Last updated: 30 March 2020
At Humaans we care about your privacy. That’s why we only collect personal data if we have a good reason to do so. That’s also why we want to communicate transparently what we do with your personal data.
For the purposes of European Economic Area data protection law, (the “Data Protection Law“), the data controller of the data processed through the Services is the Customer who makes available and grants access and use of the Services to anyone on its behalf. For data retained through the website or data processed not through the Services (i.e. contact details of potential customers or resumes sent to us from potential employees for the purpose of engagement with Humaans), we are the controller (the “Controller”).
Who are we?
Humaans is a cloud-based people management service.
The company behind Humaans is Zero Technology LTD. Our registered company number is 11496946, and our registered office is at Office 7, 35-37 Ludgate Hill, London, United Kingdom, EC4M 7JN. Our VAT number is 311228354.
For ease of reference we will further refer to ourselves using “we'', “us”, “our” or “ Humaans ”. “You”, “your” or “yours” means the organisation using the Services.
You can reach us at firstname.lastname@example.org.
Which personal data do we collect and why?
If you just visit our website we do not collect any personal data . We will only collect personal data in the following instances:
- If you ask us a question using a contact form or email;
- If you request access to our Services;
- If you sign up to use our Services;
- If you subscribe to our newsletter;
- If you apply for a job with us.
Below you can find what type of personal data we collect, what we use it for and how long we will keep it:
Your first and last name, Your address & Your company details
We cannot be sure to address you correctly if we don’t know who you are; and if you enter into a contract with us we will need to make sure we know who we are dealing with. We will keep this information in our customer database for as long as you do not object to us keeping it. If you no longer want us to keep this information, you can always let us know.
Please do note that for as long as we have an ongoing contract we are not able to remove this information from our databases as we will need it to execute the contract.
And even after our contract has ended, we may be under a legal obligation to hold on to some of this information for a bit longer. For example: under accounting legislation we must keep copies of our invoices which may mention your name or address.
Phone number and email address
This is so we can easily contact you. In principle, we will never contact you unless it is to answer a question, if we are working on an assignment for you or if you have applied for a job with us.
We may also use your email address to send you our newsletter. We do not want to spam you and we understand if you would rather not receive any newsletters. If that is the case, you can always let us know or you can unsubscribe from our mailing list using the link you can find at the bottom of each newsletter.
As is the case for your name and address, we will also keep your email address and your phone number in our customer or candidate database for as long as you do not object to us keeping it. If you no longer want us to keep this information, you can also always let us know.
Please do note that for as long as we have an ongoing contract we are not able to remove this information from our databases as we will need it to execute the contract. And even after our contract has ended, we may be under a legal obligation to hold on to some of this information for a bit longer. For example: under accounting legislation we must keep copies of our invoices which may mention your email address.
IP-address, Preferences & Data provided in the platform
If you enter into an agreement with us, you will get access to the platform.
If you make use of the platform, we may collect other personal data such as your IP-address or your browsing preferences, as well as other personal data that you voluntarily provide us with through the platform. This information is either required to operate the Services when you register, and open an account, or will help us tailor our services to you.
If you stop using the Services, we will only keep this data for a period of 30 days after the end date of our contract with you. After that period of time, we will delete these data.
Information provided during job applications
If you apply for a position with us, your will probably provide us with personal data in your cover letter and your CV (such as: your grades, which schools you went to, previous jobs, etc.).
We will save the contact details, cover letter and CV of every job applicant in our candidate database and may contact you in the future regarding job opening that may be of interest to you. Of course, we will delete all this information from our candidate database if you don’t like us holding on to it. Just let us know at email@example.com.
How do we protect your personal data?
W e take measures to ensure that your personal data is kept private!
We work hard to protect your personal data against unauthorized access or disclosure. In order to do so, we take organizational measures ensuring that access to your data is restricted to those employees or agents who need to have access to it in order to help us process it. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
We are a tech company, so it won’t surprise you we also take a whole range of technical measures to protect your data. Technical measures include, for example, encrypting all personal information (in transit and at rest), user access management and penetration testing.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
If you want more information about the measures we take email us at firstname.lastname@example.org
Do we share your data with others?
We will never sell your personal data to another party!
We do use the services of the following external data processors:
- Google Cloud Platform (infrastructure and web hosting)
- Google Analytics (analytics)
- Postmark (transactional emails)
- Stripe (payments)
- Intercom (customer support, marketing emails)
- Mailchimp (marketing emails)
- Substack (marketing emails)
- Sqreen (security monitoring)
You should know that in the following exceptional circumstances your data could also be shared with others:
- If we are under a legal obligation to share data with the authorities or if we have to share data to comply with an enforceable government request, we don’t have much of a choice and we will share the data the authorities ask for, which may include yours.
Where do we store your data?
Our infrastructure is hosted on servers based in the European Union (primarily in Belgium). This allows us to meet specific regulatory and compliance requirements of organisations in Europe. Our data center provider Google Cloud Platform provides advanced security features and maintains multiple certifications, including SOC 1, SOC 2, SOC 3 and ISO27001. In addition all data is encrypted both in transit and at rest using strong encryption.
Some of the Data we collect from you may be transferred to, and stored at, a destination outside the European Economic Area (EEA) that may not be subject to equivalent Data protection laws, only upon Customer’s approval in a manner agreed between Zero Technology LTD and the Customer.
In some cases, where strictly necessary to interface with third party data processors (for example analytics, payments and email delivery), we may transfer only the necessary personal data outside of the EEA, in order to:
- Store some information;
- Enable us to provide you with the Services and fulfil our contract with you;
- Fulfil any legal obligations which require us to make that transfer;
- Facilitate the operation of our group businesses, where it is in our legitimate interests and we have concluded these are not overridden by your rights.
What are cookies? Cookies are small files existing of numbers and letters which are placed on your computer when you visit a website. Cookies are saved in your browser’s history and you can always delete them. You can also adjust your browser settings to prevent cookies from being saved on your computer.
First party cookies when visiting the Humaans website or platform.
When you visit the website or platform, these cookies will be installed, unless your browser settings prevent this from happening:
- Google Analytics cookies- we use Google Analytics to generate anonymous statistics on how visitors use the website. We only use these cookies to enhance the user experience on our website and to know which parts of the website or platform are most frequently visited or clicked on. We have adjusted the Google Analytics settings to ensure no personal data is collected when you visit the website or the platform.
- Intercom cookies- we use Intercom to provide visitors with support and to send product update communications.
- Platform cookies- these cookies are used for user sessions and load balancing.
Third Party cookies when visiting the Humaans website or platform
Privacy of the data processed using the Services
When you onboard a new team member using Humaans, your team member’s personal data will be saved in your account on the platform. We will keep this information available for you (the “Controller”) in the platform, but we will never use such information ourselves for any other purpose than to help you process the data.
If you terminate your contract with us, we will keep this data for 30 days after our contract has ended. After that, we will delete all information that you saved in the platform.
You may request us to send you a summary of the personal data processed about you. If you feel that your personal data have been processed incorrectly or incompletely, or if you feel that such processing was unnecessary, then you also can also ask us to edit, supplement or erase your personal data from our databases. Under the applicable privacy legislation, you also have the right to restrict processing, the right to data portability and the right to object to processing.
If you feel we have failed to respond correctly to a request for information, you have the right to lodge a complaint about us to the UK Information Commissioner’s Office (https://ico.org.uk/) or with the relevant authority in your country of work or residence.
If you have any further privacy concerns or if you want to exercise your rights, you can contact us via email at email@example.com.