Privacy Policy
In a nutshell
- This site has no forms and does not use tracking cookies. We only receive your data if you write to us by email or WhatsApp, or if you access the GET Portal.
- We use the data to respond to you, run selection processes and provide our services. We do not sell personal data.
- After the process, your résumé stays in our talent pool only if you authorize it, for up to 12 months.
- To access, correct or delete your data, write to dpo@getitalent.com.
1. Who we are
GET ITALENT CONSULTORIA E SERVIÇOS EM INFORMÁTICA LTDA, registered under CNPJ No. 36.601.410/0001-35, headquartered at Rua Alexandre Dumas, 1630, 2º andar, Chácara Santo Antônio, São Paulo/SP, CEP 04717-004 (“GET ITalent” or “we”), is the controller of the personal data processed under this policy.
In Portugal, we operate through the GET ITalent group's Portuguese company, NIPC 518 687 627, headquartered in Porto, which is also the controller of the data processed in our operations in Portugal.
Email: dpo@getitalent.com
2. Who this policy applies to
This policy applies to anyone who:
- visits the getitalent.com website;
- contacts GET through the site's channels (email and WhatsApp);
- submits a résumé or takes part in selection processes run by GET;
- represents client, partner or supplier companies;
- accesses the GET Portal (getitalent.kliva.app.br).
It complies with Brazil's General Data Protection Law (LGPD, Law No. 13,709/2018) and, for data subjects in Portugal and the European Union, the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and Portuguese Law No. 58/2019.
3. What data we process
When you just visit the site
The server logs technical access data: IP address, date and time, page visited, browser and operating system. To measure traffic we use a cookieless tool: it does not store or read any information on your device, and the IP address is used only at the time of the visit, without being stored.
When you contact us
We receive whatever you send us by email or WhatsApp: usually your name, email, phone number, company, job title and the subject of your message.
When you submit a résumé or take part in a selection process
Name, ID number (Brazilian CPF or Portuguese NIF), email, phone number, address, education, work experience, salary expectations and references. We ask only for what is necessary for the process; without the minimum data, it is not possible to take part in it.
We may also obtain publicly available professional data (for example, LinkedIn profiles), referrals from other people and information sent by clients in connection with a job opening. In these cases, we inform you at the first contact.
Sensitive data is processed only when indispensable, with your specific consent or in the cases provided for in Art. 11, II of the LGPD. Examples: health information to adapt the process for people with disabilities, or diversity data in dedicated programs. This data is never used to discriminate.
When you access the GET Portal
Login email, password (stored encrypted, never in plain text), access logs and the profile information needed for the contracted service.
4. Why we use it and on what legal basis
| Purpose | Legal basis (LGPD) | Legal basis (GDPR) |
|---|---|---|
| Responding to inquiries and business proposals | Pre-contractual procedures (Art. 7, V) or legitimate interest (Art. 7, IX): our interest in responding to those who reach out to us | Art. 6(1)(b) or (f) |
| Running selection processes | Pre-contractual procedures (Art. 7, V) | Art. 6(1)(b) |
| Keeping your résumé in the talent pool after the process (we ask for your express authorization at the end of the process; without it, we delete the data) | Consent (Art. 7, I) | Art. 6(1)(a) |
| Providing the contracted services and granting access to the GET Portal | Performance of a contract (Art. 7, V) | Art. 6(1)(b) |
| Complying with legal, tax and labor obligations | Legal obligation (Art. 7, II) | Art. 6(1)(c) |
| Keeping access logs and protecting the site | Legal obligation (Brazilian Internet Civil Rights Framework – Marco Civil da Internet, Art. 15) and legitimate interest (Art. 7, IX): protecting the site against abuse | Art. 6(1)(c) and (f) |
| Sending news and opportunities | Consent or legitimate interest (Art. 7, I and IX), with the option to opt out at any time | Art. 6(1)(a); (f) only for existing clients |
| Sensitive data (health, diversity) | Specific and prominent consent (Art. 11, I) or the legal grounds of Art. 11, II (e.g., quotas for persons with disabilities) | Art. 9(2)(a) |
Luna is an artificial intelligence assistant at GET. Messages sent to luna.ai@getitalent.com may be screened by her, under the supervision of our team. For this we use an artificial intelligence provider in the US, engaged as a processor, with data protection clauses. No decision about an application or a hire is made solely by automated means, and you may request a review of any automated decision through dpo@getitalent.com.
5. Who we share it with
- Client companies: your application data goes only to the client for the job opening you are applying for, and only to its authorized contacts. When we run a process on behalf of a client, the client may also be a controller of your data; in these cases, we indicate this in the process.
- Technology providers that process data on our behalf, with data protection clauses: Microsoft (Microsoft 365 and Azure), Zoho (CRM and Recruit), Conta Azul, Acronis (backup), an artificial intelligence provider in the US, the company that hosts this site and the cookieless traffic measurement tool.
- WhatsApp (Meta): if you contact us via WhatsApp, the conversation is also processed by Meta, in accordance with WhatsApp's privacy policy. The conversation is also kept in GET's business account for the period set out in section 7.
- Public authorities: only when required by law or by court order.
The GET Portal runs on the Kliva platform, developed and operated by GET ITalent itself and hosted on Microsoft Azure.
No personal data is sold to third parties.
6. International transfers
We operate in Brazil and Portugal, and some of our cloud providers may store data outside your country. In these cases, we use the safeguards provided for by law: standard contractual clauses approved by the ANPD (ANPD Board Resolution CD/ANPD No. 19/2024), adequacy decisions of the European Commission, the standard contractual clauses under Art. 46 of the GDPR or, for US providers, the EU-U.S. Data Privacy Framework. You can request information about these safeguards through dpo@getitalent.com.
7. How long we keep it
| Data | Retention period |
|---|---|
| Contact messages that do not lead to business | Up to 12 months after the last contact |
| Résumé, after the end of a selection process in which you were not hired | Up to 12 months in the talent pool, with your consent, renewable. Without consent, deleted at the end of the process |
| Candidate assessments and sensitive data | Same rule as the résumé: with your authorization, up to 12 months; without it, deleted at the end of the process |
| Hired or allocated professionals | 5 years after the end of the relationship, or a longer legal period where applicable |
| Client contacts and contract data | 5 years after the end of the contract |
| Access logs for the site and the GET Portal | At least 6 months (Marco Civil da Internet) and up to 12 months |
At the end of the retention period, the data is deleted or anonymized.
8. Your rights
You may, at any time:
- confirm whether we process your data and access it;
- correct incomplete, inaccurate or outdated data;
- request the anonymization, blocking or deletion of unnecessary or excessive data, or data processed in breach of the law;
- request the deletion of data processed based on your consent;
- request restriction of processing (GDPR);
- receive your data in a structured format (portability);
- find out who we share your data with;
- be informed that you may withhold consent and of the consequences of doing so;
- request a review of decisions made solely by automated means;
- withdraw your consent, without affecting processing carried out before the withdrawal;
- object to processing based on legitimate interest and, at any time, to receiving marketing communications.
You may also file a complaint with the data protection authority: the ANPD in Brazil or the CNPD in Portugal.
9. Security
We adopt technical and organizational measures appropriate to the risk, such as role-based access control, multi-factor authentication on systems that support it, HTTPS, backups and confidentiality agreements with our team and service providers. If an incident occurs that may pose a relevant risk or harm, we will notify the competent authority and the affected individuals within the legal deadlines.
10. Beware of scams
GET ITalent never charges candidates to take part in selection processes and never asks for passwords or verification codes. If in doubt, confirm through the official channels on this site before sending any data.
11. Minors
Our services are not intended for children under 14. Data of adolescents is processed only in apprenticeship or internship programs, in their best interest and as provided by law (LGPD, Art. 14).
12. Changes to this policy
We may update this policy when the law or our services change. The current version and the date of the last update are always shown at the top of this page. Significant changes will be highlighted on the site.