Skip to content

Data Processing Information Notice — collaborators and candidates

This information notice, provided pursuant to art. 13 of EU Regulation 2016/679, describes how we process the personal data of those who apply to collaborate with us and those who permanently collaborate in design.

This is an automatic translation. The binding version of this document is the Italian one.

1. Data Controller

The Data Controller is Hundredjack OÜ (brand «Dentra»), registrikood 17310584, with registered office in Estonia. The Data Protection Officer (DPO) can be reached at [email protected].

2. Data Processed

  • Application — name and surname, contacts, curriculum vitae and the information you choose to send us about your experience.
  • Technical test — the test papers and their outcome, when the selection process requires it.
  • Collaboration relationship — personal and tax data, VAT number, bank details, contract data and remuneration.
  • Platform activities — assigned and delivered works, delivery times, requested revisions and resulting scores; data access logs.
  • Video calls — when a meeting or a coaching session is recorded, the recording and its transcription, as indicated before the start of the recording.

3. Purposes and Legal Bases

  • Application evaluation — examination of the profile and the technical test. Legal basis: pre-contractual measures taken at the request of the data subject (art. 6.1.b).
  • Performance of the relationship — assignment of works, management of deliveries, calculation and payment of remuneration. Legal basis: performance of a contract (art. 6.1.b).
  • Legal obligations — accounting and tax obligations related to remuneration. Legal basis: legal obligation (art. 6.1.c).
  • Service quality and security — measurement of the quality and punctuality of works, recording of access to patient data. Legal basis: legitimate interest in ensuring the service and protecting the data entrusted to us (art. 6.1.f).

4. Unsuccessful applications

If the application does not lead to the start of a collaboration, we retain the profile and the test outcome for twelve months, so that we can contact you again if a suitable position opens up. After that period, the data will be deleted. You can request their deletion even earlier, without having to state the reason, by writing to the address indicated at the bottom.

5. Recipients of the data

The data are not disseminated. They may be communicated to the subjects indicated below.

  • Accounting consultant — for obligations related to remuneration.
  • Payment institutions and banks — for the execution of payments.
  • IT infrastructure providers — who host the platform and archives, with servers in the European Union.
  • Transcription and summary services — limited to recordings of internal meetings, to produce a written report thereof.
  • Authorities — when disclosure is required by law.
  • Partner laboratories — see the assigned works and related design files, for the technical evaluation of assignments, matching with skills, and quality control.

6. Retention

  • Unsuccessful applications — twelve months from submission.
  • Relationship and remuneration data — ten years from termination, for accounting and tax obligations.
  • Quality and punctuality scores — for the duration of the relationship and the subsequent twelve months.
  • Video call recordings — according to the retention policy declared at the time of recording.
  • Data access logs — for the time provided by the security measures documented in the privacy document.

7. Data subject rights

You can at any time request access to your data, their rectification or erasure, restriction of processing, data portability, and object to processing based on legitimate interest. Requests should be sent to [email protected]. You also have the right to lodge a complaint with the competent supervisory authority.

8. Contacts

For any matter relating to the processing of your data, you can write to [email protected].