Information concerning personal data protection
Key Principles of GDPR
The GDPR establishes principles the controllers and processors of personal data must comply with.
- Lawfulness, fairness, and transparency: When data is collected, it must be clear why data is being collected and what it will be used for.
- Purpose limitation: Data may be collected only for the purpose data controllers need it for.
- Data minimization: Data controllers must ensure they store minimum amount of data required for the purpose.
- Accuracy: Data controllers must ensure that information remains accurate and fit for purpose.
- Storage limitation: Data controllers must have control over storage and movement of data within the organization.
- Integrity and Confidentiality: Data controllers must implement appropriate security measures to protect the data.
- Accountability: Data controllers must be able to demonstrate the ability to protect personal data.
What personal data do we collect and why?
When you visit our websites, Mongata may collect information about you, which may include personal data (referred to as "Collected Data"). From the perspective of General Data Protection Regulation (referred to as "GDPR”), Mongata acts as the controller for the Collected Data, which means that Mongata decides what Collected Data is processed and why.
Mongata may act as a processor in cases where you use the services of a consultation with a expert or if, on the instructions of the administrator, Mongata manages the Collected Data as part of technical support. In such cases, when it comes to the processing of your data, Mongata follows the basic principles and rules contained in this information.
What personal data we collect and process for our own purposes and when: Collected Data
When you apply for an open position by filling out the application form, we may collect your (i) contact information, such as name, phone number, email address; and (ii) any other information contained in the resume that you submit to us.
For the purposes of evaluating you for an open position, you understand that we may internally rate you based on analysis of your resume and your information. If you do not wish to be rated by us, please do not provide us with your information.
Cookies and similar technologies
We gather certain information automatically and store it in log files. This information may include internet protocol (IP) addresses, browser type, internet service provider (ISP), referring/exit pages, the files viewed on our Website, operating system and/or date/time stamp. We do this mainly to improve our websites.
Apart from the aforementioned information collected by us, we automatically receive and record certain data of yours when you use our websites. Users are required to provide personal data only if they want to get in contact with us or ask for advice. In such cases - totally voluntary - Users are required to provide only data strictly necessary to handle their requests.
Users browsing our websites are not required to provide any personal data. However, the technology used by us stores data concerning tools employed by users, which help track the latter.
We are pleased to provide information on the methods of active and passive collection of information concerning subjects/means interacting with our websites, as well as on the security measures taken by us.
While using our websites, it is technically possible to collect data even without a user's explicit subscription to any of our products or services or without any other active role. This type of collection is called "passive data collection”.
You authorize Mongata and its service providers to perform analytics on such Collected Data to, (i) improve, enhance, support and operate the websites; and (ii) compile statistical reports and record insights into usage patterns. You acknowledge that Mongata uses Collected Data for the aforementioned purposes.
As regards to the active data collection, we apply the following policy:
- E-Mail: Data received by e-mails sent to websites are used to reply to requests only. This data is stored in order to (i) assess your needs to determine or suggest suitable product(s) and/or service(s); (ii) send you requested information about product(s) and/or service(s); (iii) respond to customer service requests, questions and other concerns; and (iv) for any analytical purposes.
We may post your references/comments/reviews on our websites and our third-party partners, which may contain your personal data. Prior to posting the reference, we will obtain your consent to post your name along with the reference. If you want to remove your reference, please contact us at firstname.lastname@example.org.
When you have agreed, we may use your e-mail address, collected as a part of Collected Data, to send you our newsletters and/or marketing communications about our product(s) and service(s). We may use your contact for utmost period of 2 years (see the section "Retention of personal data") from the time of your consent. If you no longer wish to receive these communications, you can opt out by contacting us at email@example.com.
What is our legal basis for processing personal data (EU)?
Our legal basis for collecting and using the personal data described above will depend on the personal data concerned and the specific context in which we collect it.
However, we will normally collect personal data from you only when we rely upon your consent, need the personal data to perform a contract with you, or when we need to comply with a legal obligation, when the processing is in our legitimate interests or when we are legally required to do so and not overridden by your data protection interests or fundamental rights and freedoms. In some cases, we may also have a legal obligation to collect personal data from you or may otherwise need the personal data to protect your vital interests or those of another person.
If we ask you to provide personal data to comply with a legal requirement or to perform a contract with you, we will make this clear at the relevant time and advise you whether the provision of your personal data is mandatory or not (as well as of the possible consequences if you do not provide your personal data).
Similarly, if we collect and use your personal data in reliance with our legitimate interests (or those of any third party), we will make clear to you at the relevant time what those legitimate interests are.
If you have questions about or need further information concerning the legal basis on which we collect and use your personal data, please contact us using the contact details provided below.
Improving our websites
You expressly authorize us and our third-party service providers to process the Collected Data in our systems to (i) provide, enhance, improve, support and operate the websites, products and services and its availability; (ii) develop new products and services including improving our websites, products and services also by using machine learning technologies; and (iii) compile statistical reports and record insights into usage patterns.
Specific GDPR rights
Under GDPR you have specific rights regarding your personal data. If you seek to access, wish to correct, update, modify or delete personal data (referred to as a "Request"). Please submit a Request at firstname.lastname@example.org. We will respond within a reasonable timeframe.
Furthermore, you can object to processing of your Personal data, ask us to restrict processing of your personal data or object to portability of your personal data.
You have also the right to opt-out of marketing communications we send you.
You have the right to withdraw your consent with processing of personal data. Withdrawing of your consent will not affect lawfulness of any processing of personal data prior to your withdrawal, nor affect processing of your personal data conducted in reliance with lawful processing grounds other than consent.
You have the right to lodge a complaint with a data protection authority about our collection and use of your personal data.
Retention of personal data
After satisfying your request we do not further process your Personal data. Personal data is retained for 2 years and afterwards deleted.
If you request that we no longer use your personal data, please contact us at email@example.com.
Notwithstanding the foregoing, we will retain personal data collected as necessary to comply with our legal obligations, for litigation/defense purposes, maintain accurate financial and other records, resolve disputes, and enforce our agreement.