Privacy Policy | Postwork

This personal data protection policy (hereinafter the “Privacy Policy”) explains how POSTWORK P.C. and its affiliated companies (collectively hereinafter “we” or “POSTWORK”) collect, use and share the personal data of visitors (hereinafter “you” or the “User”) to the job search and recruitment website https://www.postwork.gr, as well as the corresponding mobile applications (mobile apps) owned and operated by POSTWORK (hereinafter the “Platform”). By visiting and using the Platform and the services offered on it (hereinafter the “Services”), you agree to and accept this Privacy Policy.
Please note that this Privacy Policy does not apply to, and does not govern, your interactions with other Users of our Platform. Users must process the data they collect, and obtain the relevant consent where required, at their sole responsibility and in accordance with their own personal data protection policies. For information on how our Users handle the personal data you provide through the Platform or through your use of our Services, please consult their privacy policies.

Privacy Policy Framework

Your privacy is very important to us and we are committed to protecting it. For this reason, we not only comply with applicable laws and regulations but also follow best practices for personal data security and privacy, and we do not share personal data with third parties except as described in this Privacy Policy. For the purposes of this Privacy Policy, “Personal Data” (hereinafter the “Data”) means any information relating to an identified or identifiable natural person. A natural person can be identified, directly or indirectly, by reference to an identifier such as a name, an identification number (e.g. a national identity card number), location data, an online identifier (password) or any other specific factor that may lead to the physical, genetic, mental, economic, cultural or social identity of that natural person.
The Platform is not intended for children under the age of 16, and we endeavour not to collect personal data from children under the age of 16. Postwork directs its Services and the Platform to adults and not to children under 16. If we become aware that we have collected personal information from a child under the age of 16, we will delete that information immediately. If you believe that we may hold any information from a child under the age of 16, please contact us at support[at]postwork.gr.

Data Processors

Under this Privacy Policy, Postwork usually handles a User’s Data as a “Processor”. This means that we collect, store and manage each User’s Personal Data in our capacity as provider of our Services to each User who wishes to post a job vacancy (hereinafter the “Job Offer”) and to use our Services (hereinafter the “Employer”). This applies to the vast majority of the Personal Data we hold, whether you are (i) an Employer or (ii) any User, other than the Employer’s own personnel, who is seeking employment (hereinafter the “Job Applicant”). When we handle Data as a Processor, the rules for the processing of your Data, including, by way of example, the manner in which such data will be used and disclosed, are determined by the Employer’s respective personal data protection policy. Postwork, as Processor, processes your Data in accordance with the Employer’s instructions. Consequently, most of the provisions of this Privacy Policy do not apply when we act as a Processor.

Data Controllers

There are, however, times when we act as Data Controllers on the Platform. This means that we collect and use Data on our own behalf and not as a provider of the Services to the Employer. Accordingly, this Privacy Policy applies when we act in our capacity as Data Controller. This is the case when you visit our Platform or use our Services in any context other than applying for a job.

What Data we collect

Data you provide to us directly

You can generally visit our Platform without directly disclosing any Data about yourself. We do not collect Data from Platform Users unless the User voluntarily provides us with such data, as defined in this Privacy Policy. However, in order to become a registered user of the Services, Postwork requires the creation of a User account, both for Job Applicants and for Employers, in which you are asked to provide Data to us directly. Such Data includes, by way of example, the following:

Name
Password
Place of residence
Email address
Mobile phone number
Curriculum vitae details, such as employment history and education information

Job Applicant

If you are a Job Applicant, by clicking the “Log in” or “Sign up” button you will be asked to log in to the Platform via your personal Facebook account, your Google account, your email and password, or Apple. Once you have logged in to the Platform as described above, we collect all of the following data, provided that you have entered them in your account: full name and email address. If you log in and register on the Platform using your email address, you will be asked to create your Profile on the Platform and enter your CV details: full name, year of birth, place of residence, profile photo, work experience and any other information contained in a CV. The Profile you create on the Platform also constitutes your CV, which will be assessed by the Employer you are interested in. The details you must enter in order to create a Profile are your full name, mobile phone number and email address. The provision of any additional information beyond what is required at registration is mandatory in order for you to be able to submit a job application to an Employer, such as, by way of example, a photograph, education, professional experience, driving licence details and any foreign languages you speak. The above data will be available to the Employers to whom you submit a job application.
Postwork may from time to time, by amending this Privacy Policy, change the details that make up your Profile, with the aim of improving your Profile and providing the Service more effectively. After logging in and registering on the Platform and creating a User account and Profile, the Job Applicant may apply through the Platform for any Job Offer of interest, based on the job criteria selected when creating their Profile on the Platform (specialty, seasonality, place of work, etc.). You may at any time monitor, through the Platform, the progress and current status of your application to an Employer.
If the Employer selects you, a communication window (chat) automatically opens between you and the Employer, giving you the opportunity to communicate immediately and directly. Once the Employer has selected you, the Employer has direct access to all of your Profile data.

Employer

If you are an Employer, by clicking the “Log in” or “Sign up” button you will be asked to log in to the Platform via your personal Facebook account, your Google account, your email and password, or Apple. Once you have logged in to the Platform as described above, we collect all of the following data, provided that you have entered them in your Facebook or Google account: email address. If you log in and register on the Platform using your email address, you will be asked to create your Profile on the Platform, providing an email address, and to enter your business details. After logging in and registering on the Platform and creating a User account and Profile, the Employer may publish a Job Offer.

Data from third parties

We may receive information about you from public and commercially available sources (to the extent permitted by law), which we may combine with other information we receive from you. We may also receive information about you from third-party social networking services when you choose to connect with those services.

Other Data we collect

We may also collect other Data about you, your device or your use of the services in ways that we describe at the point of collection or otherwise with your consent. Such Data includes, by way of example, the following:

MAC address information, IP address, operating system version and other statistical data.
Dates and times of visits to the Platform
Information about actions performed on the Platform (such as page views, viewing a Job Offer or the progress of an application)
The general geographic location from which a visitor accesses the Platform. You may choose not to provide us with certain types of information, but if you do so, your ability to use certain Services may be affected.

Aggregate Data

Postwork may also automatically collect and process information about the general use of the Platform and the Services. When you perform certain actions using the Services, the Platform may monitor your actions in order to facilitate your browsing and your use of the features of the Platform and of the Services you commonly use, as well as the volume of traffic to the Platform, the frequency of visits, the type and time of transactions, the browser type, address and operating system, and statistical information about the types of jobs offered and the qualifications of the Job Applicants who submit their CVs. Postwork will collect, monitor and analyse such information in a general manner that will not lead to your identification. This aggregate data may be used by Postwork and its third-party partners to assist Postwork in operating the Platform and the Services, and may be provided to other third parties to enable them to better understand the operation of Postwork; however, this information will be aggregated and will not contain any personal data that could lead to the identification of the User.

How we use your Data

Below you will find details of how we use your Data and why:

To register you on the Platform or for a Service.
To provide a Service or feature you have requested.
To provide personalised content and recommendations based on your past activity on our Services.
For advertising purposes, such as providing personalised advertisements and sponsored content, and sending you promotional updates.
To enable us to fulfil our obligations under any contract with you and to serve you within the framework of that contract.
When we collect information about you through our Platform before you have applied for a specific Job Offer, the legal basis on which we process your personal data is the performance of an agreement between us, namely the development of your Profile and the provision of Postwork newsletters and other information in response to your request.
When we collect information about you through a Job Offer, the legal basis on which we process your personal data is the performance of our agreement with you and the Employer. When we use your personal data for what is strictly necessary for an application or for maintaining your profile on the Platform, we do so in pursuit of our legitimate interest in informing you of relevant activities and opportunities.
To understand how users use our Services, in order to improve them and to develop new products and services.
To inform you about upgrades, special offers, new features and other new services from Postwork.
To run contests or promotions, as permitted by law, and for any other use with your express consent.
To protect the rights, property or safety of ourselves or of third parties.
To comply with our legal obligations
For our legitimate interest. In certain cases, we collect your Data in a manner that may reasonably be expected as part of the operation of our business and that does not materially affect your rights, freedoms or interests. Our legitimate interests include marketing, providing and developing our Services, understanding the behaviour and preferences of Users, fraud protection and prevention, and compliance with applicable legal requirements and our policies.

Who we share your Data with

We will not share your Data with third parties for their own independent business or marketing purposes without your consent. Postwork may transfer personal data to third parties, such as, by way of example:

Postwork’s business partners. These entities may use your information to provide you with services you have requested, or to provide technical support or other support related to Postwork’s services.
Service providers and/or any third party that may process data on our behalf. We may also share your information with companies that provide services for us or on our behalf, such as companies that send emails on our behalf.
Other third parties where required by law or where we must protect our Services. There may be cases in which we share your information with other third parties in order to comply with the law or to respond to compulsory legal process (such as a search warrant or other court order), and/or to verify or enforce compliance with the policies governing our Services, and to protect the rights, property or safety of the company or of any of our affiliates, business partners or customers.
Other third parties in connection with corporate transactions. We may share your information with third parties in the context of a merger or transfer, or in the event of bankruptcy.
Other third parties with your consent or at your direction. In addition to the disclosures described in this Privacy Policy, we may share information about you with third parties where you give your consent or request us to do so. Disclosures to third parties are covered by the provisions of this Policy.

Transfer of Data outside the EU

We collect (or process) personal data in Greece. However, some of the recipients with whom we share your Data may be located in countries other than the one in which the Data was originally collected or processed. The laws of those countries may not provide the same level of data protection as the country in which you originally provided your Data. Nevertheless, when we transfer your Data to recipients in other countries, including the USA, we are committed to protecting your Data as described in this Privacy Policy and in accordance with applicable law. We take measures to comply with the applicable legal requirements for the transfer of personal data to recipients in countries outside the European Economic Area or Switzerland that do not ensure an adequate level of protection. We use various measures to ensure that your Data transferred to those countries enjoys adequate protection in accordance with data protection rules. These include entering into Contractual Clauses, certification that the recipient has adopted Binding Corporate Rules, or adherence to the EU-US and Swiss-US Privacy Shield.

Retention of your Data

Postwork retains personal data, as Data Controller or as Data Processor, for as long as necessary to provide the Services to the Users of the Platform. If you log in with a social networking service, we may receive and store authentication information from that service in order to enable you to log in, as well as other information that you allow us to receive when you connect with those services. We will retain and use Data as necessary to comply with our legal obligations, resolve disputes and enforce our agreements with our customers, and/or for the period required by applicable laws.

Rights of Data Subjects

What are your rights

You have the right to request access to, rectification of and erasure of the Data we have collected about you as Data Controllers; in addition, you are entitled to restrict or object to our processing of your data and to object to any decision based solely on the automated processing of your Data by us.

Exercising your Rights

To exercise your rights, you may submit a request to the Company’s email address support[at]postwork.gr with the subject “Exercise of Rights”, and we will examine it and respond to you as soon as possible. You have the right to lodge a complaint with the Hellenic Data Protection Authority if you consider that the processing of your Personal Data infringes the applicable national and regulatory legal framework for the protection of personal data.

Access, rectification and erasure of data controlled by Employers

Postwork has no direct relationship with the Job Applicants whose personal data it processes on behalf of Employers. Individuals who apply in response to a Job Offer have an account created with their email address, which links all of that individual’s applications to that email address. The individual may access their account on the Platform and forward requests to Employers for the rectification, amendment or erasure of inaccurate data in an application. The Employer is responsible for complying with the individual’s request. In accordance with applicable law, Postwork retains an archive copy of the individual’s data for the period provided for by that law. In addition, if you are a Job Applicant and no longer wish to be contacted by a particular Employer, please contact that Employer directly to resolve your concern.

Access, rectification and erasure of data by Postwork

Postwork provides any individual who has submitted information to the Platform with the ability to review, rectify and request the erasure of any personal data entered in their profile on the Platform. To rectify or delete any information in a Profile, you should follow the procedure described in the “Exercising your Rights” section below. When an individual closes their account on the Platform, we will remove their Profile from the Platform. Information provided by a Job Applicant in an application or CV submitted to an Employer is handled as described above in the section “Access, rectification and erasure of data controlled by Employers”.
By way of exception:

if you wish to correct the Data in your user account, you may log in to it and make any correction/change without having to submit a Request.
if you wish to withdraw your consent to receiving the newsletter, you may do so by selecting the link “To unsubscribe from the newsletter mailing list, click here” at the bottom of each newsletter.
if you do not wish to receive web push notifications from the Company, you may disable them in your browser settings.

Opt-out preferences

If you choose to subscribe to our newsletter, we will use your name and email address and/or your mobile phone number, depending on your preferences, to send the newsletter to you. If you wish to opt out of receiving these messages, you may follow the unsubscribe procedure provided in the email or via the link included in the text message (SMS) you received on your mobile phone. In addition, if you are a registered User of the Platform, you may also opt out of receiving marketing or similar messages by editing your communication preferences here.

Behavioural targeting or re-targeting

We work with third parties, either to display their advertisements on our Platform or to manage our own advertising on other websites. Our third-party partner may use technologies such as cookies to collect information about your activities on the Platform and on other websites in order to provide you with advertising based on your activities and interests. If you do not wish to receive interest-based advertising, you may opt out by consulting the settings of the browser you use. Please note that this does not prevent advertisements from being displayed to you; you will continue to receive general advertising. To protect the confidentiality of your information, we will ask you to verify your identity before acting on any request you submit under this Privacy Policy. If you have authorised a third party to submit a request on your behalf, we will ask that party to prove that it has your permission to act for that purpose.

When we respond to your Requests

We respond to your Requests free of charge and without undue delay, and in any event within one (1) month of receiving your request. However, if your Request is complex or you have submitted a large number of Requests, we will inform you within that month if we need an extension of a further two (2) months, within which we will respond to you. If your Requests are manifestly unfounded or excessive, in particular because of their repetitive character, the Company may charge a reasonable fee, taking into account the administrative costs of providing the information or taking the action requested, or may refuse to act on the Request.

How we safeguard your Data

We make every reasonable effort to keep your data secure, in line with best practices, in order to protect the data we collect from loss, alteration, destruction, misuse and unauthorised access or disclosure. We apply policies that help maintain control over, and the physical security of, data storage facilities and that permit access only to authorised personnel or otherwise restrict access to data to those employees, contractors and agents with whom we work to provide and support our services. All of our employees are bound by confidentiality obligations and may face legal consequences if they fail to fulfil those obligations. We process information in a manner compatible with and relevant to the purpose for which it was collected. To the extent necessary for those purposes, we take reasonable steps to ensure that the information we collect and use is accurate, complete, up to date and reliable for its intended use. For example, when you create a profile and submit information about your education, skills and previous positions, we process that personal data in response to your request to do so. Similarly, if you subsequently wish to use your profile information to apply for a specific Job Offer, we will share that information in response to your request. In this way we fulfil our agreement with you.

Security

The security of your personal data is important to us. Postwork uses measures to protect your personal data. These measures are reasonably designed to protect your personal data from loss, unauthorised access, disclosure, alteration or destruction. Postwork may use software, SSL (Secure Socket Layer) encryption technology, password protection, firewalls, internal restrictions and other security measures to prevent unauthorised access to your personal data. When you enter sensitive information (such as your login credentials), we encrypt the transmission of that information using Secure Socket Layer (SSL) technology. However, Postwork cannot guarantee that unauthorised third parties will never be able to circumvent these measures or use your personal data for improper purposes. You should therefore be aware that when you display or distribute personal data, that information could be collected and used by others. Postwork is not responsible for the unauthorised use by third parties of information that you post or otherwise make public.

Cookies

We use cookies to provide you with the best possible browsing experience.

Links to other websites

The Platform may provide links to third-party websites or resources that are not affiliated with Postwork and over which Postwork has no control (“External Websites”). Such links do not constitute an endorsement by Postwork of the External Websites, of the content displayed on them, or of the persons or entities associated with them. You acknowledge that Postwork provides these links solely as a convenience and you agree that Postwork is not responsible for the content of such External Websites. Your use of the External Websites is subject to the respective terms of use and privacy policies found on those linked External Websites. Postwork does not store information (username, password) used to access those External Websites.

Single sign-on through other services, including social media

You may log in to our website using sign-in services. These features may collect your IP address and which page you are visiting on our Platform, and may set a cookie to enable the feature to function properly. Social media features are hosted either by third parties or directly on our Platform. Your interactions with these features are governed by the privacy policy of the company providing them.

This Privacy Policy also applies to persons whom we contact in the course of the professional promotion of our Services, even though they are not Users of the Platform, as described in the section “Contacting companies from public job postings”.

Contacting companies from public job postings

This section concerns the companies and organisations to which we send informational messages about our Services, even though they are not registered Users of the Platform. In this context, POSTWORK acts as Data Controller.

What data we collect and from where

We collect contact details of companies and organisations from publicly accessible job postings that they themselves publish on job search websites or on their corporate websites. Specifically, we may collect:

the company name
the contact email address, as published in the job posting or on the company’s website
the contact telephone number, where published
the title of the advertised position, the website on which it was published and the date of publication

We do not collect special categories of data and we do not seek out information that has not been made public by the company itself. Where the contact details relate to a specific natural person acting in a professional capacity, this notice is provided in accordance with Article 14 of the General Data Protection Regulation (EU) 2016/679.

For what purpose

We use this information solely to contact you and inform you of the possibility of publishing job vacancies through the Postwork platform. We do not use it for any other purpose, we do not sell it and we do not provide it to third parties for their own commercial use.

Legal basis

The processing is based on our legitimate interest in promoting our services to professional recipients (Article 6(1)(f) GDPR). We have balanced this interest against your rights, taking into account that the details were made public by you for the purposes of professional communication, that our communication relates directly to the activity indicated by your job posting, and that we provide you with an easy way to opt out in every message.

You may object to this processing at any time. Your objection will be accepted without any precondition and without you having to give reasons for it.

Who has access

To send the messages, we use an email marketing platform provider, which acts as a processor on our behalf under a contract in accordance with Article 28 GDPR. This provider is established outside the European Economic Area; the transfer of the data takes place subject to the safeguards of Article 46 GDPR (Standard Contractual Clauses of the European Commission).

How long we keep it

We retain the contact details for 12 months from our last communication with you and then delete them.

If you ask us to stop contacting you, we delete your remaining details and retain only your email address in a closed suppression list, to ensure that you do not receive any further messages from us. This list is not used for any other purpose.

Your rights

You have the following rights:

access to the data we hold about you
rectification of inaccurate details
erasure of your data
objection to the processing, in particular for direct marketing purposes
restriction of processing
portability of your data

To exercise any of your rights, send a message to support[at]postwork.gr with the subject “Exercise of Rights”. We respond within one month of receiving your request, free of charge.

Amendments to the Privacy Policy

Postwork reserves the right to amend this Privacy Policy from time to time. Postwork will publish the revised Privacy Policy at this location and will either send a notice to the email address you provided at registration and/or post a notice of the change so that it is visible to Users when they first log in before such changes take effect, so that you are always aware of what personal data Postwork may collect and how Postwork may use that data. We recommend that you review this Privacy Policy regularly for any changes. Your continued use of the Platform and/or the Services will be subject to the Privacy Policy in force at the time.

Contact us

If you wish to contact Postwork regarding this Privacy Policy, please contact us by email at info[at]postwork.gr.