Notice for candidates and professionals

Why you are receiving this notice

We process data about you that we did not collect from you: it comes from public pages where your professional activity appears. This page tells you what data we hold, where it comes from, what we do with it and how you can have it deleted.

If instead you registered on the platform yourself, or sent us your CV, the platform privacy notice applies.

Who processes your data

What data we process

Only data you have made public yourself in a professional context:

• your name and surname, or the pseudonym under which you appear on the source;
• the address of the public page the data comes from;
• skills, technologies, languages and certifications exactly as you wrote them;
• location or city, as stated by the source;
• years of experience, where the source states them or they can be derived from dates you published yourself;
• professional contact details (e-mail, website, profiles) only if published by the source;
• public activity indicators from the originating platform, for example the number of public repositories or Stack Overflow reputation.

We do not collect, at this stage and from these sources:

• health data, or data on ethnic origin, religious, political or trade-union beliefs, sex life or sexual orientation;
• criminal-offence data;
• date of birth, age, gender, marital status;
• nationality and residence permit: we never infer them, and we record them only if you state them to us in direct contact.

Where your data comes from

This is the complete list of sources your data may have come from. The list is versioned: if we add one, this page's version goes up.

In the first message we send you we always tell you which specific source your data comes from, and we include the link to this page.

Why we process it, and on what basis

Purpose. To identify professionals potentially interested in open positions or IT consulting assignments, and to contact them to propose working together. If you are interested and the profile matches, we present your application to the client only after your explicit consent and using the data you give us, never the data gathered from public sources.

Legal basis. Legitimate interest — Art. 6(1)(f) GDPR and, for professionals in Switzerland, Art. 31 FADP. The interest is to connect professionals with assignments in a market where demand is stated and supply is hard to reach.

In the balancing test we considered that the data comes from pages published in order to be found professionally; that it is limited to professional information; and that you can object at any time, with immediate effect and without having to give a reason.

How selection works: what the software does and what a person does

We want to be precise here, because it concerns the way your profile is handled.

The system calculates a technical compatibility index between the skills the source states and the requirements of a position. It is a count of matches between technologies, including their spelling variants: it is not a judgement about the person, it uses no data other than that listed above, and it does not address aptitudes or personal characteristics.

The system may also rank the profiles found in a search session by relevance to the text of a position, with the help of a language model. The ranking determines the order in which a member of our team reads the results.

The decision is always made by a person. No profile is rejected, accepted or presented to a client automatically: the outcome of every assessment is determined by one of our staff reading the profile. We therefore do not take decisions based solely on automated processing within the meaning of Art. 22 GDPR and Art. 21 FADP.

You can ask us at any time what compatibility index was calculated for you and on what data: we will tell you.

Who we share your data with

• No one, until you have replied and given consent.
• After your consent, and limited to the data you give us: with the client company for the position you are applying for, and with any partners involved in that specific search. We always tell you who they are beforehand.
• With technical providers processing data on our behalf as processors appointed under Art. 28 GDPR: the current list is in the "Providers" section of the platform privacy notice.

Data collected from public sources does not leave our organisation without your consent.

How long we keep it

• If we do not contact you within 30 days of collection, your record is deleted. We do not keep silent archives of people who were never informed.
• If we contact you and you do not reply, or you decline → we delete within 30 days, keeping only the minimum needed not to contact you again: a cryptographic hash of your contact detail, which serves to exclude you from future searches and from which the contact detail cannot be reconstructed.
• If you are interested → we keep the data for the duration of the application or the working relationship and for 24 months afterwards, unless the law requires longer.

Transfers outside the European Union

Some of our technical providers process data in the United States. The details, with the safeguards applied, are in the "Transfers" section of the platform privacy notice.

Your rights

At any time you can:

• object to the processing — simply say so, no reason required: we stop and delete;
• request access to the data about you and a copy of it;
• request rectification of inaccurate data;
• request erasure;
• request restriction of processing;
• request portability of the data you provided to us.

Write to info@did.srl. We reply within 30 days. Deletion is free, needs no justification and carries no conditions.

You may also lodge a complaint with a supervisory authority:

• in Italy: Garante per la protezione dei dati personali — garanteprivacy.it
• in Switzerland: Federal Data Protection and Information Commissioner (FDPIC) — edoeb.admin.ch
• in other EU Member States: the authority of your country of residence.

Changes

If the sources we collect from, the purposes or the providers change, we update this page and raise its version. The version in force and its date are at the top of the document.