Version 3.0, Last update August 2022.
2. Who is the Data Controller of your personal data?
The FinTech Sandbox, Inc. processes personal data as a Data Controller for the purposes included in this policy.
Our registered address is at 50 Milk Street, 15th Floor Boston, MA 02109. You can contact us via post at this address. Alternatively, you can contact us via email at firstname.lastname@example.org.
Getro Inc. also acts as a Data Controller of your personal data for the purposes outlined in section 3 of this policy, and in order to seek professional opportunities for Job Seekers outside of the Mass Fintech Hub network. Getro Inc may contact you to offer professional opportunities outside of this talent network and in that case, you may consent to the sharing of your details with external employers.
3. Personal data collected by us
When you subscribe to this Network, we will ask you to provide certain personal data, including:
- a valid e-mail address
- your job preferences
If you apply to a job directly on this job board (NOT if you apply on a third party site hosting a job posting that this Site has linked out to), we will ask you to provide:
- a valid e-mail address
- your first and last name
- the URL of your LinkedIn profile
- the URLs of any personal websites you have
- your resume in PDF or other file formats
- a cover letter, or any additional information you wish to include in the application
We will also ask you:
- if you are legally authorized to work in the United States
- if you require any type of sponsorship or employment visa status
Generally, we may collect your personal data as follows:
(a) Registration, subscription or application to a job – we will collect personal data that you voluntarily submit to us, such as your name and contact details when you register with us as a job seeker, subscribe to job alerts, apply to a job directly on this Site, use our Site and our services, or otherwise interact with us;
(b) Information request or chat – When you request information or interact with us through any communication channels (chat, email, etc) we may collect your contact details (email address, name, your role, name of your company, company sector and number of companies) and you may provide additional information.
(c) Statistical processing – We may process your data for statistical purposes that allow us to prepare reports, determine how many people visit our website and to improve our services. The reports that we generate will only contain aggregated data in a way that does not allow the identification of individuals.
(d) Automatized processing – When you visit our Site, we may also automatically collect standard logging information and device fingerprint data such as the IP address of your device based on our legitimate interest to keep our website secure and prevent fraudulent attacks and to infer the uniqueness of users. Some providers may also collect IP addresses in order to provide their services and for security reasons.
4. For what purposes are we going to process Job Seekers' data?
We process your personal data to help you to find a job that matches your preferences and to connect you with companies within our network for this purpose, using an automated board system that permits us to work efficiently.
If you choose to subscribe to Job Alerts, we will send you by email details of jobs that we think you might be interested in with us or companies in our network. Your subscription data will only be shared with administrators of the network you’ve subscribed to. We cannot subscribe you to job alerts without the minimum mandatory information indicated on the subscription form
If you choose to apply to a job directly on this Site (NOT if you apply on a third party site that this Site has linked out to), we will share your application data with administrators of this network. Where the job was posted directly on the Getro platform, we will also share your application data with the user who posted the job. This user may be an administrator of this network, an administrator of another network operated by Getro, or an administrator of the company profile to which the job post relates. We cannot submit your application without the minimum mandatory information indicated on the application form.
We might contact you in order to offer new professional opportunities in the future.
5. How long will we keep your data for?
We will continue to process your data until (a) you unsubscribe from job alerts by following the Unsubscribe link in any email correspondence we send to you or (b) until this job board is no longer active.
If you choose to apply to a job directly on this Site (NOT if you apply on a third party site that this Site has linked out to), we will continue to process your application data until (a) you withdraw your application by sending an email to email@example.com informing us of your decision to withdraw or (b) until this job board is no longer active.
To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, as well as the applicable legal, regulatory, tax, accounting or other requirements.
6. With whom will we share your data?
We will share your personal data with such organisations within our network who may be able to offer employment opportunities that are of interest to you.
Additionally, we may share your personal data with the following categories of recipients to fulfil the purposes for which we collected the personal data.
- Professional advisors: we may share your personal data with our lawyers, accountants, insurers and other professional advisors to the extent we need to (for example, to defend ourselves against legal claims).
- Purchasers and third parties in connection with a business transaction: your personal data may be disclosed to third parties in connection with a transaction, such as a merger, sale of assets or shares, reorganisation, financing, change of control or acquisition of all or a portion of our business.
- Law enforcement, regulators and other parties for legal reasons: we may share your personal data with third parties as required by law or if we reasonably believe that such action is necessary to (i) comply with the law and the reasonable requests of law enforcement; (ii) detect and investigate illegal activities and breaches of agreements; and/or (iii) exercise or protect the rights, property, or personal safety of the Company, Getro, their respective users or others.
7. Marketing from Getro
From time to time we may contact you with information about our services, including for the purposes of sending you marketing messages and asking for your feedback.
8. Storing and transferring your personal data
Security. We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, change or damage. All personal data we collect will be stored on our secure servers. We will never send you unsolicited emails or contact you by phone requesting your account ID, password, bank account details or national identification numbers.
9. Quality of the data
As a subscriber to job alerts, if you change your email address, you should unsubscribe and resubscribe with your new email address. You can update your job preferences by following a link from the daily alert email we send you.
If you have chosen to apply to a job directly on this Site (NOT if you apply on a third party site that this Site has linked out to), must notify us of any changes or updates to the information you provide, to ensure that it is up to date and accurate. You should do so by emailing firstname.lastname@example.org.
We will diligently try to verify the authenticity of said data, reserving, if necessary and without prejudice to taking the corresponding actions, the right not to register/subscribe/process an application, or eliminate those users who have provided false or incomplete information. This verification does not imply in any case that we assume responsibility for any loss or damage that may arise from the misinterpretation or inaccuracy of the data provided. The user who provides the information is solely responsible for its accuracy.
10. Children under 14 years old
We do not process the personal data of children under 14 years of age nor do we direct our contents or information to them. If you are under 14 years of age, please do not give us personal data.
Therefore, prior to providing us with your personal data, you guarantee that you are over 14 years of age and that you are entirely responsible for this declaration and for the access and correct use of the website subject to the conditions of use and current legislation, both national and international, as well as the principles of good faith, morals and public order, and with the commitment to diligently observe any additional instruction that, in relation to such use and access, could be given by us.
You may be required by us at any time, so that we can verify your age, to provide a photocopy of your identity document that legally and unambiguously confirms your age. Failure to supply us with this information in the term indicated will entitle us to suspend or cancel your profile or any processing of your data. Any abuse or violation of these conditions and, in particular, those that affect minors, must be reported immediately to us.
11. What rights do you have?
In order to control your data, at all times, you have the right to:
- know if your personal data is being processed and, where appropriate, access it
- rectify your personal data if it was inaccurate or incomplete
- require us to delete your data if it is not necessary for the indicated purposes
- require us to limit the processing of your personal data
- transfer your personal data to another provider of your choice (portability)
- oppose the processing of your personal data or withdraw your consent at any time
- file a claim with the relevant Data Protection Authority (if you are based in the EEA), or with the Information Commissioner (https://ico.org.uk/) (if you are based in the UK) if you believe your rights have been infringed.
To do this, you only have to contact us by written communication via email: email@example.com
Please note that the above rights are not absolute, and we may be entitled to refuse requests, wholly or partly, where exceptions under the applicable law apply.
If you want to cancel your subscription, you can do so in a simple way by following the Unsubscribe link in the daily alert email we send to you.
If you want to withdraw your application, please email firstname.lastname@example.org to inform us of your decision to withdraw.
12. Links to Third Party Websites
We do not assume any responsibility derived from other privacy policies or practices performed by websites that have been accessed through hyperlinks located on this website and that are not managed directly by The FinTech Sandbox, Inc.. Therefore, we assume no responsibility in relation to the information contained in the websites of third parties or the consequences that may arise derived from such information. If any user observes that such links are contrary to law, morality and public order, you must inform us by sending an email to: email@example.com.
Annex 1 – Purpose and legal basis for processing of personal data of UK and EEA based individuals.
If you are based in the UK or the EEA, the table below provides further detail on how we use your personal data and the legal basis of such processing.
Category of Personal Data
How we use it
Legal basis for processing
Contact details (including name, email address, phone number etc.); professional details (including your educational and professional history and achievements, job preferences, and information contained in your resume); account details (including username, password, communication preferences)
To register you for our services.
Performance of a contract.
To process your application to a job made via this Site
Performance of a contract.
Administration of your account or subscription (including matching you with and sending you information regarding professional opportunities that may be of interest to you, your use of the job boards, changes to our policies, other terms and other administrative information).
Performance of a contract.
Contact details (including name, email address, phone number etc.); professional details (including your educational and professional history and achievements, job preferences, and information contained in your resume); account details (including username, password, communication preferences);
To provide you with the services we make available through the Site.
Performance of a contract.
Correspondence and communications data (including details contained in your emails, messages and other communications with us); contact details (including name, email address, phone number etc.)
To respond to queries and complaints and provide you with information and materials that you request from us.
It is in our legitimate interests to respond to your queries and provide any information and materials requested in order to maintain good customer relations.
Contact details (including email address, phone number etc.); professional details (including your educational and professional history and achievements, job preferences, and information contained in your resume); marketing preferences (including marketing consents)
Marketing and advertising (including sending you newsletters and measuring the effectiveness of our marketing).
Consent (if required under applicable law).
Where consent is not required under applicable law (for example, where you are an existing customer and have not opted out of receiving our marketing communications), such processing is necessary in our legitimate interests, namely, to develop and grow our business.
Account details (including username, password, communication preferences); technical data (including IP address, browser type, internet service provider, device identifier, your login information, time zone setting, browser plug-in types and versions, preferred language, activities, operating system and platform, and geographical location)
To correct errors and problems with the Site.
It is in our legitimate interests to monitor the Site to ensure that it functions properly and is secure.
To protect the security of systems and data.
To comply with our legal and regulatory obligations.
It is also in our legitimate interests to protect systems and data and to prevent and detect criminal activity that could be damaging for you and/or us.
Technical data (including IP address, browser type, internet service provider, device identifier, your login information, time zone setting, browser plug-in types and versions, preferred language, activities, operating system and platform, and geographical location); usage data (including URL, clickstream to, through and from the website, pages you viewed and searched for, page response times, length of visits to certain pages, referral source/exit pages, page interaction information (such as scrolling, clicks and mouse-overs), date and time pages are accessed, website navigation and search terms used)
To analyse your usage of the Site, including for the purposes of improving your experience of the Site, to ensure that content is presented in the most effective manner for you and to demonstrate the value of Getro’s service to its customers.]
It is in our legitimate interests to monitor your usage to better understand how our users use the Site for analytics and development purposes
Contact details (including name, email address, phone number etc.)
To enforce legal rights or defend or undertake legal proceedings.
It is in our legitimate interests or those of a third party, i.e., to protect our business, interests and rights or those of others.
A legitimate interest is when we have a business or commercial reason to use your personal data, so long as this is not overridden by your own rights and interests.