Privacy Policy
In a nutshell
- This website has no forms and does not use tracking cookies. We only receive your data if you write to us by e-mail or WhatsApp, or if you access the GET Portal.
- We use the data to reply to you, run recruitment processes and provide our services. We do not sell personal data.
- After the process, your CV only stays in our talent pool if you authorise it, for up to 12 months.
- To access, correct or delete your data, write to dpo@getitalent.com.
1. Who we are
GET ITALENT CONSULTORIA E SERVIÇOS EM INFORMÁTICA LTDA, registered under CNPJ No. 36.601.410/0001-35, with its registered office at Rua Alexandre Dumas, 1630, 2º andar, Chácara Santo Antônio, São Paulo/SP, CEP 04717-004 (“GET ITalent” or “we”), is the controller of the personal data processed under this policy.
In Portugal, we operate through the GET ITalent group's Portuguese company, NIPC 518 687 627, with its registered office in Porto, which is also the controller of the data processed in operations in Portugal.
E-mail: dpo@getitalent.com
2. Who this policy applies to
This policy applies to anyone who:
- visits the getitalent.com website;
- contacts GET through the website's channels (e-mail and WhatsApp);
- sends a CV or takes part in recruitment processes run by GET;
- represents client, partner or supplier companies;
- accesses the GET Portal (getitalent.kliva.app.br).
It complies with Brazil's General Data Protection Law (LGPD, Law No. 13,709/2018) and, for data subjects in Portugal and the European Union, with the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and Law No. 58/2019.
3. What data we process
When you only visit the website
The server logs technical access data: IP address, date and time, page accessed, browser and operating system. To measure audience we use a cookie-free tool: it neither stores nor reads information on your device, and the IP address is used only at the time of the visit, without being stored.
When you get in touch with us
We receive whatever you send us by e-mail or WhatsApp: usually name, e-mail, phone number, company, job title and the subject of the message.
When you send a CV or take part in a recruitment process
Name, identification number (CPF or NIF), e-mail, phone number, address, education, professional experience, salary expectations and references. We only ask for what is necessary for the process; without the minimum data it is not possible to take part in it.
We may also obtain publicly available professional data (for example, LinkedIn profiles), referrals from other people and information sent by clients in the context of a vacancy. In these cases, we inform you at the first contact.
Sensitive data is only processed when essential, with your specific consent or in the cases set out in art. 11, II of the LGPD. Examples: health information to adapt the process for people with disabilities, or diversity data in dedicated programmes. This data is never used to discriminate.
When you access the GET Portal
Login e-mail, password (stored in encrypted form, never in plain text), access logs and the profile information required for the contracted service.
4. What we use it for and on what legal basis
| Purpose | Legal basis (LGPD) | Legal basis (GDPR) |
|---|---|---|
| Responding to enquiries and business proposals | Pre-contractual procedures (art. 7º, V) or legitimate interest (art. 7º, IX): our interest in responding to those who contact us | Art. 6.º, n.º 1, al. b) or f) |
| Running recruitment processes | Pre-contractual procedures (art. 7º, V) | Art. 6.º, n.º 1, al. b) |
| Keeping your CV in the talent pool after the process (we ask for your express authorisation at the end of the process; without it, we delete the data) | Consent (art. 7º, I) | Art. 6.º, n.º 1, al. a) |
| Providing the contracted services and giving access to the GET Portal | Performance of a contract (art. 7º, V) | Art. 6.º, n.º 1, al. b) |
| Complying with legal, tax and employment obligations | Legal obligation (art. 7º, II) | Art. 6.º, n.º 1, al. c) |
| Keeping access logs and protecting the website | Legal obligation (Marco Civil da Internet, art. 15) and legitimate interest (art. 7º, IX): protecting the website against abuse | Art. 6.º, n.º 1, al. c) and f) |
| Sending news and opportunities | Consent or legitimate interest (art. 7º, I and IX), with the option to opt out at any time | Art. 6.º, n.º 1, al. a); al. f) only for existing clients |
| Sensitive data (health, diversity) | Specific and prominent consent (art. 11, I) or the legal grounds in art. 11, II (e.g. quotas for people with disabilities) | Art. 9.º, n.º 2, al. a) |
Luna is an artificial intelligence assistant at GET. Messages sent to luna.ai@getitalent.com may be triaged by her, under the team's supervision. For this we use an artificial intelligence supplier in the USA, engaged as a processor, with data protection clauses. No decision about an application or hiring is made solely by automated means, and you can request a review of any automated decision via dpo@getitalent.com.
5. Who we share it with
- Client companies: your application data only goes to the client for the vacancy you are applying for, and only to its authorised contacts. When we run a process on behalf of a client, the client may also be a controller of your data; in these cases we state this in the process.
- Technology suppliers that process data on our behalf, with data protection clauses: Microsoft (Microsoft 365 and Azure), Zoho (CRM and Recruit), Conta Azul, Acronis (backup), an artificial intelligence supplier in the USA, the company that hosts this website and the cookie-free audience measurement tool.
- WhatsApp (Meta): if you contact us via WhatsApp, the conversation is also processed by Meta, in accordance with WhatsApp's privacy policy. The conversation is also kept in GET's business account for the period set out in section 7.
- Public authorities: only when required by law or by court order.
The GET Portal runs on the Kliva platform, developed and operated by GET ITalent itself and hosted on Microsoft Azure.
No personal data is sold to third parties.
6. International transfers
We operate in Brazil and Portugal, and some of our cloud suppliers may store data outside your country. In these cases, we use the safeguards provided for by law: standard contractual clauses approved by the ANPD (Resolution CD/ANPD No. 19/2024), adequacy decisions of the European Commission, the standard contractual clauses under art. 46.º of the GDPR or, for US suppliers, the EU-US Data Privacy Framework. You can request information about these safeguards via dpo@getitalent.com.
7. How long we keep it
| Data | Period |
|---|---|
| Contact messages that do not lead to business | Up to 12 months after the last contact |
| CV, after the end of a recruitment process in which you were not hired | Up to 12 months in the talent pool, with your consent, renewable. Without consent, deleted at the end of the process |
| Candidates' assessments and sensitive data | Same rule as for CVs: with your authorisation, up to 12 months; without it, deleted at the end of the process |
| Hired or placed professionals | 5 years after the end of the relationship, or a longer legal period where applicable |
| Client contacts and contract data | 5 years after the end of the contract |
| Access logs for the website and the GET Portal | At least 6 months (Marco Civil da Internet) and up to 12 months |
At the end of the period, the data is deleted or anonymised.
8. Your rights
You may, at any time:
- confirm whether we process your data and access it;
- correct incomplete, inaccurate or out-of-date data;
- request the anonymisation, blocking or deletion of data that is unnecessary, excessive or processed in breach of the law;
- request the deletion of data processed on the basis of your consent;
- request the restriction of processing (GDPR);
- receive your data in a structured format (portability);
- find out who we share your data with;
- be informed that you may refuse consent and of the consequences of doing so;
- request a review of decisions made solely by automated means;
- withdraw your consent, without affecting what was done before the withdrawal;
- object to processing based on legitimate interest and, at any time, to receiving marketing communications.
You may also lodge a complaint with the data protection authority: the ANPD in Brazil or the CNPD in Portugal.
9. Security
We adopt technical and organisational measures appropriate to the risk, such as role-based access control, multi-factor authentication on the systems that support it, HTTPS, backups and confidentiality agreements with staff and service providers. If an incident occurs that may pose a significant risk or harm, we will notify the competent authority and the affected people within the legal deadlines.
10. Beware of scams
GET ITalent never charges candidates to take part in recruitment processes and never asks for passwords or verification codes. If in doubt, check through the official channels on this website before sending any data.
11. Minors
Our services are not intended for children under 14. Data of adolescents is only processed in apprenticeship or internship programmes, in their best interests and in accordance with the law (LGPD, art. 14).
12. Changes to this policy
We may update this policy when the law or our services change. The current version and the date of the update are always shown at the top of this page. Significant changes will be highlighted on the website.