Statement and Personal Data Protection

The current Personal Data Processing policy describes
the way we collect and use the gathered personal data, HNL Attitude SRL, still
named HASHERA, reserving the right to modify it in accordance with the applicable legal regulations. The
new alterations would have effects starting with the moment of their
publication on the website. By submitting an application for one of the jobs
HASHERA offers or by signing The Agreement
on Personal Data Processing
, you agree with
the collection, processing and transferring your data
, as described
in this Personal Data Processing Policy
.
If you do not want your information to be collected, used and transferred based
on this policy, you can withdraw your agreement. In order to withdraw your
consent, please send us an email to dpo@hashera.ro.
In case you decide to do that, your information will be removed from our data base. The collected information is stored in
European Union and are subject of the
provisions of The General Data Protection Regulation 2016/679.

Information we collect:

We generally collect and process the following
personal data about you when you want to apply for one of the jobs HASHERA has
to offer, such as:

  • Your contact information, certifications,
    diplomas and information about the job you want;
  • Name, address, e-mail address, phone number and
    other contact information;
  • CV and/or letter of intent, previous and/or
    relevant work experience or other experiences, education or other
    information you provide us during the process of selection and
    recruitment;
  • Information from interviews and phone
    conversations you might have with the HASHERA members, if applicable;
  • Any other demographical information obtained
    during the selection and recruitment process, such as, but not limited to
    gender, information about your citizenship, medical or health information
    provided by the candidate, criminal record etc.;
  • Information from references and/or information
    from background checks (if necessary), including information provided by
    third parties; including, but not limited to letters of recommendations;
  • Information about any history from the previous
    employment relationships.

HASHERA’S Recommendations:

The CV you are sending to us does not have to contain
data from the special GDPR categories regarding
to:

  1. racial or ethnical
    origin;
  2. political,
    philosophical or religious beliefs;
  3. the membership to
    a union or to a political party;
  4. the history of
    crimes, criminal proceedings, penalties and/or fines;
  5. any nationally
    identification number of a person.

By making available any or
all of the information from this section in your CV, you agree to bear entirely
all the associated risks, because HASHERA
does not have any obligation or responsibility in this respect. HASHERA does
not process any of the data mentioned in the current recommendations section
during the selection or recruitment process.

How we use the information we collect:

Your personal data may be used by HASHERA for the
following selection and recruitment-employment related purposes:

  • Evaluating the skills, qualifications and
    interests about the career opportunities in relation to the profile and
    the job requirements;
  • Verifying your information and checking the
    references and/or background checks (if necessary) including mass-media,
    social media and the former employers/co-workers/superiors/people working
    under you or something similar;
  • Communicating with you regarding the recruitment process;
  • Improvement of the HASHERA’S recruitment process,
    including upgrading the recruitment practices;
  • Respecting the laws, regulations, legal applied
    processes.

During the selection and recruitment process, HASHERA
will collect, process and store information
from your candidate file in HASHERA’S
data base.

Who has access to your information?

HASHERA limits the access to your personal information
you provide strictly at the persons involved in the selection and recruitment
process, respectively at the level of the employers for whom the selection and
recruitment process takes place.

All the personal information provided by you when
submitting and applying for one of the jobs HASHERA offers, will be transferred
to the employers for whom HASHERA organizes the selection and recruitment
process, under a non-disclosure agreement signed between HASHERA and the
specific employer, in a closed circuit which would not allow any security leak
or unauthorized access to your data or processing it for any other purpose than
the one you would be notified about and give your consent for.

In case processing your
personal data is necessary for purposes other than those related to recruitment
(internal statistics, analysis, databases for future positions, etc.), you will
be notified and you will be asked for an additional agreement for such
processing.

HASHERA may be required to
disclose your information to third external parties, such as local authorities,
courts and tribunals, regulatory bodies and/or law enforcement
bodies/authorities, national security bodies (if applicable) in order to
respect the laws and the applicable regulations or as an answer to a legal
procedure.

      Minors

HASHERA does not deliberately collect during the
recruitment process information about minors.

How long will we keep personal data?

Unless, during and after the recruitment process, you
object to the processing of Personal Data by us and / or you request the
deletion of your personal data, there will be applied a retention period, in
accordance with our policy regarding data retention, for the following
categories of personal data:

  • We do not stock
    your personal data more than necessary for the purpose we did in the first
    place or for respecting a law or a statutory requirement or a legitimate
    interest given in order to defend the HASHERA and/or your interests in court or
    in front of an authority (e.g. National Council for Combating Discrimination).
  • Recruitment data
    of the rejected candidates: for 36 months, except the situation regarding claims or reclamations, or
    eventually legal actions at court or at competent authorities (ref. discrimination)
    that need to be solved.

Your legal rights

As the data subject you have
specific legal rights regarding the personal data that we collect from you.
HASHERA respects your individual rights and takes care of your interests
properly.

  • Right to information: the right to receive
    information regarding the personal data processing operations performed by
    HASHERA. Respecting this right by HASHERA is achieved through this present
    informing;
  • Right to access: the right to get from HASHERA a confirmation
    about whether it processes or not personal data that concerns you and, if
    so, the right to get access to the specific data and provision of
    information about data processing;
  • Right to withdraw the consent: the right to withdraw your consent about
    processing Personal Data at any moment;
  • Right to rectification: the right to obtain from HASHERA, without
    unjustified delays, the rectification of the incorrect data that concerns
    you or the completion of Personal Data that are incomplete;
  • Right to erase data: the right to obtain from HASHERA, without
    unjustified delays, erasure Personal Data that concerns you when any of
    the following situations laid down in GDPR occurs:
  • personal data that are no longer needed for achieving
    the purposes for which they have been collected or processed for by HASHERA;
  • you withdraw your given consent for data processing
    for the above-mentioned purposes;
  • personal data have been illegally processed by
    HASHERA;
  • personal data need to be erased in order to respect a
    legal obligation incumbent on HASHERA.
  • Right to restrict the processing: the right of obtaining from HASHERA the
    restriction of the processing Personal Data in any of the following
    circumstances laid down in GDPR, such as:
  • You question the accuracy of the data HASHERA processes.
    The processing can be restricted a period/while, during which HASHERA can check
    the accuracy of the data;
  • Processing Personal Data by HASHERA is illegal, and
    you do not want erasing your Personal Data, but you require restricting their
    use by HASHERA;
  • HASHERA does not need your Personal Data, but you
    request them for establishment, exercising or defending a right in court or in
    an administrative procedure;

  • Right to data portability: the right to receive from HASHERA personal data
    you submitted through your candidacy file that concern you and that
    HASHERA has provided, in a structured format, currently used and that can
    be automatically read and to give these data to another operator, when the
    technical ways allow it. You have this right only when the processing is
    based on your consent or when the processing is made through automatic
    ways.
  • Right to object: the right to object the processing made by
    HASHERA on grounds of your particular situations, having as legal reason
    your own legitimate interest.
  • Right not to make subject of a decision based
    exclusively on automatic processing, including creation of profiles
    (any automatic processing that uses personal data
    for evaluating certain personal aspects of you, such as personal preferences,
    health etc.) which produces juridical effects and concerns the targeted
    person.
  • Right to file a complaint: You have the right to file a complaint to dpo@hashera.ro if you want to defend your
    rights and to request a rectification of your situation, in the case of a
    violation of the Personal Data processing protection by HASHERA and if you
    consider that your complaint would not be solved or would not be solved
    properly, you can file the complaint at National Supervisory Authority for
    the Processing of Personal Data (ANSPDCP).

To exercise the
above-mentioned rights, you can send us a written request (i) by e-mail to dpo@hashera.ro,
(ii) by post/courier to the address: Bucuresti, Strada Mares Scarlat nr.
45, ap. 11 or (iii) directly by submission to HASHERA’S office. After receiving
the letter, HASHERA will return to you with
an answer, free of charge and without unjustified delays, within 30 days from
the date of receipt of the request.