Here at STAFFINO we deeply care about the protection of your personal data. Therefore, all the personal data is processed in accordance with all applicable data protection regulations, such as the Regulation 2016/679 on the protection of natural persons with regard to the processing of personal data (General Data Protection Regulation) (“GDPR”), as well as with applicable local laws and standards.
This Privacy Policy reflects such regulatory obligations and clarifies how the personal data is processed by us while providing our services to our Customers and Clients.
This is us: STAFFINO s. r. o., with its registered seat at Volgogradská 84, 080 01 Prešov, Slovak Republic, ID No.: 47 645 407, registered in the Commercial Register maintained by the District Court Prešov, Section: Sro, Insert No. 31750/P (“STAFFINO”).
In the core of STAFFINO´s business, we collect, analyze and manage data on (i) evaluation of businesses, companies, units, public institutions (“Operations”) and (ii) evaluation of employees or other persons active within an Operation (“Employees“) given by independent third parties having a recent experience with the Operation and its Employees (“Customers”).
We tried to make this policy as simple and user friendly as possible, however, should you after reading it have any additional questions or inquiries, please do not hesitate to contact us, either directly at our seat: Teslova 26, 821 02 Bratislava, Slovak Republic, or via e-mail at: [email protected].
a) As a data controller, we process the personal data of our Customers and our Clients. These personal data mainly include identification and contact details, such as name, surname, nickname, e-mail, phone number. Our Customers also may provide us with other publicly available personal data through our social network partners.
b) As a data processor, we process for the benefit of our Clients the personal data of their Employees (or contract workers) and their Customers. The personal data of Client’s Employees usually include their names, surnames, titles, e-mails, work IDs, work positions, photographs and language skills. The personal data of Client’s Customers usually includes contact details, such as e-mail or phone number, but other personal data depending on what the Client provides us with also may be processed by us.
The personal data of our Customers, Clients and their Employees is collected and used always for the stipulated purposes and in accordance with applicable regulations. Therefore,
a) based on the legal ground of fulfillment of contract, we use the personal data of our Customers, submitted to us while registration and / or log-in into our Web Application for the purpose of correct identification, subsequent use of the Web Application in accordance with the Terms and Conditions for the use of Staffino Web Application (“Terms”) and for providing non-marketing updates related to the Web Application. Provision of the data is a contractual requirement and failure to provide it would make it impossible for us to provide our Customers with our services;
b) based on the legal ground of fulfillment of contract, we use the personal data of our Clients, submitted to us within registration and / or log-in into our Web Application for the purpose of correct identification and subsequent use of the Web Application in accordance with the Terms and for providing non-marketing updates related to the Web Application. Provision of the data is a contractual requirement and failure to provide it would make it impossible for us to provide our Clients with our services;
c) based on the legal ground of Client’s legitimate interests (improvement of customer services) and, depending on the scope of provided information, the compliance with legal obligations, we as a data processor may use the personal data of our Client’s Employees, provided to us by our Clients, for the purpose of intermediating digital Customer feedback to the Client and their Employees. For this purpose, some of the personal data is disclosed to the public online, via our Web Application, including name, work position, place of work and photograph. Provision of the data is a not a contractual nor a legal requirement and failure to provide it would make it impossible for us to provide our Clients with our services. Client’s Employees may always object to processing their personal data based on Client’s legitimate interests;
d) based on the legal ground of Client’s legitimate interests (improvement of customer services) or consent, we as a data processor may use the personal data of our Client’s Customers’, provided to us by our Clients, for the purpose of requesting and intermediating Customer feedback to the Client and their employees. Provision of the data is a not a contractual nor a legal requirement and failure to provide it won’t have any negative consequences for the Customer, however, it would make it impossible for us to provide our Customers with our services. Client’s Customers may always object to processing their personal data based on Client’s legitimate interests or withdraw their consent for processing;
e) based on the legal ground of our legitimate interests (direct marketing), we may use the personal data of our Customers (excluding Customers, whose personal data was provided to us by our Clients for the purpose of requested feedback), Clients and their Employees for the purpose of promoting our services via electronic means. Provision of the data is a not a contractual nor a legal requirement and failure to provide it won’t have any negative consequences. Customers, Clients and their Employees may always object to processing their personal data for marketing purposes based on legitimate interests. Should any objection be raised we will cease using the data for marketing purposes;
f) based on the legal ground of compliance with legal obligations, we may use the personal data of our Customers, Clients and their Employees for the purpose of adhering to applicable legal obligations, such us the archiving regulations. Provision of the data is a legal requirement and failure to provide it would make it impossible for us to adhere to these legal obligations;
g) based on the legal ground of our legitimate interests, mainly for the interest of improving our services and protecting our legal rights and interests, we may use the personal data of our Customers, Clients and their employees for the purpose of improvement of our services and establishment, exercise or defense of legal claims;
h) based on the legal ground of consent we may use the personal data stated therein for the purposes stipulated therein. Providing the data is never required and the data subject may reject giving consent, or latter, withdraw it, without any negative consequences.
We guarantee your personal data will be used only for the stipulated purposes or compatible purposes in accordance with applicable regulations.
We also pledge not to transfer your personal data to any third countries, outside the EU, or to any international organizations.
The personal data we process are only provided to other persons within the limits of the law and based on appropriate agreements ensuring adequate protection.
4.1 Appointed data processors or sub-processors
We work with various business partners who help us provide and improve our services. Any personal data we share with such partners is processed only in accordance with our express instructions and subject to a strict confidentiality obligation. Subject to Client’s approval we may also use sub-processors.
4.2 Our partners mainly help us with (i) providing our services, (ii) providing data storage services, (ii) marketing communication, (iii) software engineering and programming, (iv) design, (v) new business, sales and support, (vi) customer experience consulting and analysis, etc.
4.3 Other recipients
We also share processed personal data with legal entities, natural persons and state and public authorities, if we in good faith believe that access to such information, its use, storage or disclosure is reasonably necessary for:
a) Compliance with relevant legal regulation, legal process or official request of a state or public authority;
b) Exercise and enforcement of relevant contractual terms;
c) Fraud prevention, investigation of fraudulent, technical or security incidents;
d) Protection of rights or interest of our company, our Clients, our Customers or the public, as required or permitted by law.
While sharing the personal data, we always ensure not to provide more details as is absolutely necessary for the given purpose.
Applicable legal regulations guarantee data subjects certain rights in respect to personal data protection. To exercise these rights, you may use our contact details specified above. Depending on whether in respect to a particular data subject we act as data controller or a data processor we will either (i) resolve your request directly, or (ii) forward your request to the respective Client, acting as data controller, and upon his request help him to resolve it. When acting as data controller we will try to respond to your request at our earliest convenience, however we will always make sure to respond within one month of receiving the request. Taking into account the complexity and number of the requests we also may further prolong the period for response by another two months.
Should the request be manifestly unfounded or excessive we may charge you an administrative fee or refuse to act on your request, otherwise you may exercise your rights free of charge. In case of doubts we may ask you for further verification of your identity.
Data subjects have guaranteed mainly the following rights:
a) Right to access
As a data subject, you have the right to require confirmation as to whether we process your personal data, and where that is the case, require a copy of these personal data, together with additional information stipulated in the Art. 15 of the GDPR.
b) Right to rectification
To process accurate personal data we ask you to notify us of any changes to your personal data. In case, we process inaccurate or not actual data, we will amend it upon your request.
c) Right to erasure
Should your situation meet the conditions of Art. 17 of the GDPR, you have the right to require erasure of your personal data. For example, you can request erasure of your personal data, if you withdrew your consent for data processing and there is no other legal ground for the processing, or in case we process your personal data unlawfully, or once the personal data are no longer necessary in relation to the purposes for which they were collected for or otherwise processed. We will however not erase your personal data if we need it for establishment, exercise or defense of legal claims.
d) Right to restrict processing
Should your situation meet the conditions of Art. 18 of the GDPR, you have the right to require restriction of processing of your personal data. For example, you can request restriction of processing, when you contest the accuracy of the personal data, or if the processing is unlawful and you oppose the erasure of the personal data and request restriction of their use instead. We will however not restrict the processing of your personal data entirely if we need it for establishment, exercise or defense of our legal claims.
e) Right to data portability
Should the processing be based on consent or fulfillment of contract concluded with you, and the processing is carried out by automated means, you have the right to receive from us your personal data in a structured, commonly used and machine-readable format. Furthermore, should you wish and should it be technically feasible, you have the right to require we directly transmit those data to another controller.
f) Right to object
As a data subject, you have the right to object on grounds relating to your particular situation, to processing of personal data based on legitimate interests, including profiling. Based on your request, we shall restrict processing the personal data unless and until we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms. Should your interests, right and freedoms prevail, we will erase your personal data.
Should you object to processing your personal data for marketing purpose, we will always erase your personal data and cease to process it for this purpose.
g) Right to lodge a complaint
If you believe our processing of your personal data infringes the GDPR, as a data subject, you have a right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement. For the territory of the Slovak Republic the role of the supervisory authority fulfills the Office for Personal Data Protection of the Slovak Republic, with registered seat at Hraničná 4826/12, 820 07 Bratislava, Slovak Republic, webpage: www.dataprotection.gov.sk, phone: +421/2/3231 3214.
h) Right to withdraw consent
Should the processing of your personal data be based on consent, you have the right to withdraw it at any time. Withdrawing consent however will not affect the processing performed prior your withdrawal.
The personal data we process is collected either from (i) our Clients, who may be your employer or service provider, or (ii) from you directly.
Should you access our Web Application through your social network, upon your consent, we process your personal data publicly available therein.
Depending on the legal basis and purpose of processing we store your personal data for various periods of time. In general, we process and store your personal data:
a) Based on consent for the period of time stated therein, or until you withdraw your consent;
b) Based on compliance with legal obligations, until we are so obliged by the law;
c) Based on performance of contract, until the end of performance of the contract (provision of services) or until the end of precontractual measures;
d) Based on legitimate interests, until these interests override your rights and interest or until the end of performance of the contract (provision of services).
After such time, we will be able to process and store your personal data only for compatible purposes or special purposes, such as statistics or archiving. The personal data is always stored only on our hard drives, servers or on the servers of our reliable business partners such as cloud services providers.
We reserve the right to amend this Privacy Policy at any time, in particular due to legislative changes, or other changes to means and purposes of the processing. Your rights arising out of this Privacy Policy will not be restricted in a consequence. Should there be any material changes to this Privacy Policy, we will let you know in an appropriate manner beforehand.
All previous versions of this Privacy Policy may be found at: www.staffino.com/privacy-policy.html.
We use various cookies on our website. Some are necessary for the proper functioning of the site, others we can only use with your consent. You can find more information about cookies on our site here.
Cookie | Duration | Description |
---|---|---|
__cf_bm | 1 hour | This cookie, set by Cloudflare, is used to support Cloudflare Bot Management. |
__hssc | 1 hour | HubSpot sets this cookie to keep track of sessions and to determine if HubSpot should increment the session number and timestamps in the __hstc cookie. |
__hssrc | session | This cookie is set by Hubspot whenever it changes the session cookie. The __hssrc cookie set to 1 indicates that the user has restarted the browser, and if the cookie does not exist, it is assumed to be a new session. |
cookielawinfo-checkbox-advertisement | 1 year | Set by the GDPR Cookie Consent plugin, this cookie records the user consent for the cookies in the "Advertisement" category. |
cookielawinfo-checkbox-analytics | 1 year | Set by the GDPR Cookie Consent plugin, this cookie records the user consent for the cookies in the "Analytics" category. |
cookielawinfo-checkbox-functional | 1 year | The GDPR Cookie Consent plugin sets the cookie to record the user consent for the cookies in the category "Functional". |
cookielawinfo-checkbox-necessary | 1 year | Set by the GDPR Cookie Consent plugin, this cookie records the user consent for the cookies in the "Necessary" category. |
cookielawinfo-checkbox-others | 1 year | Set by the GDPR Cookie Consent plugin, this cookie stores user consent for cookies in the category "Others". |
cookielawinfo-checkbox-performance | 1 year | Set by the GDPR Cookie Consent plugin, this cookie stores the user consent for cookies in the category "Performance". |
CookieLawInfoConsent | 1 year | CookieYes sets this cookie to record the default button state of the corresponding category and the status of CCPA. It works only in coordination with the primary cookie. |
viewed_cookie_policy | 1 year | The GDPR Cookie Consent plugin sets the cookie to store whether or not the user has consented to use cookies. It does not store any personal data. |
wpEmojiSettingsSupports | session | WordPress sets this cookie when a user interacts with emojis on a WordPress site. It helps determine if the user's browser can display emojis properly. |
Cookie | Duration | Description |
---|---|---|
_cfuvid | session | Description is currently not available. |
Cookie | Duration | Description |
---|---|---|
ANONCHK | 10 minutes | The ANONCHK cookie, set by Bing, is used to store a user's session ID and verify ads' clicks on the Bing search engine. The cookie helps in reporting and personalization as well. |
bcookie | 1 year | LinkedIn sets this cookie from LinkedIn share buttons and ad tags to recognize browser IDs. |
bscookie | 1 year | LinkedIn sets this cookie to store performed actions on the website. |
li_sugr | 3 months | LinkedIn sets this cookie to collect user behaviour data to optimise the website and make advertisements on the website more relevant. |
MUID | 1 year 24 days | Bing sets this cookie to recognise unique web browsers visiting Microsoft sites. This cookie is used for advertising, site analytics, and other operations. |
VISITOR_INFO1_LIVE | 6 months | YouTube sets this cookie to measure bandwidth, determining whether the user gets the new or old player interface. |
VISITOR_PRIVACY_METADATA | 6 months | YouTube sets this cookie to store the user's cookie consent state for the current domain. |
YSC | session | Youtube sets this cookie to track the views of embedded videos on Youtube pages. |
Cookie | Duration | Description |
---|---|---|
__hstc | 6 months | Hubspot set this main cookie for tracking visitors. It contains the domain, initial timestamp (first visit), last timestamp (last visit), current timestamp (this visit), and session number (increments for each subsequent session). |
_clck | 1 year | Microsoft Clarity sets this cookie to retain the browser's Clarity User ID and settings exclusive to that website. This guarantees that actions taken during subsequent visits to the same website will be linked to the same user ID. |
_clsk | 1 day | Microsoft Clarity sets this cookie to store and consolidate a user's pageviews into a single session recording. |
_fbp | 3 months | Facebook sets this cookie to display advertisements when either on Facebook or on a digital platform powered by Facebook advertising after visiting the website. |
_ga | 1 year 1 month 4 days | Google Analytics sets this cookie to calculate visitor, session and campaign data and track site usage for the site's analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognise unique visitors. |
_gat_UA-* | 1 minute | Google Analytics sets this cookie for user behaviour tracking. |
_gcl_au | 3 months | Google Tag Manager sets the cookie to experiment advertisement efficiency of websites using their services. |
_gid | 1 day | Google Analytics sets this cookie to store information on how visitors use a website while also creating an analytics report of the website's performance. Some of the collected data includes the number of visitors, their source, and the pages they visit anonymously. |
_hjSession_* | 1 hour | Hotjar sets this cookie to ensure data from subsequent visits to the same site is attributed to the same user ID, which persists in the Hotjar User ID, which is unique to that site. |
_hjSessionUser_* | 1 year | Hotjar sets this cookie to ensure data from subsequent visits to the same site is attributed to the same user ID, which persists in the Hotjar User ID, which is unique to that site. |
AnalyticsSyncHistory | 1 month | Linkedin set this cookie to store information about the time a sync took place with the lms_analytics cookie. |
CLID | 1 year | Microsoft Clarity set this cookie to store information about how visitors interact with the website. The cookie helps to provide an analysis report. The data collection includes the number of visitors, where they visit the website, and the pages visited. |
hubspotutk | 6 months | HubSpot sets this cookie to keep track of the visitors to the website. This cookie is passed to HubSpot on form submission and used when deduplicating contacts. |
MR | 7 days | This cookie, set by Bing, is used to collect user information for analytics purposes. |
SM | session | Microsoft Clarity cookie set this cookie for synchronizing the MUID across Microsoft domains. |
Cookie | Duration | Description |
---|---|---|
li_gc | 6 months | Linkedin set this cookie for storing visitor's consent regarding using cookies for non-essential purposes. |
lidc | 1 day | LinkedIn sets the lidc cookie to facilitate data center selection. |
pll_language | 1 year | Polylang sets this cookie to remember the language the user selects when returning to the website and get the language information when unavailable in another way. |
trx_addons_is_retina | 1 year | ThemeREX sets this cookie to determine if the user has a retina display. |
UserMatchHistory | 1 month | LinkedIn sets this cookie for LinkedIn Ads ID syncing. |
Cookie | Duration | Description |
---|---|---|
_uetsid | 1 day | Bing Ads sets this cookie to engage with a user that has previously visited the website. |
_uetvid | 1 year 24 days | Bing Ads sets this cookie to engage with a user that has previously visited the website. |
SRM_B | 1 year 24 days | Used by Microsoft Advertising as a unique ID for visitors. |