{"id":19334,"date":"2020-06-08T16:32:56","date_gmt":"2020-06-08T14:32:56","guid":{"rendered":"https:\/\/www.arca24.com\/en\/?page_id=19334"},"modified":"2023-12-13T16:51:56","modified_gmt":"2023-12-13T15:51:56","slug":"privacy-policy-hr-software-solutions","status":"publish","type":"page","link":"https:\/\/www.arca24.com\/en\/privacy-policy-hr-software-solutions\/","title":{"rendered":"Privacy & Compliance"},"content":{"rendered":"

Privacy Policy<\/p>\n<\/div>

<\/div>

This page describes how Arca24.com SA treats the personal information of its website\u2019s visitors as well as of those who interact with the web services that can be accessed by visiting the websites owned by the company, in accordance with the Federal Act on Data Protection (FADP) and the article 13 of the Regulation (EU) 2016\/679 \u2013 GDPR.<\/p>\n

1. Which kind of data we process <\/strong>(Article 13, paragraph 1, letter a, Article 15, letter b, GDPR)<\/p>\n

Arca24.com SA – Via Roncaglia n.5, CH-6883 Novazzano, email address privacy@arca24.com, hereinafter referred to as “Arca24” or “Data Controller”, is the Data Controller of your personal data which may concern:<\/p>\n

    \n
  1. Data provided by the user when filling in the contact form with the Data Controller or sending any other request;<\/li>\n
  2. Data on our website, which include traffic data, location, profiling, site visit, IP address, operating system used, browser used, cookies;<\/li>\n
  3. Data provided by the user through the “free demo” section.<\/li>\n<\/ol>\n

    2. The purposes of the data processing <\/strong>(Article 13, paragraph 1, letter c, d, e, f GDPR)<\/p>\n

    The above personal data are processed by the Data Controller in relation to:<\/p>\n

      \n
    1. Purposes related to the management of requests from filling in contact forms, forms, demos, etc. The legal basis for this treatment is pre-contractual.<\/li>\n<\/ol>\n

      3. Refusal to provide the personal data <\/strong>(Article 13, paragraph 2, letter and GDPR)<\/p>\n

      Apart from that specified for navigation data, necessary for the correct functioning of the site, and for cookies (have a look at the cookies policy), the user is free to provide his personal data while requesting the sending of informative material. The refusal to process the personal data makes it impossible to obtain a response to such requests.<\/p>\n

      4. Personal data retention <\/strong>(Article 13, paragraph 2, letter a GDPR)<\/p>\n

      The processing of your personal data will last only for the period of time necessary to carry out the activities related to the management of the request and the consequent obligations, including legal requirements, and in any case for a period not exceeding 12 months from the contact. Personal data relating to profiling will be kept for a maximum of 12 months.<\/p>\n

      5. How Personal Data are processed <\/strong>(art. 13, 2\u00b0 comma, lett. f, GDPR)<\/p>\n

      Personal Data are processed with automated tools for the time strictly necessary to achieve the purposes for which they were collected.<\/p>\n

      Data processing does not include automated decision-making, but it may include profiling for those activities.<\/p>\n

      Your data can be accessed by suppliers who provide services to Arca24.<\/p>\n

      Arca24 has appointed each supplier that processes your data as external data processor, with the aim of ensuring adequate protection of personal data.<\/p>\n

      In particular, your personal data will be stored at Digital Ocean whose servers are located in Frankfurt.<\/p>\n

      6. Rights of the interested party <\/strong>(Article 13, paragraph 1, letter b, and paragraph 2, letter b, GDPR) and DPO<\/strong><\/p>\n

      At any time and free of charge, the interested party may request the Data Controller to update and \/ or delete his data. These are specifically the rights referred to in the GDPR Articles: Art. 15 “Right of access”, Art. 16 “Right of rectification”, Art. 17 “Right to cancellation”, Art. 18 “Right to limitation of treatment”, Art. 20 \u201cRight to data portability\u201d.
      \nThe person in charge of the protection of personal data (Data Protection Officer) pursuant to art. 37 of the GDPR is Avv. Massimiliano Nicotra. It is possible to contact the DPO at any time for questions \/ requests \/ reports at privacy@arca24.com<\/a><\/u><\/p>\n

      The interested party can also contact and lodge a complaint with the competent authority.<\/p>\n<\/div><\/div><\/div><\/div><\/div>

      GDPR compliance<\/p>\n<\/div>

      <\/div>

      This page describes the compliance of all Arca24 web services with the relevant policies and regulations currently in force within the organizations.<\/p>\n

      In particular, the company informs the clients that all products are 100% intellectual property of Arca24 and homemade.<\/p>\n

      All products are installed on Arca24 virtual servers, meaning that the code and its intellectual property are strictly safeguarded. Arca24 virtual servers are hosted in the data centers of DigitalOcean in Frankfurt with replication in Amsterdam.<\/p>\n

      Documents uploaded by candidates are stored on an encrypted Amazon AWS S3 bucket with multiregional redundancy.<\/p>\n

      In each supply contract, it is clearly stated that the intellectual property is and remains of Arca24. Both the duplication and the view of the code are strictly forbidden. Just the use of it is allowed in accordance with Arca24 regulations defined in its commercial relations.<\/p>\n

      Data awareness<\/strong><\/span><\/h4>\n

      Thanks to data encryption, Arca24 guarantees the highest state of personal data awareness for all the software users.<\/p>\n

      Indeed, such encryption minimizes all the risks related to the processing of personal data, as it protects the information from the risk of possible undesirable accesses, unauthorized or illegal processing of the personal data.<\/p>\n

      That way Arca24 guarantees data confidentiality and protects the information by making it unintelligible towards cybercriminals.<\/p>\n

      GDPR and Data Protection Officer<\/strong><\/span><\/h4>\n

      Arca24 has already made all effort within its power to guarantee the protection of the candidates\u2019 personal data processed. Since May 28th<\/sup>, all Arca24 software have been 100% compliant to the GDPR, namely the EU General Data Protection Regulation. In particular:<\/p>\n

        \n
      • All the servers are safely hosted in DigitalOcean in Frankfurt. DigitalOcean has several ISO certifications;<\/li>\n
      • A disaster recovery plan and a continuous backup have been designed;<\/li>\n
      • The software has been developed according to privacy by design and privacy by default principles;<\/li>\n
      • All database data and the code have been anonymized and encrypted;<\/li>\n
      • The team Arca24 are aware of the current regulations and continuous training sessions on that topic have been scheduled;<\/li>\n
      • Arca24 appointed a data protection officer (DPO), i.e. an experienced Italian lawyer, to ensure effective data protection.<\/li>\n<\/ul>\n

        Server architecture<\/strong><\/span><\/h4>\n

        Arca24 uses a distributed data management model, which better meets the requirements of decentralization and cooperation among modern organizations.<\/p>\n

        As compared to a centralized system, a distributed one allows data replication on a higher number of clusters and it guarantees enhanced functionalities in terms of:<\/p>\n

          \n
        • Minimization of data loss risk<\/li>\n
        • Data reliability<\/li>\n
        • Data scalability<\/li>\n<\/ul>\n

          Data Center infrastructure and certifications<\/strong><\/span><\/h4>\n

          The infrastructure has the following characteristics:<\/p>\n

            \n
          • Tier IV Dual Datacenter Architecture<\/li>\n
          • State of the art and \u00abBanking Proof\u00bb infrastructure: high security standards, bank certified<\/li>\n
          • 100% Green Computing: powered entirely by renewable energy sources<\/li>\n
          • All components of the structure are fully redundant (power, UPS, cooling, fire protection, access lines, network)<\/li>\n
          • All servers use SSD Technology<\/li>\n
          • The servers can benefit from 40 GbE connections for a fast data transfer<\/li>\n
          • Thanks to the geographic position of the data center, the connections within Central and Southern Europe are high-performance.<\/li>\n<\/ul>\n

            Shown below are the ISO certifications of the data center:<\/p>\n

              \n
            • ISO\/IEC 27001:2013<\/li>\n
            • PCI-DSS<\/li>\n<\/ul>\n

              The management system of DigitalOcean was audited and certified as compliant with the standards.<\/p>\n<\/div><\/div><\/div><\/div><\/div>

              \"\"<\/div>

              ISO\/IEC 20000<\/h2><\/div>
              <\/div>
              \n

              Professional IT Service Management<\/p>\n<\/div><\/div><\/div>

              \"\"<\/div>

              ISO\/IEC 27001<\/h2><\/div>
              <\/div>
              \n

              Professional Security Management<\/p>\n<\/div><\/div><\/div>

              \"\"<\/div>

              ISO 14001<\/h2><\/div>
              <\/div>
              \n

              Professional Environmental Management<\/p>\n<\/div><\/div><\/div>

              \"\"<\/div>

              ISO 9001<\/h2><\/div>
              <\/div>
              \n

              Professional Quality\u00a0Management<\/p>\n<\/div><\/div><\/div>

              \"\"<\/div>

              ISO 33002<\/h2><\/div>
              <\/div>
              \n

              Capability Level 3 (Process stabilito)<\/p>\n<\/div><\/div><\/div>

              <\/div><\/div><\/div><\/div>
              <\/div><\/div>
              \"\"<\/div><\/div><\/div>
              \"\"<\/div><\/div><\/div>
              \"\"<\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div>

              Cookie Policy<\/p>\n<\/div>